last executing test programs: 4m48.390914788s ago: executing program 32 (id=136): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m43.578290968s ago: executing program 33 (id=151): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 4m26.831535575s ago: executing program 34 (id=197): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000"], 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) 4m26.560673142s ago: executing program 35 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m21.519102747s ago: executing program 36 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m11.660371521s ago: executing program 37 (id=214): syz_usb_connect(0x5, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4m11.287698261s ago: executing program 38 (id=216): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x104add2ded159621) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') 4m0.87064201s ago: executing program 7 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m59.076963304s ago: executing program 7 (id=224): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 3m58.981080947s ago: executing program 9 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000001400)='48', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x200000) r2 = accept4(r0, 0x0, &(0x7f00000001c0), 0x80000) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4d3eb374e7abb49f2d4d91ce3ff9a33643846184fb609de8ac199431cef3e048a817c1f30326f5c941bb768718245969e6444af88095a92d681b70fbc7a6bfa11a1e6c0c", @ANYRES16=r3, @ANYBLOB="00022bbd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x6a04bea9c1f9f935}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}}, 0x0) 3m58.824163551s ago: executing program 9 (id=226): r0 = epoll_create1(0x80000) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000440)={0xa0000001}) 3m58.768472122s ago: executing program 7 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m58.584946687s ago: executing program 9 (id=228): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m57.191256051s ago: executing program 9 (id=229): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$eJzs3UtsHGcdAPD/rNdrr4vSTeu0AVXCaqSCsEj8kAPmQngIWaJCVTlwtpJNvcrGrewtciuEzEscuHCoOJeDb5yQerdUznBBvfoYCZRLDsi3RTM7+/B7/dw1/H7R7Pd9881885+/dx67jjUB/N9amo7idiSxNP32Rtre2Zqv72zNj+Xd9YhI64WIYquIZDUi+bzV/SB9+XI6M18+OWo7n9QW3/3ixc6zVqvYXjkppbXxo9c7SWvFzXyKqYgYycuDRvsddc94D48c7zD//sPhQbYCTff5TjtxMGjNAzZPs/qZj1tgeCSt6+YBlYiJ7Ardug+I/OxQuNroLt6pznIAAABwTb28G7ubzWZz0HEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAdZI//z/Jp0K7PhVJ+/n/pZ7FSwMM9UJsDzoAAAAAAAAAADiT5khv66u7sRsbcaPTm2S/838za0xmry/Fh7Ee1ViLu7ERy9GIRqzFbERUegYqbSw3Gmuzfaw5d+iac5e60wAAAAAAAADwv+7XsdT9/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyDJGKkVWTTZLteiUIxIsYjopQutxnxj3b9OtsedAAAAABwBV7ejd3YiBvtdjPJPvO/ln3uH48PYzUaUYtG1KMaj7LvAlqf+gs7W/P1na35p+l0cNw//aeZ6TOMbMRoffdw+JZvZ0uU43HUsjl342G8H/Vy7yi32/EcHtevnqdjfzfXZ2SP8jLd8z/m5XCoZBkZ7WRkJo8tzePN4zPxvedn3dJUuqXZKHS++Zm8hJxP5GWyrxy8/Tmfi0KW79Rrx2ci4muf/eVnK/XVJyuP16eHZ5fOqJWJZrOVibGs1c7E6ydmYiz2ZuL+lcd/cWayfb/VaS/Fj+KnMR1T8U6sRS1+HsvRiGpMxQ+z2nL+fk5fK/syVdg79IM9rXdOiqSU/1xaZ9HTxfRmtu6NqMVP4v14FNW4n/2bi9n4VizEQiz2/IRv9XHUF0531N/5el5JT+m/z8vhkOb1Zk9ee8+5lYiX0rndOd0svXLx58biV/JKuo3fRMQPLm43z6mSZambm/Qq8dmXWn2vHp+JP2f3Cev11SdrK8sf9Lm9t/IyPY5+N1RXifT98kr6w8paN/e8X9K+Vw/tm836Jjt9hQN9tzp9Jx2ppfwe7uBIc1nf64f2zWd9t3v6Dtxvde6HABhiE9+YKJX/Vf57+dPyb8sr5bfHvz/27bE3SjH6t9HvFGdG3iq8kfw1Po1fdj//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ7f+0cdPluv16tqJlSR7+H9EXwv3VNqPczp+4SSK2YN8TjOySr1eHY+hCONUlfo/I3rmJIOOZxgqY8P25h/seQm4fPcaTz+4t/7Rx9+sPV1+r/pedXV0YWFxZnHh/vy9x7X6SKSv1ZlBRwlchu5FP2uO7u//cb9P8gYAAAAAAAAAAACuzPF/BtD+74Dn+3OCAe8iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcM0tTUdxO5KYnbk7k7Z3tubr6dSud5csRkQhIpJfRCSfRzyI1hSVnuGSo7bzSW3x3S9e7DzrjlVsL184br3+bOZTTEXESF5e1HgPzz1e0tnDNGF3SucLDi7MfwMAAP//ECsJAg==") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 3m57.084260104s ago: executing program 7 (id=231): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 3m55.331914398s ago: executing program 9 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000001400)='48', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x200000) r2 = accept4(r0, 0x0, &(0x7f00000001c0), 0x80000) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4d3eb374e7abb49f2d4d91ce3ff9a33643846184fb609de8ac199431cef3e048a817c1f30326f5c941bb768718245969e6444af88095a92d681b70fbc7a6bfa11a1e6c0c", @ANYRES16=r3, @ANYBLOB="00022bbd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x6a04bea9c1f9f935}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}}, 0x0) 3m54.670119924s ago: executing program 7 (id=235): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000003000000000000080045300000400008019078ac1e0001ac142400004500000000010000fc0100077f000001640100fa4a8122a691f8ee23f224f268aba455fddfd313f14b794945448fec74b84167a0ba790037b9377296a31bed47298862fabc57440a61b547d70368e8105499b42f6ade0c08e1f578b67cf1a61d276445ff95e27bbd59f34065bca1a32db69dab71a1296dd6c3c9eae17d103cf1e3d8dcd6a87f01d5dbb6087e97747b61de5ec3d11d23d4dccb6f80cae943a666c33b3166cd1e0f987a839e81fa6b0e49cb"], 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r1, 0x40000) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000001000020000020001200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xc0002009}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) 3m49.445411494s ago: executing program 9 (id=239): creat(0x0, 0xa1) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)={0x0, 0x15, 0xb, "1fc901b43afa1834b5df2b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getrandom(0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m48.685147753s ago: executing program 39 (id=239): creat(0x0, 0xa1) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)={0x0, 0x15, 0xb, "1fc901b43afa1834b5df2b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getrandom(0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m48.666594803s ago: executing program 7 (id=242): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AE34uLSZOFKkCApSAaE2gitINyaGx1mnClzh8CIGF25de1HcO1O8Btk08/gLpsuuxCv9E6nTerUIiQzos+zmPtyz/lxzoFh4Az33KN3f/iyvVdme/kgGnNz0bgTke6nSNGIsde3R9ebt7Y3m82t6yld27yx/k5KaeWNXz/5eiEiLnz888ovC3G49unRvY3fDi8dXj7648YXrTK1ytTtDVKebvd6g/x2ZyXttsp2ltLdH4u8LFKrWxb9Y+1F2ns7IoYp7+4uL93pF2WZ8u4wtYthGvTSoD9M+ed5q5uyLEvLS8FTnXt2l52f7ldVFVFV5+L5qKqqOh9LcSFeiOVYiW8j4sV4KV6Oi/FKXIpX47W4XPeaxvQBAAAAAAAAAAAAAAAAAADg/+Pvzv+vxprz/wAAAAAAAAAAAAAAAAAAADAFH928tb3ZbG5dT2kxovP9/s7+zug6al978NGJIq7Gavwe9en/kVF97YPm1tVUW4vvOgcP8wf7O8/V+c1xfr1+ncDD/HzdNs6vj/LpZH4hlh7k96JV5zdiNS5OHn9jYn4x3nrzWD6L1bj7WfSiE7v12I/z36yn9P6HzSfyV+p+AAAA8F+QpUcm7t+z7Gnto/yj/fWz/x94Yn89H1fmZ7t2IsrhV+280Sn6ddEZF4t/uXN2RUxxrNMtIu5VdbFwsqlxRoM2YuZLPlbM/TumoTid4nycvDPrXyam4fHXYNYzAQAAAAAAAAAA4J844+cK52PCk2XvjYvqYOrrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASwEAAP//NkHHfg==") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 3m48.645777164s ago: executing program 40 (id=242): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$eJzs3U2IXWf9B/DvuZncyc0f0mmbpvmLkKGBog0mM7nURBAaRSSLIEE33Q7JpBlyk5bJVNIi5katgitX0oWLisRFVyIi1JVY14LgxlX2AXcuslBHzsuduTNzM7mTl7lp/HzgzHnOPOd5nt/55Tzn3JcJJ8D/rLNvZm8/Rc4eO3ej3L5zu9u7c7t7dVBOMp2klUzVqxSdpPg0OZN6yf+Xv2y6K+43zut3PymmPvy4W29NNUu1f2u7dluM3LOf7Fvb2JNkti7+a4wOW6P7q5aqnwvr/T2kYi3uMmFHB4mDSVvdor9eOWpqbDT+vAWeWjfr++YWM8n+1HfX8nVAmqvDg68Mk7fttam/e3EAAADAkzLyvfyw5+7lXm7kwO6EAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+Gon5mYNEsrUF5NsXg+f/toWfqtycc7iP64FK1+vZzkw4EAAAAAAAAAB7JkXu5lxs5MNheLarv/F+pNg5WP/8v7+Z6FrOc47mRhaxkJcuZTzIz1FH7xsLKyvL81pY/T9lydXX1ZtPy5MiWJzfG1d8c6Ja/NPiM/+kBAAAAAAAAADxeP8jZ9e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaVAke+pVtRwclGfSmkqyL0m7mF3bvT3RYB+DP046AAAAAHjyOs36QPGfurBaVO/5D1Xv+/fl3VzLSpaykl4Wc7H6LKB+19/6a7/bu3O7e7Vctnb8tX/sKI6qx9SfPYweea7a46W1FmfzzXwnxzKb81nOUr6bhaxkMbP5RlVaSJGZ5tOLmTu3OxnEujXeMxu2zm+O7chQuYzvcBVJJ5eyVMV2PBfag9BbzX6Hh0b7fTvZNOKtMjvFG40xc3SxWZdH9LNm/XSYqY5871pG5prcl9l4fjjvW3O/w/Nk80jzaa19BnVwfZRyc/NID5Xz/c26zPWPn2zOd/hR2lomiiK99H9abg3OvkPb5zz54t/+dP5y69qVy5euH3t6TqOHtPmc6A5l4uWxMtErM9F/hEzse5T4H592k436Krqzq+UrVdsDWcq38nYuZjGnMpf5nM5cvpKT6ebkUF5f2j6v1Vxr7WyuHf1CUyjvST8Zujftmun7VZR5fX4or8NXupmqbvg361l6YYwsFe2MztLfR4Yy9bmmUI7xw6E7zuRtzsT8UCZe3D4Tv/z3apLrvWtXli8vvDPmeK8263LafrDx2vyrx3JAO9ccbnm+vFD+Y6W+bQyfHWXdi4O6TflqN9+4TDWdbahrp5rPdd2DZmrZ06Fbo3qq614eOUq3qjs8VLfhVU7eTm/tVUhj1ycpAGPY/9r+dudu5y+djzo/6lzunNv39enT059vZ++fp/6w5zetX7e+WryWj/L9HJh0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cy4/t77VxZ6vcXlnRY6D9VqR4W0HnOHt0ZWDVJR/6Y9Yp8jecJH+uwUprc7o36b+nFN92nenkTMndw3nt0tZGoXxprOiKpz65M6aa3Fk+TKyAfcTe3i9Ql4ck6sXH3nxPX33v/S0tWFtxbfWrx28vSpN051vzx/88Slpd7iXP2z2dnEh2fK+suASUcCAAAAAAAAAAAAjGs3/nvDiGGL/gSOFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhsOvtm9vZTZH7u+Fy5fed2t1cug3KSdr3nVJJWkuJ7SfFpcib1kpmh7or7jfP63U9+8eqHH3fX+5oa7N/a1O53/1xdrUudcY+i3yyZTbKnWT/Y9Fj9XRjqrz9uRBsUa0dYJuzoIHEwaf8NAAD//6liBFc=") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 2m15.044559901s ago: executing program 4 (id=414): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 2m13.702118214s ago: executing program 4 (id=419): socket$netlink(0x10, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x20800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) 2m11.101011989s ago: executing program 4 (id=429): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m6.212916691s ago: executing program 4 (id=437): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$eJzs3U2IXWf9B/DvuZncyc0f0mmbpvmLkKGBog0mM7nURBAaRSSLIEE33Q7JpBlyk5bJVNIi5katgitX0oWLisRFVyIi1JVY14LgxlX2AXcuslBHzsuduTNzM7mTl7lp/HzgzHnOPOd5nt/55Tzn3JcJJ8D/rLNvZm8/Rc4eO3ej3L5zu9u7c7t7dVBOMp2klUzVqxSdpPg0OZN6yf+Xv2y6K+43zut3PymmPvy4W29NNUu1f2u7dluM3LOf7Fvb2JNkti7+a4wOW6P7q5aqnwvr/T2kYi3uMmFHB4mDSVvdor9eOWpqbDT+vAWeWjfr++YWM8n+1HfX8nVAmqvDg68Mk7fttam/e3EAAADAkzLyvfyw5+7lXm7kwO6EAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+Gon5mYNEsrUF5NsXg+f/toWfqtycc7iP64FK1+vZzkw4EAAAAAAAAAB7JkXu5lxs5MNheLarv/F+pNg5WP/8v7+Z6FrOc47mRhaxkJcuZTzIz1FH7xsLKyvL81pY/T9lydXX1ZtPy5MiWJzfG1d8c6Ja/NPiM/+kBAAAAAAAAADxeP8jZ9e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaVAke+pVtRwclGfSmkqyL0m7mF3bvT3RYB+DP046AAAAAHjyOs36QPGfurBaVO/5D1Xv+/fl3VzLSpaykl4Wc7H6LKB+19/6a7/bu3O7e7Vctnb8tX/sKI6qx9SfPYweea7a46W1FmfzzXwnxzKb81nOUr6bhaxkMbP5RlVaSJGZ5tOLmTu3OxnEujXeMxu2zm+O7chQuYzvcBVJJ5eyVMV2PBfag9BbzX6Hh0b7fTvZNOKtMjvFG40xc3SxWZdH9LNm/XSYqY5871pG5prcl9l4fjjvW3O/w/Nk80jzaa19BnVwfZRyc/NID5Xz/c26zPWPn2zOd/hR2lomiiK99H9abg3OvkPb5zz54t/+dP5y69qVy5euH3t6TqOHtPmc6A5l4uWxMtErM9F/hEzse5T4H592k436Krqzq+UrVdsDWcq38nYuZjGnMpf5nM5cvpKT6ebkUF5f2j6v1Vxr7WyuHf1CUyjvST8Zujftmun7VZR5fX4or8NXupmqbvg361l6YYwsFe2MztLfR4Yy9bmmUI7xw6E7zuRtzsT8UCZe3D4Tv/z3apLrvWtXli8vvDPmeK8263LafrDx2vyrx3JAO9ccbnm+vFD+Y6W+bQyfHWXdi4O6TflqN9+4TDWdbahrp5rPdd2DZmrZ06Fbo3qq614eOUq3qjs8VLfhVU7eTm/tVUhj1ycpAGPY/9r+dudu5y+djzo/6lzunNv39enT059vZ++fp/6w5zetX7e+WryWj/L9HJh0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cy4/t77VxZ6vcXlnRY6D9VqR4W0HnOHt0ZWDVJR/6Y9Yp8jecJH+uwUprc7o36b+nFN92nenkTMndw3nt0tZGoXxprOiKpz65M6aa3Fk+TKyAfcTe3i9Ql4ck6sXH3nxPX33v/S0tWFtxbfWrx28vSpN051vzx/88Slpd7iXP2z2dnEh2fK+suASUcCAAAAAAAAAAAAjGs3/nvDiGGL/gSOFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhsOvtm9vZTZH7u+Fy5fed2t1cug3KSdr3nVJJWkuJ7SfFpcib1kpmh7or7jfP63U9+8eqHH3fX+5oa7N/a1O53/1xdrUudcY+i3yyZTbKnWT/Y9Fj9XRjqrz9uRBsUa0dYJuzoIHEwaf8NAAD//6liBFc=") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 2m3.536785297s ago: executing program 4 (id=445): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 1m59.283182073s ago: executing program 3 (id=451): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="4e813c", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) shutdown(r0, 0x1) 1m58.912717122s ago: executing program 3 (id=454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 1m58.651123899s ago: executing program 3 (id=456): r0 = epoll_create1(0x80000) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000440)={0xa0000001}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m57.509006297s ago: executing program 4 (id=459): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 1m57.505601808s ago: executing program 3 (id=460): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 1m55.719287832s ago: executing program 41 (id=459): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 1m55.693017573s ago: executing program 3 (id=465): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m54.733256396s ago: executing program 3 (id=469): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 1m53.716504542s ago: executing program 42 (id=469): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 1m26.83046822s ago: executing program 2 (id=515): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0x7, 0x4) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aa"], 0xffe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) recvmmsg(r0, &(0x7f00000000c0), 0x1, 0x40002142, 0x0) 1m26.45274291s ago: executing program 2 (id=519): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x40) bind(r1, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) 1m25.266565339s ago: executing program 2 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m22.943420817s ago: executing program 2 (id=524): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$eJzs3U2IXWf9B/DvuZncyc0f0mmbpvmLkKGBog0mM7nURBAaRSSLIEE33Q7JpBlyk5bJVNIi5katgitX0oWLisRFVyIi1JVY14LgxlX2AXcuslBHzsuduTNzM7mTl7lp/HzgzHnOPOd5nt/55Tzn3JcJJ8D/rLNvZm8/Rc4eO3ej3L5zu9u7c7t7dVBOMp2klUzVqxSdpPg0OZN6yf+Xv2y6K+43zut3PymmPvy4W29NNUu1f2u7dluM3LOf7Fvb2JNkti7+a4wOW6P7q5aqnwvr/T2kYi3uMmFHB4mDSVvdor9eOWpqbDT+vAWeWjfr++YWM8n+1HfX8nVAmqvDg68Mk7fttam/e3EAAADAkzLyvfyw5+7lXm7kwO6EAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+Gon5mYNEsrUF5NsXg+f/toWfqtycc7iP64FK1+vZzkw4EAAAAAAAAAB7JkXu5lxs5MNheLarv/F+pNg5WP/8v7+Z6FrOc47mRhaxkJcuZTzIz1FH7xsLKyvL81pY/T9lydXX1ZtPy5MiWJzfG1d8c6Ja/NPiM/+kBAAAAAAAAADxeP8jZ9e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaVAke+pVtRwclGfSmkqyL0m7mF3bvT3RYB+DP046AAAAAHjyOs36QPGfurBaVO/5D1Xv+/fl3VzLSpaykl4Wc7H6LKB+19/6a7/bu3O7e7Vctnb8tX/sKI6qx9SfPYweea7a46W1FmfzzXwnxzKb81nOUr6bhaxkMbP5RlVaSJGZ5tOLmTu3OxnEujXeMxu2zm+O7chQuYzvcBVJJ5eyVMV2PBfag9BbzX6Hh0b7fTvZNOKtMjvFG40xc3SxWZdH9LNm/XSYqY5871pG5prcl9l4fjjvW3O/w/Nk80jzaa19BnVwfZRyc/NID5Xz/c26zPWPn2zOd/hR2lomiiK99H9abg3OvkPb5zz54t/+dP5y69qVy5euH3t6TqOHtPmc6A5l4uWxMtErM9F/hEzse5T4H592k436Krqzq+UrVdsDWcq38nYuZjGnMpf5nM5cvpKT6ebkUF5f2j6v1Vxr7WyuHf1CUyjvST8Zujftmun7VZR5fX4or8NXupmqbvg361l6YYwsFe2MztLfR4Yy9bmmUI7xw6E7zuRtzsT8UCZe3D4Tv/z3apLrvWtXli8vvDPmeK8263LafrDx2vyrx3JAO9ccbnm+vFD+Y6W+bQyfHWXdi4O6TflqN9+4TDWdbahrp5rPdd2DZmrZ06Fbo3qq614eOUq3qjs8VLfhVU7eTm/tVUhj1ycpAGPY/9r+dudu5y+djzo/6lzunNv39enT059vZ++fp/6w5zetX7e+WryWj/L9HJh0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cy4/t77VxZ6vcXlnRY6D9VqR4W0HnOHt0ZWDVJR/6Y9Yp8jecJH+uwUprc7o36b+nFN92nenkTMndw3nt0tZGoXxprOiKpz65M6aa3Fk+TKyAfcTe3i9Ql4ck6sXH3nxPX33v/S0tWFtxbfWrx28vSpN051vzx/88Slpd7iXP2z2dnEh2fK+suASUcCAAAAAAAAAAAAjGs3/nvDiGGL/gSOFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhsOvtm9vZTZH7u+Fy5fed2t1cug3KSdr3nVJJWkuJ7SfFpcib1kpmh7or7jfP63U9+8eqHH3fX+5oa7N/a1O53/1xdrUudcY+i3yyZTbKnWT/Y9Fj9XRjqrz9uRBsUa0dYJuzoIHEwaf8NAAD//6liBFc=") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 1m20.700721863s ago: executing program 2 (id=532): openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000440)={0xa0000001}) 1m14.558292145s ago: executing program 2 (id=547): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m13.224266909s ago: executing program 43 (id=547): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 15.937646464s ago: executing program 8 (id=712): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 14.846056451s ago: executing program 8 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14.804571092s ago: executing program 5 (id=716): openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000440)={0xa0000001}) 14.335136823s ago: executing program 1 (id=718): bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) read$FUSE(r3, &(0x7f00000102c0)={0x2020}, 0x2020) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f00000001c0)=0x2, 0x4) recvmmsg(r4, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 14.334923114s ago: executing program 5 (id=719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000280)="341afb40a3e32a4ceb60ce00a5f938f95a628d3abd83b09001066aabfa770534b9e6b78ff7e81b", &(0x7f0000000480)="0b695c8f"}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0xfffffffffffffe92, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.993485542s ago: executing program 1 (id=726): r0 = io_uring_setup(0x68f6, &(0x7f0000000380)={0x0, 0xe6b1, 0x40, 0x4, 0x101016b}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) mkdir(0x0, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 9.447629635s ago: executing program 5 (id=728): openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='10', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000440)={0xa0000001}) 9.112260773s ago: executing program 5 (id=730): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AE34uLSZOFKkCApSAaE2gitINyaGx1mnClzh8CIGF25de1HcO1O8Btk08/gLpsuuxCv9E6nTerUIiQzos+zmPtyz/lxzoFh4Az33KN3f/iyvVdme/kgGnNz0bgTke6nSNGIsde3R9ebt7Y3m82t6yld27yx/k5KaeWNXz/5eiEiLnz888ovC3G49unRvY3fDi8dXj7648YXrTK1ytTtDVKebvd6g/x2ZyXttsp2ltLdH4u8LFKrWxb9Y+1F2ns7IoYp7+4uL93pF2WZ8u4wtYthGvTSoD9M+ed5q5uyLEvLS8FTnXt2l52f7ldVFVFV5+L5qKqqOh9LcSFeiOVYiW8j4sV4KV6Oi/FKXIpX47W4XPeaxvQBAAAAAAAAAAAAAAAAAADg/+Pvzv+vxprz/wAAAAAAAAAAAAAAAAAAADAFH928tb3ZbG5dT2kxovP9/s7+zug6al978NGJIq7Gavwe9en/kVF97YPm1tVUW4vvOgcP8wf7O8/V+c1xfr1+ncDD/HzdNs6vj/LpZH4hlh7k96JV5zdiNS5OHn9jYn4x3nrzWD6L1bj7WfSiE7v12I/z36yn9P6HzSfyV+p+AAAA8F+QpUcm7t+z7Gnto/yj/fWz/x94Yn89H1fmZ7t2IsrhV+280Sn6ddEZF4t/uXN2RUxxrNMtIu5VdbFwsqlxRoM2YuZLPlbM/TumoTid4nycvDPrXyam4fHXYNYzAQAAAAAAAAAA4J844+cK52PCk2XvjYvqYOrrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASwEAAP//NkHHfg==") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$eJzs3UtsHGcdAPD/rNdrr4vSTeu0AVXCaqSCsEj8kAPmQngIWaJCVTlwtpJNvcrGrewtciuEzEscuHCoOJeDb5yQerdUznBBvfoYCZRLDsi3RTM7+/B7/dw1/H7R7Pd9881885+/dx67jjUB/N9amo7idiSxNP32Rtre2Zqv72zNj+Xd9YhI64WIYquIZDUi+bzV/SB9+XI6M18+OWo7n9QW3/3ixc6zVqvYXjkppbXxo9c7SWvFzXyKqYgYycuDRvsddc94D48c7zD//sPhQbYCTff5TjtxMGjNAzZPs/qZj1tgeCSt6+YBlYiJ7Ardug+I/OxQuNroLt6pznIAAABwTb28G7ubzWZz0HEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAdZI//z/Jp0K7PhVJ+/n/pZ7FSwMM9UJsDzoAAAAAAAAAADiT5khv66u7sRsbcaPTm2S/838za0xmry/Fh7Ee1ViLu7ERy9GIRqzFbERUegYqbSw3Gmuzfaw5d+iac5e60wAAAAAAAADwv+7XsdT9/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyDJGKkVWTTZLteiUIxIsYjopQutxnxj3b9OtsedAAAAABwBV7ejd3YiBvtdjPJPvO/ln3uH48PYzUaUYtG1KMaj7LvAlqf+gs7W/P1na35p+l0cNw//aeZ6TOMbMRoffdw+JZvZ0uU43HUsjl342G8H/Vy7yi32/EcHtevnqdjfzfXZ2SP8jLd8z/m5XCoZBkZ7WRkJo8tzePN4zPxvedn3dJUuqXZKHS++Zm8hJxP5GWyrxy8/Tmfi0KW79Rrx2ci4muf/eVnK/XVJyuP16eHZ5fOqJWJZrOVibGs1c7E6ydmYiz2ZuL+lcd/cWayfb/VaS/Fj+KnMR1T8U6sRS1+HsvRiGpMxQ+z2nL+fk5fK/syVdg79IM9rXdOiqSU/1xaZ9HTxfRmtu6NqMVP4v14FNW4n/2bi9n4VizEQiz2/IRv9XHUF0531N/5el5JT+m/z8vhkOb1Zk9ee8+5lYiX0rndOd0svXLx58biV/JKuo3fRMQPLm43z6mSZambm/Qq8dmXWn2vHp+JP2f3Cev11SdrK8sf9Lm9t/IyPY5+N1RXifT98kr6w8paN/e8X9K+Vw/tm836Jjt9hQN9tzp9Jx2ppfwe7uBIc1nf64f2zWd9t3v6Dtxvde6HABhiE9+YKJX/Vf57+dPyb8sr5bfHvz/27bE3SjH6t9HvFGdG3iq8kfw1Po1fdj//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ7f+0cdPluv16tqJlSR7+H9EXwv3VNqPczp+4SSK2YN8TjOySr1eHY+hCONUlfo/I3rmJIOOZxgqY8P25h/seQm4fPcaTz+4t/7Rx9+sPV1+r/pedXV0YWFxZnHh/vy9x7X6SKSv1ZlBRwlchu5FP2uO7u//cb9P8gYAAAAAAAAAAACuzPF/BtD+74Dn+3OCAe8iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcM0tTUdxO5KYnbk7k7Z3tubr6dSud5csRkQhIpJfRCSfRzyI1hSVnuGSo7bzSW3x3S9e7DzrjlVsL184br3+bOZTTEXESF5e1HgPzz1e0tnDNGF3SucLDi7MfwMAAP//ECsJAg==") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 8.602985796s ago: executing program 8 (id=732): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff002892", 0x21}, {&(0x7f00000001c0)="ee", 0x1}], 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r0, 0x186a0, 0x0) 7.821147236s ago: executing program 6 (id=733): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf08000100050100", 0x1b) 7.678660309s ago: executing program 8 (id=734): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 7.430461866s ago: executing program 6 (id=735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 7.072083504s ago: executing program 8 (id=736): bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) read$FUSE(r3, &(0x7f00000102c0)={0x2020}, 0x2020) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f00000001c0)=0x2, 0x4) recvmmsg(r4, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 7.018620026s ago: executing program 0 (id=737): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) 6.935972508s ago: executing program 6 (id=738): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 6.773389302s ago: executing program 0 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000001400)='48', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x200000) r2 = accept4(r0, 0x0, &(0x7f00000001c0), 0x80000) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4d3eb374e7abb49f2d4d91ce3ff9a33643846184fb609de8ac199431cef3e048a817c1f30326f5c941bb768718245969e6444af88095a92d681b70fbc7a6bfa11a1e6c0c", @ANYRES16=r3, @ANYBLOB="00022bbd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x6a04bea9c1f9f935}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) read$midi(r5, &(0x7f0000000080)=""/233, 0xe9) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}}, 0x0) 3.994370551s ago: executing program 6 (id=740): openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='10', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000440)={0xa0000001}) 3.756832487s ago: executing program 1 (id=751): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 3.553771232s ago: executing program 6 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000280)="341afb40a3e32a4ceb60ce00a5f938f95a628d3abd83b09001066aabfa770534b9e6b78ff7e81b", &(0x7f0000000480)="0b695c8f"}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0xfffffffffffffe92, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.553506562s ago: executing program 5 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.553110922s ago: executing program 8 (id=743): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x1, 0x8, 0x30, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x6f, 0x20, {0x5, 0x25, 0x1, 0x1, "a2"}}}, {{0x9, 0x5, 0xf, 0x76f40b2c72d285e5, 0x400, 0xb, 0x0, 0x4, {0x8, 0x25, 0x1, 0x4, "37ce0645"}}}]}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.443902345s ago: executing program 0 (id=744): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 2.678849844s ago: executing program 1 (id=746): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff002892", 0x21}, {&(0x7f00000001c0)="ee", 0x1}], 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r0, 0x186a0, 0x0) 1.935464552s ago: executing program 0 (id=747): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1.434583145s ago: executing program 0 (id=748): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf08000100050100", 0x1b) 1.433932235s ago: executing program 1 (id=749): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x1c, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x1c}}, 0x4008030) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 1.170702651s ago: executing program 5 (id=750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.128890572s ago: executing program 0 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 27.86963ms ago: executing program 44 (id=750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 403.81µs ago: executing program 1 (id=753): openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='10', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000440)={0xa0000001}) 0s ago: executing program 6 (id=754): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$eJzs3U2IXWf9B/DvuZncyc0f0mmbpvmLkKGBog0mM7nURBAaRSSLIEE33Q7JpBlyk5bJVNIi5katgitX0oWLisRFVyIi1JVY14LgxlX2AXcuslBHzsuduTNzM7mTl7lp/HzgzHnOPOd5nt/55Tzn3JcJJ8D/rLNvZm8/Rc4eO3ej3L5zu9u7c7t7dVBOMp2klUzVqxSdpPg0OZN6yf+Xv2y6K+43zut3PymmPvy4W29NNUu1f2u7dluM3LOf7Fvb2JNkti7+a4wOW6P7q5aqnwvr/T2kYi3uMmFHB4mDSVvdor9eOWpqbDT+vAWeWjfr++YWM8n+1HfX8nVAmqvDg68Mk7fttam/e3EAAADAkzLyvfyw5+7lXm7kwO6EAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+Gon5mYNEsrUF5NsXg+f/toWfqtycc7iP64FK1+vZzkw4EAAAAAAAAAB7JkXu5lxs5MNheLarv/F+pNg5WP/8v7+Z6FrOc47mRhaxkJcuZTzIz1FH7xsLKyvL81pY/T9lydXX1ZtPy5MiWJzfG1d8c6Ja/NPiM/+kBAAAAAAAAADxeP8jZ9e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaVAke+pVtRwclGfSmkqyL0m7mF3bvT3RYB+DP046AAAAAHjyOs36QPGfurBaVO/5D1Xv+/fl3VzLSpaykl4Wc7H6LKB+19/6a7/bu3O7e7Vctnb8tX/sKI6qx9SfPYweea7a46W1FmfzzXwnxzKb81nOUr6bhaxkMbP5RlVaSJGZ5tOLmTu3OxnEujXeMxu2zm+O7chQuYzvcBVJJ5eyVMV2PBfag9BbzX6Hh0b7fTvZNOKtMjvFG40xc3SxWZdH9LNm/XSYqY5871pG5prcl9l4fjjvW3O/w/Nk80jzaa19BnVwfZRyc/NID5Xz/c26zPWPn2zOd/hR2lomiiK99H9abg3OvkPb5zz54t/+dP5y69qVy5euH3t6TqOHtPmc6A5l4uWxMtErM9F/hEzse5T4H592k436Krqzq+UrVdsDWcq38nYuZjGnMpf5nM5cvpKT6ebkUF5f2j6v1Vxr7WyuHf1CUyjvST8Zujftmun7VZR5fX4or8NXupmqbvg361l6YYwsFe2MztLfR4Yy9bmmUI7xw6E7zuRtzsT8UCZe3D4Tv/z3apLrvWtXli8vvDPmeK8263LafrDx2vyrx3JAO9ccbnm+vFD+Y6W+bQyfHWXdi4O6TflqN9+4TDWdbahrp5rPdd2DZmrZ06Fbo3qq614eOUq3qjs8VLfhVU7eTm/tVUhj1ycpAGPY/9r+dudu5y+djzo/6lzunNv39enT059vZ++fp/6w5zetX7e+WryWj/L9HJh0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cy4/t77VxZ6vcXlnRY6D9VqR4W0HnOHt0ZWDVJR/6Y9Yp8jecJH+uwUprc7o36b+nFN92nenkTMndw3nt0tZGoXxprOiKpz65M6aa3Fk+TKyAfcTe3i9Ql4ck6sXH3nxPX33v/S0tWFtxbfWrx28vSpN051vzx/88Slpd7iXP2z2dnEh2fK+suASUcCAAAAAAAAAAAAjGs3/nvDiGGL/gSOFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhsOvtm9vZTZH7u+Fy5fed2t1cug3KSdr3nVJJWkuJ7SfFpcib1kpmh7or7jfP63U9+8eqHH3fX+5oa7N/a1O53/1xdrUudcY+i3yyZTbKnWT/Y9Fj9XRjqrz9uRBsUa0dYJuzoIHEwaf8NAAD//6liBFc=") openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000001c0)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x5f0004}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64f, &(0x7f0000001280)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x217, &(0x7f0000000240)="$eJzsmb9rFEEUx7+ze7dziSLYWNhYeGJEs7e7p5ImRQTBUog/Ow+zSnTjyWWFS0Aw2Ghhp4Vg6z9gYZHazs5WCxXsjJ2FIqzM7Nvdyd7myOGCRd6nGL7z3s6+H8O+QA4Mw+xZvn75+fnZublLpwDsRxuS7C3jGcvQn14+OPli/vyrNx9fv7t34OFm+X1TE8afAiQWbMRKPW/k9l9JSlvvRENl0SbfZVg4QfqqEDhG+gYsXCEdQuA66TuG7mcJRqF7sx8t3VqOQk8tvloCtXTN/FRGWxsCS9STJEmapn91bf1uL4rCQVk0kyzOiGtSMa5/Or8FC/O0Vz1T93XtyeMNtXfJ7hn982HBJ92FwCLpOUi4rlu0xKj/cKN4v21c87/WZoinF4AKl52K37lFYredPThbS2I1Crts+UHF1BpLjlj24f/XPlZkH1VuaRW37NScvChbBFCEOLS1+X701LcJY4lHafqGS9T/yexOZMO8F6nP2XB9mB5/XJYvpSQc8lceL+aTmt7HjfnUQDHnO/HK/c7q2vrs8krvdphIIOie9U573pmgowdRuo7MvT/5/Gvp+TRtvL+5w58hRzgY9uJ44A+BeODn+2Boba8Ei2/737XB0vPPwszR9AF1ibpsWRUh9Qs6J7SasTOfXX2EYRiGYRiGYRiGYRiGYRhmJ5zt2yMQoB/PBP1DtIrgon76bwAAAP//NdVKtA==") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x70bd2b, 0x80000001}, 0x10}}, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.578262][ T5364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.613776][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.621576][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.713059][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.726262][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.799230][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.810806][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.822585][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.838076][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.853484][ T5364] device veth0_vlan entered promiscuous mode [ 200.870635][ T4593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.892875][ T4593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.910449][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.945793][ T5364] device veth1_vlan entered promiscuous mode [ 200.988584][ T4529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.997411][ T4529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.026710][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.045151][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.053374][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.376229][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.421377][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.716403][ T5364] device veth0_macvtap entered promiscuous mode [ 201.788356][ T5550] chnl_net:caif_netlink_parms(): no params data found [ 201.996297][ T5364] device veth1_macvtap entered promiscuous mode [ 202.142502][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.181141][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.209033][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.240672][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.254455][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.265891][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.276334][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.293123][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.305889][ T5364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.400747][ T5569] loop0: detected capacity change from 0 to 8192 [ 202.422047][ T5569] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.437204][ T26] audit: type=1800 audit(1786225489.957:29): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.244" name="file1" dev="loop0" ino=1048703 res=0 errno=0 [ 202.484582][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 202.498162][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.540618][ T5552] chnl_net:caif_netlink_parms(): no params data found [ 202.557969][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.567329][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.648015][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 203.273407][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.383193][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.423747][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.448234][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.461734][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.476317][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.489381][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.552342][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.604466][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.625212][ T5364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.770326][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.825161][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.945853][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.006867][ T5364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.064520][ T5364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.073295][ T5364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.120622][ T5364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.203143][ T5585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.246'. [ 204.575679][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 204.724956][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 205.377085][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.423908][ T5550] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.444533][ T5550] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.466028][ T5550] device bridge_slave_0 entered promiscuous mode [ 205.580006][ T5550] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.599703][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.673143][ T5550] device bridge_slave_1 entered promiscuous mode [ 205.811342][ T5592] loop0: detected capacity change from 0 to 1024 [ 205.825002][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.832251][ T5552] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.856579][ T5552] device bridge_slave_0 entered promiscuous mode [ 205.975025][ T5592] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.004437][ T4282] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 206.138361][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.175519][ T5550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.200248][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.214479][ T5552] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.233030][ T5552] device bridge_slave_1 entered promiscuous mode [ 206.256894][ T4529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.277014][ T5550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.296787][ T4529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.306701][ T4282] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.328176][ T5368] EXT4-fs (loop0): unmounting filesystem. [ 206.337570][ T4282] usb 9-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 206.404571][ T4282] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.412744][ T4282] usb 9-1: Product: syz [ 206.434608][ T4282] usb 9-1: Manufacturer: syz [ 206.439240][ T4282] usb 9-1: SerialNumber: syz [ 206.487847][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.594345][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.645096][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 206.697520][ T5550] team0: Port device team_slave_0 added [ 206.705269][ T4282] dvbdev: DVB: registering new adapter (DEC3000-s) [ 206.740848][ T5552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.761875][ T4282] usb 9-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 206.809872][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 206.854608][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.905957][ T4282] usb 9-1: selecting invalid altsetting 8 [ 206.941804][ T5550] team0: Port device team_slave_1 added [ 206.968891][ T5552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.978525][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.003522][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.055550][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.114490][ T4282] usb 9-1: USB disconnect, device number 3 [ 207.178796][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.251581][ T5550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.311362][ T5550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.343947][ T5550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.372548][ T5552] team0: Port device team_slave_0 added [ 207.401027][ T5550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.419218][ T5550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.644640][ T5550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.699533][ T5552] team0: Port device team_slave_1 added [ 207.784326][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.791490][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.826374][ T5552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.848969][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.861637][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.903741][ T5552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.159508][ T5598] loop0: detected capacity change from 0 to 8192 [ 208.188565][ T5598] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.212861][ T26] audit: type=1800 audit(1786225495.727:30): pid=5598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.259" name="file1" dev="loop0" ino=1048708 res=0 errno=0 [ 208.347056][ T5550] device hsr_slave_0 entered promiscuous mode [ 208.370173][ T5550] device hsr_slave_1 entered promiscuous mode [ 208.427225][ T5550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.457012][ T5550] Cannot create hsr debugfs directory [ 208.505309][ T5552] device hsr_slave_0 entered promiscuous mode [ 208.532696][ T5552] device hsr_slave_1 entered promiscuous mode [ 208.754571][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 208.901623][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 208.909191][ T5552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.204929][ T5552] Cannot create hsr debugfs directory [ 211.074957][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'. [ 211.933684][ T5646] loop1: detected capacity change from 0 to 1024 [ 212.141111][ T5646] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 212.668608][ T5364] EXT4-fs (loop1): unmounting filesystem. [ 212.823807][ T5658] loop8: detected capacity change from 0 to 8192 [ 212.855955][ T5658] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.941683][ T26] audit: type=1800 audit(1786225500.457:31): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.265" name="file1" dev="loop8" ino=1048710 res=0 errno=0 [ 214.483709][ T5550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.553849][ T5550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.976696][ T5550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.094130][ T5692] netlink: 20 bytes leftover after parsing attributes in process `syz.8.268'. [ 216.818851][ T5550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.087388][ T5550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.119962][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.128968][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.141453][ T5550] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.242007][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.315136][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.500905][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.508123][ T4426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.554806][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.585571][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.614946][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.622116][ T4426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.659464][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.683648][ T5719] loop8: detected capacity change from 0 to 8192 [ 219.692133][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.722813][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.732335][ T5719] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.754957][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.773880][ T26] audit: type=1800 audit(1786225507.287:32): pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.279" name="file1" dev="loop8" ino=1048712 res=0 errno=0 [ 219.812449][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.866777][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.939231][ T5725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.280'. [ 221.728944][ T11] device hsr_slave_0 left promiscuous mode [ 222.311344][ T11] device hsr_slave_1 left promiscuous mode [ 222.333314][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.375247][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.383268][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.391237][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.572305][ T11] device bridge_slave_1 left promiscuous mode [ 222.614601][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.626323][ T11] device bridge_slave_0 left promiscuous mode [ 222.632586][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.707087][ T11] device hsr_slave_0 left promiscuous mode [ 222.844809][ T11] device hsr_slave_1 left promiscuous mode [ 222.924511][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.932053][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.975320][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.014668][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.054701][ T11] device bridge_slave_1 left promiscuous mode [ 223.060999][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.115888][ T11] device bridge_slave_0 left promiscuous mode [ 223.122186][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.464888][ T11] device veth1_macvtap left promiscuous mode [ 223.471016][ T11] device veth0_macvtap left promiscuous mode [ 223.514523][ T11] device veth1_vlan left promiscuous mode [ 223.584531][ T11] device veth0_vlan left promiscuous mode [ 223.728016][ T11] device veth1_macvtap left promiscuous mode [ 223.734101][ T11] device veth0_macvtap left promiscuous mode [ 223.768618][ T11] device veth1_vlan left promiscuous mode [ 223.789239][ T11] device veth0_vlan left promiscuous mode [ 225.584010][ T11] team0 (unregistering): Port device team_slave_1 removed [ 225.628902][ T11] team0 (unregistering): Port device team_slave_0 removed [ 225.679020][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.740257][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.150688][ T11] bond0 (unregistering): Released all slaves [ 226.786221][ T11] team0 (unregistering): Port device team_slave_1 removed [ 226.854182][ T11] team0 (unregistering): Port device team_slave_0 removed [ 226.906161][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.957847][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.378456][ T11] bond0 (unregistering): Released all slaves [ 227.519156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.535551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.561178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.577633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.670075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.695241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.737884][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.758781][ T5552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.806382][ T5552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.837632][ T5552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.858797][ T5552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.183427][ T5552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.270172][ T5552] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.279177][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.293583][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.335270][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.344911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.382631][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.389843][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.430041][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.457629][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.501031][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.533641][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.540864][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.567871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.591592][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.613670][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.626920][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.657250][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.679803][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.689443][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.698786][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.708505][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.724218][ T5552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.746881][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.756588][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.766312][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.831298][ T5550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.839415][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.849030][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.102830][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.182580][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.307682][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.423481][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.463022][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.484693][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.497877][ T5552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.537828][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.568177][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.626409][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.635487][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.646304][ T5552] device veth0_vlan entered promiscuous mode [ 229.668041][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.677262][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.690895][ T5552] device veth1_vlan entered promiscuous mode [ 229.796118][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.810185][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.819003][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.828547][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.837462][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.853868][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.865765][ T5552] device veth0_macvtap entered promiscuous mode [ 229.903152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.911795][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.922865][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.933730][ T5550] device veth0_vlan entered promiscuous mode [ 229.945987][ T5552] device veth1_macvtap entered promiscuous mode [ 229.972353][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.980932][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.989306][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.000697][ T5550] device veth1_vlan entered promiscuous mode [ 230.041176][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.052523][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.067268][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.077960][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.088731][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.099463][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.111115][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.130025][ T5550] device veth0_macvtap entered promiscuous mode [ 230.141792][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.151698][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.160856][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.169735][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.180170][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.188890][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.197873][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.229817][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.240616][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.252439][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.263532][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.273646][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.284188][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.296089][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.306659][ T5550] device veth1_macvtap entered promiscuous mode [ 230.331507][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.340171][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.351248][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.364095][ T5552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.373757][ T5552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.385770][ T5552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.397645][ T5552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.446503][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.458635][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.475399][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.490994][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.502140][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.518435][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.529356][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.545795][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.560871][ T5550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.600606][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.609814][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.628760][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.646549][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.657036][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.668488][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.678584][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.689312][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.699609][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.710382][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.722190][ T5550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.764960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.779086][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.792491][ T5550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.801940][ T5550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.811851][ T5550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.821744][ T5550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.996129][ T4593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.004053][ T4593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.036687][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.136994][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.150411][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.165728][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.186388][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.198035][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.239640][ T11] device hsr_slave_0 left promiscuous mode [ 231.248440][ T11] device hsr_slave_1 left promiscuous mode [ 231.258737][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.268717][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.292268][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.302932][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.313290][ T11] device bridge_slave_1 left promiscuous mode [ 231.323059][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.335483][ T11] device bridge_slave_0 left promiscuous mode [ 231.341740][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.381068][ T11] device veth1_macvtap left promiscuous mode [ 231.387368][ T11] device veth0_macvtap left promiscuous mode [ 231.393514][ T11] device veth1_vlan left promiscuous mode [ 231.402613][ T11] device veth0_vlan left promiscuous mode [ 231.977440][ T11] team0 (unregistering): Port device team_slave_1 removed [ 232.014787][ T11] team0 (unregistering): Port device team_slave_0 removed [ 232.051925][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.090619][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.348325][ T11] bond0 (unregistering): Released all slaves [ 232.440673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.477622][ T4426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.501106][ T4426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.524848][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.764026][ T5851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'. [ 233.646962][ T5859] syz.4.249 uses obsolete (PF_INET,SOCK_PACKET) [ 234.292743][ T5874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'. [ 234.648943][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.671191][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.682379][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.701603][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.719291][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.744216][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.640237][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'. [ 236.806097][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 237.727623][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 238.318854][ T5902] loop3: detected capacity change from 0 to 1024 [ 238.391642][ T5902] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.422699][ T5905] loop1: detected capacity change from 0 to 1024 [ 238.465784][ T5905] ======================================================= [ 238.465784][ T5905] WARNING: The mand mount option has been deprecated and [ 238.465784][ T5905] and is ignored by this kernel. Remove the mand [ 238.465784][ T5905] option from the mount to silence this warning. [ 238.465784][ T5905] ======================================================= [ 238.596411][ T5902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002] [ 238.658086][ T5902] System zones: 0-1, 3-12 [ 238.727457][ T5902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 238.738713][ T5905] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.758182][ T5905] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.780517][ T26] audit: type=1800 audit(1786225526.297:33): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.292" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 238.800736][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.855764][ T5364] EXT4-fs (loop1): unmounting filesystem. [ 238.894456][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.902687][ T5873] device bridge_slave_0 entered promiscuous mode [ 238.944501][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 239.392077][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.506009][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.648122][ T5873] device bridge_slave_1 entered promiscuous mode [ 239.877838][ T5926] hub 8-0:1.0: USB hub found [ 239.884833][ T5926] hub 8-0:1.0: 1 port detected [ 240.523586][ T5552] EXT4-fs (loop3): unmounting filesystem. [ 240.573402][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.660663][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.810803][ T5873] team0: Port device team_slave_0 added [ 240.845685][ T5873] team0: Port device team_slave_1 added [ 240.982267][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 241.139390][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.186030][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.319877][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.387160][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.394198][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.598098][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.680271][ T5950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 243.044448][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 243.664696][ T5873] device hsr_slave_0 entered promiscuous mode [ 243.781316][ T5873] device hsr_slave_1 entered promiscuous mode [ 244.945115][ T5961] loop3: detected capacity change from 0 to 1024 [ 245.086094][ T5961] loop3: detected capacity change from 0 to 64 [ 245.093693][ T5961] hfs: unable to parse mount options [ 245.167501][ T5967] loop1: detected capacity change from 0 to 2048 [ 245.278119][ T5967] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 245.411775][ T5973] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.476638][ T5967] syz.1.309: attempt to access beyond end of device [ 245.476638][ T5967] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 248.300800][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.315'. [ 248.480283][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.316'. [ 250.423135][ T5873] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 250.551757][ T5873] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 250.784199][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.318'. [ 251.519971][ T5873] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 251.606342][ T5873] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 251.809095][ T5728] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 251.840920][ T6018] loop3: detected capacity change from 0 to 1024 [ 251.941777][ T6018] hfsplus: walked past end of dir [ 251.945066][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.000269][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.007848][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 252.017474][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 252.039077][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.070782][ T5728] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 252.086001][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.107967][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.127574][ T5728] usb 1-1: Product: syz [ 252.142098][ T5728] usb 1-1: Manufacturer: syz [ 252.158248][ T5728] usb 1-1: SerialNumber: syz [ 252.173842][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.197090][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.215930][ T5728] usb 1-1: config 0 descriptor?? [ 252.243652][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.250863][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.326496][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.373360][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.392607][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.413344][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.420495][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.000999][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.329'. [ 254.765030][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.785411][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.858981][ T6032] loop4: detected capacity change from 0 to 512 [ 254.927827][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.946948][ T7] usb 1-1: USB disconnect, device number 2 [ 254.967008][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.995886][ T6032] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.036139][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.055572][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.081435][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.226246][ T6047] loop1: detected capacity change from 0 to 128 [ 255.959275][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965743][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.989760][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.012581][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.073455][ T6032] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 256.157087][ T6032] EXT4-fs (loop4): 1 truncate cleaned up [ 256.162906][ T6032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.199939][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.215114][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 256.259074][ T5873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.334327][ T6054] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 256.378870][ T6054] EXT4-fs (loop4): Remounting filesystem read-only [ 256.396872][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.520748][ T5550] EXT4-fs (loop4): unmounting filesystem. [ 257.370093][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.390059][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.436346][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.484520][ T128] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 257.969494][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'. [ 258.513870][ T128] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.574543][ T128] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.584632][ T128] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 258.594770][ T128] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.611102][ T128] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 258.621900][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.630225][ T128] usb 4-1: Product: syz [ 258.634646][ T128] usb 4-1: Manufacturer: syz [ 258.639266][ T128] usb 4-1: SerialNumber: syz [ 260.467531][ T128] usb 4-1: Cannot retrieve CPort count: -110 [ 260.473724][ T128] usb 4-1: Cannot retrieve CPort count: -110 [ 261.103077][ T128] es2_ap_driver: probe of 4-1:1.0 failed with error -110 [ 261.185304][ T6090] usb 4-1: USB disconnect, device number 2 [ 262.200130][ T6099] loop3: detected capacity change from 0 to 512 [ 262.207928][ T6099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.227849][ T6099] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 262.238920][ T6099] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.344: invalid block [ 262.255025][ T6099] EXT4-fs (loop3): Remounting filesystem read-only [ 262.262029][ T6099] EXT4-fs (loop3): 1 truncate cleaned up [ 262.268114][ T6099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.391460][ T5552] EXT4-fs (loop3): unmounting filesystem. [ 262.663100][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 264.596662][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.615124][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.681126][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.735693][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.790213][ T5873] device veth0_vlan entered promiscuous mode [ 264.806046][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.849891][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.911020][ T5873] device veth1_vlan entered promiscuous mode [ 264.983142][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 265.090664][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.116465][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.351774][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.578248][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.039176][ T5873] device veth0_macvtap entered promiscuous mode [ 266.612859][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.355'. [ 268.261676][ T5873] device veth1_macvtap entered promiscuous mode [ 268.532642][ T6157] loop1: detected capacity change from 0 to 40427 [ 268.561730][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.572455][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.582821][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.593526][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.606722][ T6157] F2FS-fs (loop1): invalid crc value [ 268.641676][ T6157] F2FS-fs (loop1): Found nat_bits in checkpoint [ 268.679218][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.698169][ T6157] F2FS-fs (loop1): Start checkpoint disabled! [ 268.795722][ T6157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 268.834341][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.844227][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.394051][ T6163] loop0: detected capacity change from 0 to 512 [ 269.420955][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.447597][ T6163] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 269.515611][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.537171][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.564004][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.702194][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.268019][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.336703][ T6163] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 270.357446][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.424484][ T6163] EXT4-fs (loop0): 1 truncate cleaned up [ 270.430211][ T6163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 270.436966][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.455923][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.455944][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.459995][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.579792][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.623698][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.665608][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.701353][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.732119][ T4376] kworker/u4:9: attempt to access beyond end of device [ 270.732119][ T4376] loop1: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 270.753681][ T5873] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.795887][ T4376] kworker/u4:9: attempt to access beyond end of device [ 270.795887][ T4376] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 270.827043][ T5873] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.847125][ T5873] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.867486][ T5873] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.878711][ T5368] EXT4-fs (loop0): unmounting filesystem. [ 271.945223][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.953114][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.986400][ T4595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.000467][ T4595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.036077][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.067538][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.144331][ T4326] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 272.346216][ T4326] usb 1-1: Using ep0 maxpacket: 16 [ 272.356175][ T4326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.398843][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.367'. [ 272.408289][ T4326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.445386][ T4326] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.483613][ T4326] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 272.545224][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.597473][ T4326] usb 1-1: Product: syz [ 272.619685][ T4326] usb 1-1: Manufacturer: syz [ 272.624847][ T5728] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 272.645221][ T4326] usb 1-1: SerialNumber: syz [ 272.651996][ T6198] loop8: detected capacity change from 0 to 8192 [ 272.716133][ T6198] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.753347][ T26] audit: type=1800 audit(1786291096.268:34): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.291" name="file1" dev="loop8" ino=1048727 res=0 errno=0 [ 272.814570][ T5728] usb 4-1: Using ep0 maxpacket: 16 [ 272.822334][ T5728] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.861315][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.894057][ T4326] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 272.922597][ T5728] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 272.939101][ T4326] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 273.417556][ T5728] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 273.462534][ T4326] usb 1-1: 2:1 : can't get High Capability descriptor [ 273.474994][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.550650][ T5728] usb 4-1: Product: syz [ 273.575656][ T5728] usb 4-1: Manufacturer: syz [ 273.688428][ T5728] usb 4-1: SerialNumber: syz [ 273.761901][ T4326] usb 1-1: USB disconnect, device number 3 [ 273.858753][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.369'. [ 274.282255][ T5728] usb 4-1: USB disconnect, device number 3 [ 275.256371][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.381'. [ 276.100561][ T6236] loop1: detected capacity change from 0 to 512 [ 276.236734][ T6234] loop3: detected capacity change from 0 to 40427 [ 276.246387][ T6234] F2FS-fs (loop3): invalid crc value [ 276.250476][ T6236] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.346319][ T6234] F2FS-fs (loop3): Found nat_bits in checkpoint [ 276.386639][ T6236] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 276.420601][ T6234] F2FS-fs (loop3): Start checkpoint disabled! [ 276.455480][ T6236] EXT4-fs (loop1): 1 truncate cleaned up [ 276.463114][ T6236] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 276.494374][ T6234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 276.803925][ T5364] EXT4-fs (loop1): unmounting filesystem. [ 279.350744][ T4348] kworker/u4:8: attempt to access beyond end of device [ 279.350744][ T4348] loop3: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 279.454967][ T4348] kworker/u4:8: attempt to access beyond end of device [ 279.454967][ T4348] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 279.553063][ T6272] netlink: 60 bytes leftover after parsing attributes in process `syz.8.379'. [ 280.910447][ T6278] loop4: detected capacity change from 0 to 8192 [ 281.119887][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 281.498136][ T6278] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.584597][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 281.600272][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.650223][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.8.386'. [ 281.730942][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.746028][ T26] audit: type=1800 audit(1786291105.248:35): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.383" name="file1" dev="loop4" ino=1048729 res=0 errno=0 [ 281.859376][ T6297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 281.874499][ T7] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 281.983808][ T7] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 282.129515][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.292657][ T7] usb 1-1: Product: syz [ 282.383423][ T7] usb 1-1: Manufacturer: syz [ 282.475248][ T7] usb 1-1: SerialNumber: syz [ 283.484476][ T7] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 283.492988][ T7] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 283.572364][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.399'. [ 284.654648][ T6315] loop8: detected capacity change from 0 to 512 [ 284.959226][ T6315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.008649][ T7] usb 1-1: USB disconnect, device number 4 [ 285.131851][ T6315] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 285.187872][ T6315] EXT4-fs (loop8): 1 truncate cleaned up [ 285.244370][ T6315] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 285.325546][ T4463] udevd[4463]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.402103][ T5873] EXT4-fs (loop8): unmounting filesystem. [ 286.417747][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.403'. [ 287.076111][ T6345] loop4: detected capacity change from 0 to 8192 [ 287.106739][ T6345] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.193030][ T26] audit: type=1800 audit(1786291110.708:36): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.400" name="file1" dev="loop4" ino=1048731 res=0 errno=0 [ 287.325869][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.408'. [ 288.313410][ T6354] loop0: detected capacity change from 0 to 40427 [ 288.323363][ T6354] F2FS-fs (loop0): invalid crc value [ 288.349791][ T6354] F2FS-fs (loop0): Found nat_bits in checkpoint [ 288.386180][ T6354] F2FS-fs (loop0): Start checkpoint disabled! [ 288.422466][ T6354] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 288.687405][ T6361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.397'. [ 290.098326][ T6375] loop3: detected capacity change from 0 to 128 [ 290.145403][ T6375] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 290.314327][ T26] audit: type=1800 audit(1786291113.828:37): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.405" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 290.374348][ T6375] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 291.198304][ T6382] loop1: detected capacity change from 0 to 512 [ 291.272244][ T6382] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 291.310735][ T4335] kworker/u4:6: attempt to access beyond end of device [ 291.310735][ T4335] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 291.329710][ T6382] EXT4-fs (loop1): orphan cleanup on readonly fs [ 291.363999][ T6382] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.406: bad orphan inode 15 [ 291.382459][ T6382] ext4_test_bit(bit=14, block=18) = 1 [ 291.387966][ T6382] is_bad_inode(inode)=0 [ 291.392279][ T6382] NEXT_ORPHAN(inode)=1023 [ 291.396709][ T6382] max_ino=32 [ 291.399951][ T6382] i_nlink=0 [ 291.406564][ T6382] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #15: comm syz.1.406: corrupted xattr block 19 [ 291.434689][ T6382] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 291.525940][ T6382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 291.761087][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.970761][ T5364] EXT4-fs (loop1): unmounting filesystem. [ 293.574459][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.8.412'. [ 294.151967][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.414'. [ 294.513912][ T26] audit: type=1326 audit(1786291118.028:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.3.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ff19e0d9 code=0x7ffc0000 [ 294.669785][ T26] audit: type=1326 audit(1786291118.148:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.3.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fa2ff19e0d9 code=0x7ffc0000 [ 294.828080][ T6419] loop0: detected capacity change from 0 to 8192 [ 294.874005][ T26] audit: type=1326 audit(1786291118.148:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.3.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ff19e0d9 code=0x7ffc0000 [ 295.058094][ T6427] loop4: detected capacity change from 0 to 40427 [ 295.115015][ T6427] F2FS-fs (loop4): invalid crc value [ 295.137871][ T6419] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.318313][ T6427] F2FS-fs (loop4): Found nat_bits in checkpoint [ 295.445040][ T6427] F2FS-fs (loop4): Start checkpoint disabled! [ 295.563081][ T6427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 295.789041][ T26] audit: type=1800 audit(1786291119.028:41): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.415" name="file1" dev="loop0" ino=1048733 res=0 errno=0 [ 297.430948][ T4473] kworker/u4:16: attempt to access beyond end of device [ 297.430948][ T4473] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 298.155098][ T4331] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 298.370186][ T4331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.401247][ T4331] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.516133][ T4331] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 298.581708][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.610830][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 298.635355][ T4331] usb 4-1: Product: syz [ 298.639585][ T4331] usb 4-1: Manufacturer: syz [ 298.644216][ T4331] usb 4-1: SerialNumber: syz [ 298.894265][ C0] hrtimer: interrupt took 70190 ns [ 298.987609][ T6488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.429'. [ 299.024380][ T4326] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 299.664373][ T4326] usb 9-1: Using ep0 maxpacket: 32 [ 300.099520][ T4326] usb 9-1: config index 0 descriptor too short (expected 3659, got 75) [ 300.459715][ T4331] usb 4-1: USB disconnect, device number 4 [ 301.341192][ T4326] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.536897][ T4326] usb 9-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 301.710204][ T4326] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.892075][ T4326] usb 9-1: Product: syz [ 301.931403][ T4326] usb 9-1: Manufacturer: syz [ 301.971225][ T4326] usb 9-1: SerialNumber: syz [ 302.039456][ T4326] usb 9-1: config 0 descriptor?? [ 302.067121][ T4326] usb 9-1: can't set config #0, error -71 [ 302.096302][ T4326] usb 9-1: USB disconnect, device number 4 [ 302.634584][ T6508] loop4: detected capacity change from 0 to 8192 [ 302.686652][ T6508] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.982244][ T26] audit: type=1800 audit(1786291126.498:42): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.437" name="file1" dev="loop4" ino=1048735 res=0 errno=0 [ 303.694398][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 303.701043][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 304.537507][ T6532] loop8: detected capacity change from 0 to 40427 [ 304.559637][ T6532] F2FS-fs (loop8): invalid crc value [ 304.680425][ T6532] F2FS-fs (loop8): Found nat_bits in checkpoint [ 304.725651][ T6532] F2FS-fs (loop8): Start checkpoint disabled! [ 304.783451][ T6532] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 305.132252][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 305.414612][ T4331] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 305.629970][ T4331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.844362][ T4331] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.900568][ T4331] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 305.951643][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.042878][ T4331] usb 1-1: Product: syz [ 306.088117][ T4331] usb 1-1: Manufacturer: syz [ 306.092848][ T4331] usb 1-1: SerialNumber: syz [ 306.240917][ T6559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 308.931875][ T4331] usb 1-1: USB disconnect, device number 5 [ 309.159152][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 309.211747][ T6566] device vlan0 entered promiscuous mode [ 309.235413][ T6566] device ifb0 entered promiscuous mode [ 309.458939][ T4378] kworker/u4:10: attempt to access beyond end of device [ 309.458939][ T4378] loop8: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 309.550047][ T4378] kworker/u4:10: attempt to access beyond end of device [ 309.550047][ T4378] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 311.394740][ T4595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.706878][ T6586] loop3: detected capacity change from 0 to 8192 [ 311.786490][ T6586] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.849954][ T26] audit: type=1800 audit(1786291135.368:43): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.460" name="file1" dev="loop3" ino=1048741 res=0 errno=0 [ 311.886941][ T4595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.061287][ T4595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.371319][ T4595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.974575][ T4325] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 313.166178][ T4325] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.195348][ T4325] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.273909][ T4325] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 313.365527][ T4325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.423950][ T4325] usb 9-1: Product: syz [ 313.435047][ T4325] usb 9-1: Manufacturer: syz [ 313.439690][ T4325] usb 9-1: SerialNumber: syz [ 313.897410][ T4325] usb 9-1: USB disconnect, device number 5 [ 314.346857][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.358909][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.367311][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.377315][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.385221][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.392867][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.996452][ T6640] loop0: detected capacity change from 0 to 8192 [ 316.053387][ T6640] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.127463][ T26] audit: type=1800 audit(1786291139.648:44): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.474" name="file1" dev="loop0" ino=1048747 res=0 errno=0 [ 316.334987][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 316.627750][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 317.314213][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.320713][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.375058][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.387026][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.396086][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.419468][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.431904][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 317.444575][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.925358][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.8.479'. [ 318.290994][ T4595] device hsr_slave_0 left promiscuous mode [ 318.423544][ T4595] device hsr_slave_1 left promiscuous mode [ 318.507031][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.618647][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.644341][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 318.738188][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.745869][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.277386][ T4595] device bridge_slave_1 left promiscuous mode [ 319.296967][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.311117][ T4595] device bridge_slave_0 left promiscuous mode [ 319.319661][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.360908][ T4595] device veth1_macvtap left promiscuous mode [ 319.397730][ T4595] device veth0_macvtap left promiscuous mode [ 319.403887][ T4595] device veth1_vlan left promiscuous mode [ 319.410052][ T4595] device veth0_vlan left promiscuous mode [ 320.823050][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 320.832075][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 321.812200][ T4595] team0 (unregistering): Port device team_slave_1 removed [ 321.981677][ T4595] team0 (unregistering): Port device team_slave_0 removed [ 322.048355][ T4595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.116533][ T4595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.895122][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 322.901231][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 323.100098][ T4595] bond0 (unregistering): Released all slaves [ 323.589252][ T6672] tipc: Started in network mode [ 323.594741][ T6672] tipc: Node identity 4, cluster identity 4711 [ 323.601043][ T6672] tipc: Node number set to 4 [ 324.052566][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.081257][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.091171][ T6615] device bridge_slave_0 entered promiscuous mode [ 324.139329][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.146842][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.157013][ T6615] device bridge_slave_1 entered promiscuous mode [ 324.221954][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.257264][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.266451][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 324.305868][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 324.321457][ T6615] team0: Port device team_slave_0 added [ 324.365895][ T6615] team0: Port device team_slave_1 added [ 324.431815][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.439117][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.467251][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.505138][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.517938][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.544602][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.555445][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.579141][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.594082][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.605587][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 324.617471][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.624564][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.624611][ T7] usb 2-1: Product: syz [ 324.624626][ T7] usb 2-1: Manufacturer: syz [ 324.624640][ T7] usb 2-1: SerialNumber: syz [ 324.671326][ T6653] device bridge_slave_0 entered promiscuous mode [ 324.703203][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.716841][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.728469][ T6653] device bridge_slave_1 entered promiscuous mode [ 324.742715][ T6615] device hsr_slave_0 entered promiscuous mode [ 324.753330][ T6615] device hsr_slave_1 entered promiscuous mode [ 324.771569][ T6615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.780590][ T6615] Cannot create hsr debugfs directory [ 324.829709][ T4595] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.879177][ T7] usb 2-1: USB disconnect, device number 2 [ 324.909040][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.965134][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 324.980012][ T4595] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.002925][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.082583][ T4595] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.150012][ T6653] team0: Port device team_slave_0 added [ 325.183828][ T4595] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.216446][ T6653] team0: Port device team_slave_1 added [ 325.262715][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.270163][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.297559][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.319336][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.328449][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.354875][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.538410][ T6653] device hsr_slave_0 entered promiscuous mode [ 325.601162][ T6653] device hsr_slave_1 entered promiscuous mode [ 325.714574][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.722228][ T6653] Cannot create hsr debugfs directory [ 326.114923][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.8.490'. [ 327.054673][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 327.089870][ T6719] loop0: detected capacity change from 0 to 8192 [ 327.156371][ T6719] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.183722][ T26] audit: type=1800 audit(1786291150.698:45): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.489" name="file1" dev="loop0" ino=1048749 res=0 errno=0 [ 327.904759][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.500'. [ 330.160967][ T6615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 330.202158][ T6615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 331.186796][ T6615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 331.350546][ T6615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.620213][ T4325] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 332.845494][ T4325] usb 1-1: not running at top speed; connect to a high speed hub [ 332.875353][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 332.894313][ T4325] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 332.903426][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.960515][ T4325] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 332.985693][ T4325] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 333.184702][ T4325] usb 1-1: USB disconnect, device number 6 [ 333.198982][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.205695][ T4325] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 333.209402][ T4325] garmin_gps 1-1:1.0: device disconnected [ 333.315779][ T4595] device hsr_slave_0 left promiscuous mode [ 333.322449][ T4595] device hsr_slave_1 left promiscuous mode [ 333.329418][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.337194][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.350867][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.358979][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.367478][ T4595] device bridge_slave_1 left promiscuous mode [ 333.376882][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.396160][ T4595] device bridge_slave_0 left promiscuous mode [ 333.402431][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.432011][ T4595] device veth1_macvtap left promiscuous mode [ 333.438188][ T4595] device veth0_macvtap left promiscuous mode [ 333.445900][ T4595] device veth1_vlan left promiscuous mode [ 333.451824][ T4595] device veth0_vlan left promiscuous mode [ 334.013715][ T4595] team0 (unregistering): Port device team_slave_1 removed [ 334.053711][ T4595] team0 (unregistering): Port device team_slave_0 removed [ 334.092411][ T4595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.135025][ T4595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.423713][ T4595] bond0 (unregistering): Released all slaves [ 334.543278][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.555540][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.566493][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.587324][ T6653] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 334.621514][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.645829][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.657240][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.664447][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.695080][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.716586][ T6653] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.740466][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.754608][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.775116][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.782289][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.824949][ T6653] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.835658][ T6653] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.854577][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.866732][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.885980][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.902493][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.923835][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.945340][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.957616][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.996312][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.027895][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.044033][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.054492][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.065821][ T6615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.181780][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.224158][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.243171][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.268105][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.305123][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.325714][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.360910][ T5565] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.368149][ T5565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.395323][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.414684][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.423304][ T5565] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.430499][ T5565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.451533][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.477559][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.497859][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.517320][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.542193][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.566064][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.601593][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.619740][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.648504][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.665051][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.691034][ T6653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.708754][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.718168][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.729876][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.750187][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.762599][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.782417][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.811405][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.827880][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.862295][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.876832][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.886777][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.895313][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.911824][ T6615] device veth0_vlan entered promiscuous mode [ 335.957495][ T6615] device veth1_vlan entered promiscuous mode [ 336.014745][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.023735][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.041374][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.050932][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.070167][ T6615] device veth0_macvtap entered promiscuous mode [ 336.088369][ T6615] device veth1_macvtap entered promiscuous mode [ 336.117396][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.133007][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.150064][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.161748][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.180518][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.192532][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.209711][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.222645][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.238843][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.250550][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.265653][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.279760][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.296020][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.314855][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.344585][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.364265][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.384268][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.396037][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.411102][ T6615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.420308][ T6615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.442729][ T6615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.451781][ T6615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.462650][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.473103][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.511439][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.526045][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.537705][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.640111][ T4595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.664367][ T4595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.671990][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.717431][ T4595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.745618][ T4595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.753865][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.917066][ T6828] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 337.331217][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.8.503'. [ 340.106620][ T6848] loop0: detected capacity change from 0 to 8192 [ 340.156922][ T6848] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.313496][ T26] audit: type=1800 audit(1786291163.828:46): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.504" name="file1" dev="loop0" ino=1048754 res=0 errno=0 [ 341.272254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.307535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.505230][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.574970][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.623538][ T6653] device veth0_vlan entered promiscuous mode [ 341.686018][ T6653] device veth1_vlan entered promiscuous mode [ 341.699134][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.717586][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.750588][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.840688][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.875969][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.733977][ T6894] process 'syz.2.519' launched './file0' with NULL argv: empty string added [ 342.746863][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.767835][ T6653] device veth0_macvtap entered promiscuous mode [ 342.878451][ T6653] device veth1_macvtap entered promiscuous mode [ 343.012575][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.038102][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.061316][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.093931][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.193556][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.520'. [ 343.209031][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.371465][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.533364][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.658363][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.397834][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.490584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.710487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.213774][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.263054][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.282750][ T6924] loop0: detected capacity change from 0 to 2048 [ 346.292919][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.303849][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.314380][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.325069][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.474312][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.505374][ T6911] loop2: detected capacity change from 0 to 8192 [ 346.519623][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.541124][ T6911] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.573900][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.588987][ T6924] loop0: p2 < > p3 p4 [ 346.600048][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.615373][ T6924] loop0: p3 start 65535 is beyond EOD, truncated [ 346.626123][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.634491][ T6924] loop0: p4 size 8192 extends beyond EOD, truncated [ 346.649654][ T26] audit: type=1800 audit(1786291170.168:47): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.524" name="file1" dev="loop2" ino=1048756 res=0 errno=0 [ 346.688178][ T6653] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.705759][ T6653] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.738176][ T6653] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.777578][ T6653] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.560664][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 348.586705][ T4392] udevd[4392]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 348.862673][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.935169][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.011864][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.121904][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.220145][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.239721][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.8.534'. [ 349.467191][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.327108][ T6972] loop1: detected capacity change from 0 to 8192 [ 352.410399][ T6972] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.467133][ T26] audit: type=1800 audit(1786291175.988:48): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.541" name="file1" dev="loop1" ino=1048765 res=0 errno=0 [ 354.266992][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.746298][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.876463][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.034038][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.500849][ T4325] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 355.714752][ T4325] usb 9-1: Using ep0 maxpacket: 32 [ 355.735332][ T4325] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 355.909408][ T4325] usb 9-1: config 0 has no interface number 0 [ 356.064801][ T4325] usb 9-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 356.134478][ T4325] usb 9-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 356.230822][ T4325] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.328085][ T4325] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 356.350634][ T4325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.372200][ T4325] usb 9-1: Product: syz [ 356.382171][ T7014] loop1: detected capacity change from 0 to 8192 [ 356.390653][ T4325] usb 9-1: Manufacturer: syz [ 356.402369][ T4325] usb 9-1: SerialNumber: syz [ 356.438148][ T4325] usb 9-1: config 0 descriptor?? [ 356.474174][ T7014] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.505387][ T4325] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input5 [ 356.543077][ T26] audit: type=1800 audit(1786291180.058:49): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.556" name="file1" dev="loop1" ino=1048767 res=0 errno=0 [ 356.685223][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.701037][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.713287][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.723484][ T4325] usb 9-1: USB disconnect, device number 6 [ 356.724018][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.759807][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.767637][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.411212][ T7020] chnl_net:caif_netlink_parms(): no params data found [ 358.654296][ T4324] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 358.804354][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 358.829042][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.836643][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.844968][ T7020] device bridge_slave_0 entered promiscuous mode [ 358.923065][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.958874][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.668778][ T4324] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.792863][ T4324] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 359.866940][ T7020] device bridge_slave_1 entered promiscuous mode [ 359.984299][ T4324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.004515][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 360.055718][ T4324] usb 7-1: config 0 descriptor?? [ 360.342641][ T4324] usbhid 7-1:0.0: can't add hid device: -71 [ 360.376697][ T4324] usbhid: probe of 7-1:0.0 failed with error -71 [ 360.777107][ T4324] usb 7-1: USB disconnect, device number 2 [ 360.935917][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 361.156913][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.177732][ T7087] loop0: detected capacity change from 0 to 736 [ 361.189191][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.264548][ T4324] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 361.291639][ T7084] loop8: detected capacity change from 0 to 8192 [ 361.330617][ T7084] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.392647][ T26] audit: type=1800 audit(1786291184.908:50): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.565" name="file1" dev="loop8" ino=1048768 res=0 errno=0 [ 361.463064][ T4324] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.485126][ T4324] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 361.518057][ T4324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.546347][ T4324] usb 7-1: config 0 descriptor?? [ 361.691260][ T7020] team0: Port device team_slave_0 added [ 362.056820][ T4324] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 362.072178][ T7020] team0: Port device team_slave_1 added [ 362.113938][ T4324] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input6 [ 362.249406][ T4324] usb 7-1: USB disconnect, device number 3 [ 362.249460][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 362.297945][ T33] device hsr_slave_0 left promiscuous mode [ 362.421247][ T33] device hsr_slave_1 left promiscuous mode [ 362.548104][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.573173][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.742502][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.953733][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.975612][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 363.370491][ T33] device bridge_slave_1 left promiscuous mode [ 363.399605][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.442302][ T33] device bridge_slave_0 left promiscuous mode [ 363.516977][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.566636][ T33] device veth1_macvtap left promiscuous mode [ 363.583605][ T33] device veth0_macvtap left promiscuous mode [ 363.607936][ T33] device veth1_vlan left promiscuous mode [ 363.613856][ T33] device veth0_vlan left promiscuous mode [ 363.844344][ T4324] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 364.030573][ T4324] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 364.062849][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 64 [ 364.082314][ T4324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 364.102597][ T4324] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 364.111810][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.139140][ T4324] usb 1-1: config 0 descriptor?? [ 364.148967][ T7114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 364.447944][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 364.473195][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 364.659444][ T33] team0 (unregistering): Port device team_slave_1 removed [ 364.727753][ T33] team0 (unregistering): Port device team_slave_0 removed [ 364.777501][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.836979][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.050505][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 365.108987][ T4324] usbhid 1-1:0.0: can't add hid device: -71 [ 365.117677][ T4324] usbhid: probe of 1-1:0.0 failed with error -71 [ 365.174565][ T4324] usb 1-1: USB disconnect, device number 7 [ 365.397669][ T33] bond0 (unregistering): Released all slaves [ 365.549454][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.556662][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.594306][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.609280][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.626070][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.661377][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.730286][ T7020] device hsr_slave_0 entered promiscuous mode [ 365.739304][ T7020] device hsr_slave_1 entered promiscuous mode [ 365.750383][ T7020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.761353][ T7020] Cannot create hsr debugfs directory [ 366.502857][ T7020] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.512834][ T7020] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.522979][ T7020] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.532953][ T7020] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.620188][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.634476][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.645207][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.658979][ T7020] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.674824][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.684494][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.693101][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.700277][ T4476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.716656][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.725476][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.734542][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.743774][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.751002][ T4476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.764618][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.777974][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.805191][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.818304][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.828244][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.838059][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.855389][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.863972][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.873037][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.883072][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.900977][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.913307][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.178484][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.189811][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.209194][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.671914][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.682474][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.709358][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.720096][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.735201][ T7020] device veth0_vlan entered promiscuous mode [ 367.752491][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.761289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.776240][ T7020] device veth1_vlan entered promiscuous mode [ 367.802953][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.816559][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.825641][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.834812][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.849993][ T7020] device veth0_macvtap entered promiscuous mode [ 367.861047][ T7020] device veth1_macvtap entered promiscuous mode [ 367.881343][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.893975][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.905576][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.916383][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.928309][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.939032][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.949295][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.960064][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.971876][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.985367][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 368.000398][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 368.009674][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 368.020993][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 368.032056][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.043932][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.055184][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.066339][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.076461][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.088788][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.098905][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.109500][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.121039][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.133996][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.149866][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.165600][ T7020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.180896][ T7020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.190959][ T7020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.205134][ T7020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.307670][ T4476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.324445][ T4476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.335761][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.368116][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.380252][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.392116][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 369.619112][ T4325] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 369.869296][ T4325] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 370.989048][ T4325] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 64 [ 371.000407][ T4325] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 371.013905][ T4325] usb 9-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 371.023267][ T4325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.045217][ T4325] usb 9-1: config 0 descriptor?? [ 371.063195][ T7210] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 371.251813][ T7234] loop5: detected capacity change from 0 to 8192 [ 371.414545][ T5728] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 371.432252][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.8.589'. [ 371.511113][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.8.589'. [ 371.532200][ T7234] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 371.597797][ T7243] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 371.629321][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.731642][ T5728] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 371.912391][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.113621][ T5728] usb 1-1: config 0 descriptor?? [ 372.300758][ T26] audit: type=1800 audit(1786291195.818:51): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.582" name="file1" dev="loop5" ino=1048772 res=0 errno=0 [ 372.349164][ T5728] usbhid 1-1:0.0: can't add hid device: -71 [ 372.364762][ T5728] usbhid: probe of 1-1:0.0 failed with error -71 [ 372.397342][ T4325] usbhid 9-1:0.0: can't add hid device: -71 [ 372.403996][ T4325] usbhid: probe of 9-1:0.0 failed with error -71 [ 372.437783][ T5728] usb 1-1: USB disconnect, device number 8 [ 372.453129][ T4325] usb 9-1: USB disconnect, device number 7 [ 373.684422][ T5728] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 374.076320][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.088157][ T5728] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 374.099241][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.547781][ T5728] usb 1-1: config 0 descriptor?? [ 374.669752][ T5728] usb 1-1: can't set config #0, error -71 [ 374.691849][ T5728] usb 1-1: USB disconnect, device number 9 [ 375.531744][ T7292] loop5: detected capacity change from 0 to 8192 [ 375.626400][ T7292] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 375.678086][ T7] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 375.713755][ T26] audit: type=1800 audit(1786291199.228:52): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.604" name="file1" dev="loop5" ino=1048773 res=0 errno=0 [ 376.211811][ T7] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 376.234043][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 64 [ 376.395722][ T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 376.538392][ T7] usb 7-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 376.547883][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.727663][ T7] usb 7-1: config 0 descriptor?? [ 376.733512][ T7284] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 377.049570][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.601'. [ 377.314567][ T4324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 377.577384][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.747661][ T4324] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 377.822558][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.833789][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.601'. [ 377.882198][ T4324] usb 2-1: config 0 descriptor?? [ 378.131361][ T4324] usbhid 2-1:0.0: can't add hid device: -71 [ 378.151062][ T4324] usbhid: probe of 2-1:0.0 failed with error -71 [ 378.162652][ T7304] loop8: detected capacity change from 0 to 32768 [ 378.189162][ T4324] usb 2-1: USB disconnect, device number 3 [ 378.316894][ T7304] XFS (loop8): Mounting V5 Filesystem [ 378.407435][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.414141][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.445267][ T7] usbhid 7-1:0.0: can't add hid device: -71 [ 378.457819][ T7] usbhid: probe of 7-1:0.0 failed with error -71 [ 378.540014][ T7] usb 7-1: USB disconnect, device number 4 [ 378.604356][ T7304] XFS (loop8): Ending clean mount [ 378.677864][ T7304] XFS (loop8): Quotacheck needed: Please wait. [ 378.738237][ T4324] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 378.795780][ T7304] XFS (loop8): Quotacheck: Done. [ 378.937305][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.036924][ T4324] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 379.153199][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.268398][ T5873] XFS (loop8): Unmounting Filesystem [ 379.337963][ T4324] usb 2-1: config 0 descriptor?? [ 380.126628][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.156281][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.304951][ T4324] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 380.322769][ T4324] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 380.384275][ T7362] loop0: detected capacity change from 0 to 8192 [ 380.425701][ T7362] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.510431][ T26] audit: type=1800 audit(1786291204.028:53): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.622" name="file1" dev="loop0" ino=1048775 res=0 errno=0 [ 380.756621][ T5728] usb 2-1: USB disconnect, device number 4 [ 380.756801][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 382.682198][ T5728] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 383.206219][ T5728] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 383.244368][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 64 [ 383.324917][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 383.378008][ T5728] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 383.569829][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.581017][ T5728] usb 2-1: config 0 descriptor?? [ 383.587803][ T7386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.888132][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 384.936471][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 386.160267][ T5728] usbhid 2-1:0.0: can't add hid device: -71 [ 386.182961][ T5728] usbhid: probe of 2-1:0.0 failed with error -71 [ 386.259173][ T5728] usb 2-1: USB disconnect, device number 5 [ 386.498292][ T7427] loop1: detected capacity change from 0 to 8192 [ 386.543017][ T7427] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 386.574447][ T4326] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 386.743140][ T26] audit: type=1800 audit(1786291210.258:54): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.640" name="file1" dev="loop1" ino=1048777 res=0 errno=0 [ 386.867193][ T4326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.432703][ T4326] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 387.441925][ T4326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.473112][ T4326] usb 6-1: config 0 descriptor?? [ 387.688128][ T4326] usbhid 6-1:0.0: can't add hid device: -71 [ 387.724336][ T4326] usbhid: probe of 6-1:0.0 failed with error -71 [ 388.084486][ T4326] usb 6-1: USB disconnect, device number 2 [ 389.364601][ T4326] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 390.808852][ T7468] loop1: detected capacity change from 0 to 8192 [ 390.882526][ T7468] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.075965][ T26] audit: type=1800 audit(1786291214.598:55): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.655" name="file1" dev="loop1" ino=1048779 res=0 errno=0 [ 391.215761][ T7488] qfq: no options [ 394.324564][ T5498] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 394.516417][ T5498] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 394.564368][ T5498] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 64 [ 394.610257][ T5498] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 394.653289][ T5498] usb 6-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 394.683247][ T5498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.743658][ T5498] usb 6-1: config 0 descriptor?? [ 394.775163][ T7509] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 395.312442][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.654'. [ 396.215412][ T5498] usbhid 6-1:0.0: can't add hid device: -71 [ 396.221503][ T5498] usbhid: probe of 6-1:0.0 failed with error -71 [ 396.246376][ T5498] usb 6-1: USB disconnect, device number 4 [ 396.723143][ T7545] loop0: detected capacity change from 0 to 8192 [ 396.814882][ T7545] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.984311][ T26] audit: type=1800 audit(1786291220.498:56): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.666" name="file1" dev="loop0" ino=1048781 res=0 errno=0 [ 398.531747][ T7545] sched: RT throttling activated [ 400.174121][ T7594] capability: warning: `syz.8.676' uses 32-bit capabilities (legacy support in use) [ 400.281375][ T7594] program syz.8.676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.003378][ T7626] loop0: detected capacity change from 0 to 8192 [ 404.071757][ T7626] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.263756][ T26] audit: type=1800 audit(1786291227.778:57): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.682" name="file1" dev="loop0" ino=1048783 res=0 errno=0 [ 410.380331][ T7689] loop1: detected capacity change from 0 to 8192 [ 410.435703][ T7689] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.502743][ T26] audit: type=1800 audit(1786291234.018:58): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.699" name="file1" dev="loop1" ino=1048785 res=0 errno=0 [ 412.276333][ T7729] loop0: detected capacity change from 0 to 512 [ 412.437640][ T7729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 412.459347][ T7729] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.573384][ T7729] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 413.348466][ T5368] EXT4-fs (loop0): unmounting filesystem. [ 418.929629][ T5498] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 419.135123][ T5498] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 419.175123][ T5498] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.214317][ T5498] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.244598][ T5498] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.285002][ T5498] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.294042][ T5498] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.354383][ T5498] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.384989][ T5498] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.394096][ T5498] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.471106][ T5498] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.514985][ T5498] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.544346][ T5498] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.624303][ T5498] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.661441][ T7809] loop5: detected capacity change from 0 to 8192 [ 419.696528][ T5498] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.719858][ T7809] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 419.726362][ T5498] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.914655][ T26] audit: type=1800 audit(1786291243.408:59): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.730" name="file1" dev="loop5" ino=1048787 res=0 errno=0 [ 420.144002][ T5498] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.349577][ T5498] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.419151][ T5498] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.536807][ T5498] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.615064][ T5498] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.664252][ T5498] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.708721][ T5498] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.749510][ T5498] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.775283][ T5498] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.809351][ T5498] usb 2-1: config 0 interface 0 has no altsetting 0 [ 421.098576][ T5498] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 421.108123][ T5498] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 421.232080][ T5498] usb 2-1: Product: syz [ 421.242436][ T5498] usb 2-1: Manufacturer: syz [ 421.247525][ T5498] usb 2-1: SerialNumber: syz [ 421.256280][ T5498] usb 2-1: config 0 descriptor?? [ 421.282627][ T5498] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 421.498330][ T5498] usb 2-1: USB disconnect, device number 6 [ 421.539471][ T5498] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 425.154446][ T4324] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 425.380506][ T4324] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.634919][ T4324] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 425.644695][ T4324] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.654528][ T4324] usb 9-1: config 0 descriptor?? [ 426.366821][ T4324] usbhid 9-1:0.0: can't add hid device: -71 [ 426.373251][ T4324] usbhid: probe of 9-1:0.0 failed with error -71 [ 426.397863][ T4324] usb 9-1: USB disconnect, device number 8 [ 426.984423][ T4324] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 427.196154][ T4324] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.246837][ T4324] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 427.261234][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.341985][ T4324] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.412451][ T4324] usb 9-1: config 0 descriptor?? [ 428.090081][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.163351][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.174599][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.224924][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.360389][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.386702][ T4324] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 428.405864][ T4324] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input8 [ 428.490349][ C0] ================================================================================ [ 428.499708][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 428.508359][ C0] index 68 is out of range for type 'const int[34]' [ 428.514982][ C0] CPU: 0 PID: 7888 Comm: syz.0.761 Not tainted syzkaller #0 [ 428.522298][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.532389][ C0] Call Trace: [ 428.535703][ C0] [ 428.538591][ C0] dump_stack_lvl+0x188/0x24e [ 428.543329][ C0] ? show_regs_print_info+0x12/0x12 [ 428.548569][ C0] ? load_image+0x410/0x410 [ 428.553119][ C0] ubsan_epilogue+0xa/0x30 [ 428.557581][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 428.563360][ C0] aiptek_irq+0x1e87/0x28f0 [ 428.567932][ C0] ? kcov_remote_start+0x86/0x7e0 [ 428.573000][ C0] ? led_trigger_blink_setup+0x37/0x230 [ 428.578588][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 428.584016][ C0] dummy_timer+0xa21/0x3420 [ 428.588597][ C0] ? dummy_free_streams+0x520/0x520 [ 428.593831][ C0] __hrtimer_run_queues+0x522/0xc90 [ 428.599081][ C0] ? dummy_free_streams+0x520/0x520 [ 428.604328][ C0] ? hrtimer_interrupt+0x980/0x980 [ 428.609490][ C0] hrtimer_run_softirq+0x173/0x290 [ 428.614651][ C0] handle_softirqs+0x291/0x910 [ 428.619509][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 428.624409][ C0] ? do_softirq+0x210/0x210 [ 428.628942][ C0] ? hrtimer_interrupt+0x775/0x980 [ 428.634094][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 428.639335][ C0] __irq_exit_rcu+0x13b/0x230 [ 428.644051][ C0] ? irq_exit_rcu+0x20/0x20 [ 428.648610][ C0] irq_exit_rcu+0x5/0x20 [ 428.652889][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 428.658575][ C0] [ 428.661537][ C0] [ 428.664495][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 428.670531][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 428.675868][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 428.695555][ C0] RSP: 0018:ffffc900033af600 EFLAGS: 00000206 [ 428.701673][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3b094743d6689f00 [ 428.709692][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 428.717757][ C0] RBP: ffffc900033af718 R08: dffffc0000000000 R09: 1ffffffff216205c [ 428.725785][ C0] R10: dffffc0000000000 R11: fffffbfff216205d R12: 0000000000000000 [ 428.733798][ C0] R13: 1ffff92000675ecc R14: 0000000000000246 R15: dffffc0000000000 [ 428.741838][ C0] ? read_lock_is_recursive+0x10/0x10 [ 428.747291][ C0] ? sk_filter_trim_cap+0x5ac/0x830 [ 428.752529][ C0] ? wake_bit_function+0x200/0x200 [ 428.757686][ C0] ? __rwlock_init+0x140/0x140 [ 428.762513][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 428.767763][ C0] _raw_spin_lock+0x2a/0x40 [ 428.772314][ C0] ? unix_dgram_sendmsg+0x942/0x16f0 [ 428.777665][ C0] unix_dgram_sendmsg+0x942/0x16f0 [ 428.782846][ C0] ? unix_dgram_poll+0x680/0x680 [ 428.787831][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 428.794316][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 428.799912][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 428.805241][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 428.810764][ C0] ? unix_dgram_poll+0x680/0x680 [ 428.815780][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 428.820597][ C0] ? __might_fault+0xa6/0x120 [ 428.825337][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 428.830407][ C0] ? __import_iovec+0x306/0x510 [ 428.835312][ C0] ? import_iovec+0x6f/0xa0 [ 428.839870][ C0] ___sys_sendmsg+0x2a2/0x360 [ 428.844594][ C0] ? preempt_schedule+0xbc/0xd0 [ 428.849493][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 428.854335][ C0] ? __might_fault+0xc2/0x120 [ 428.859048][ C0] ? __might_fault+0xa6/0x120 [ 428.863761][ C0] __sys_sendmmsg+0x2c3/0x510 [ 428.868496][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 428.873576][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 428.879521][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 428.885573][ C0] ? lock_chain_count+0x20/0x20 [ 428.890473][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 428.895369][ C0] do_syscall_64+0x4c/0xa0 [ 428.899833][ C0] ? clear_bhb_loop+0x60/0xb0 [ 428.904556][ C0] ? clear_bhb_loop+0x60/0xb0 [ 428.909275][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.915213][ C0] RIP: 0033:0x7f39d5f9e0d9 [ 428.919693][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.939330][ C0] RSP: 002b:00007f39d6d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 428.947781][ C0] RAX: ffffffffffffffda RBX: 00007f39d6225fa0 RCX: 00007f39d5f9e0d9 [ 428.955797][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 428.963804][ C0] RBP: 00007f39d6035024 R08: 0000000000000000 R09: 0000000000000000 [ 428.971811][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.979841][ C0] R13: 00007f39d6226038 R14: 00007f39d6225fa0 R15: 00007ffece4cb198 [ 428.987862][ C0] [ 428.990912][ C0] ================================================================================ [ 429.000234][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 429.007471][ C0] CPU: 0 PID: 7888 Comm: syz.0.761 Not tainted syzkaller #0 [ 429.014795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.024878][ C0] Call Trace: [ 429.028218][ C0] [ 429.031089][ C0] dump_stack_lvl+0x188/0x24e [ 429.035851][ C0] ? memcpy+0x3c/0x60 [ 429.039864][ C0] ? show_regs_print_info+0x12/0x12 [ 429.045101][ C0] ? load_image+0x410/0x410 [ 429.049651][ C0] panic+0x2d3/0x710 [ 429.053594][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 429.058155][ C0] check_panic_on_warn+0x80/0xa0 [ 429.063138][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 429.068928][ C0] aiptek_irq+0x1e87/0x28f0 [ 429.073471][ C0] ? kcov_remote_start+0x86/0x7e0 [ 429.078536][ C0] ? led_trigger_blink_setup+0x37/0x230 [ 429.084118][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 429.089545][ C0] dummy_timer+0xa21/0x3420 [ 429.094136][ C0] ? dummy_free_streams+0x520/0x520 [ 429.099376][ C0] __hrtimer_run_queues+0x522/0xc90 [ 429.104635][ C0] ? dummy_free_streams+0x520/0x520 [ 429.109880][ C0] ? hrtimer_interrupt+0x980/0x980 [ 429.115044][ C0] hrtimer_run_softirq+0x173/0x290 [ 429.120199][ C0] handle_softirqs+0x291/0x910 [ 429.125000][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 429.129890][ C0] ? do_softirq+0x210/0x210 [ 429.134427][ C0] ? hrtimer_interrupt+0x775/0x980 [ 429.139581][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 429.144846][ C0] __irq_exit_rcu+0x13b/0x230 [ 429.149574][ C0] ? irq_exit_rcu+0x20/0x20 [ 429.154134][ C0] irq_exit_rcu+0x5/0x20 [ 429.158405][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 429.164084][ C0] [ 429.167060][ C0] [ 429.170059][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 429.176109][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 429.181451][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 429.201076][ C0] RSP: 0018:ffffc900033af600 EFLAGS: 00000206 [ 429.207199][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3b094743d6689f00 [ 429.215215][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 429.223231][ C0] RBP: ffffc900033af718 R08: dffffc0000000000 R09: 1ffffffff216205c [ 429.231298][ C0] R10: dffffc0000000000 R11: fffffbfff216205d R12: 0000000000000000 [ 429.239308][ C0] R13: 1ffff92000675ecc R14: 0000000000000246 R15: dffffc0000000000 [ 429.247339][ C0] ? read_lock_is_recursive+0x10/0x10 [ 429.252764][ C0] ? sk_filter_trim_cap+0x5ac/0x830 [ 429.258025][ C0] ? wake_bit_function+0x200/0x200 [ 429.263203][ C0] ? __rwlock_init+0x140/0x140 [ 429.268017][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 429.273268][ C0] _raw_spin_lock+0x2a/0x40 [ 429.277817][ C0] ? unix_dgram_sendmsg+0x942/0x16f0 [ 429.283155][ C0] unix_dgram_sendmsg+0x942/0x16f0 [ 429.288339][ C0] ? unix_dgram_poll+0x680/0x680 [ 429.293320][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 429.299798][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 429.305408][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 429.310735][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 429.316247][ C0] ? unix_dgram_poll+0x680/0x680 [ 429.321243][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 429.326084][ C0] ? __might_fault+0xa6/0x120 [ 429.330815][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 429.335886][ C0] ? __import_iovec+0x306/0x510 [ 429.340798][ C0] ? import_iovec+0x6f/0xa0 [ 429.345357][ C0] ___sys_sendmsg+0x2a2/0x360 [ 429.350077][ C0] ? preempt_schedule+0xbc/0xd0 [ 429.354985][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.359865][ C0] ? __might_fault+0xc2/0x120 [ 429.364595][ C0] ? __might_fault+0xa6/0x120 [ 429.369305][ C0] __sys_sendmmsg+0x2c3/0x510 [ 429.374028][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 429.379097][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 429.385038][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 429.391068][ C0] ? lock_chain_count+0x20/0x20 [ 429.395971][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 429.400877][ C0] do_syscall_64+0x4c/0xa0 [ 429.405346][ C0] ? clear_bhb_loop+0x60/0xb0 [ 429.410072][ C0] ? clear_bhb_loop+0x60/0xb0 [ 429.414826][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.420766][ C0] RIP: 0033:0x7f39d5f9e0d9 [ 429.425221][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.444864][ C0] RSP: 002b:00007f39d6d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.453325][ C0] RAX: ffffffffffffffda RBX: 00007f39d6225fa0 RCX: 00007f39d5f9e0d9 [ 429.461335][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 429.469349][ C0] RBP: 00007f39d6035024 R08: 0000000000000000 R09: 0000000000000000 [ 429.477360][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.485373][ C0] R13: 00007f39d6226038 R14: 00007f39d6225fa0 R15: 00007ffece4cb198 [ 429.493402][ C0] [ 429.497049][ C0] Kernel Offset: disabled [ 429.501390][ C0] Rebooting in 86400 seconds..