last executing test programs: 11m32.883420466s ago: executing program 4 (id=666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6f}, 0x94) 11m32.038077087s ago: executing program 4 (id=669): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) 11m31.885983451s ago: executing program 4 (id=671): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 11m31.609378052s ago: executing program 4 (id=676): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f0000000040)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}, {@nodiscard}, {@grpquota}, {@noload}]}, 0x3, 0x447, &(0x7f0000000d80)="$eJzs28tvG8UfAPDvrpP019cvoZRHH0CgICIeSZMW6IELCCQOICHBoRxNklalboOaINGqgoBQOaJK3BHHSvwFnOCCeFyQuMKBG6pUoVxaOBmtvZs4rp0mqR0X/PlIm8zsjjPz9e7YMzvZAPrWaPYjidgVEb9GxHA9u7rAaP3XjaWL038tXZxOolp948+kVu760sXpomjxup15ZiyNSD9J4kCLeufPXzhdrlRmz+X5iYUz707Mn7/w9Kkz5ZOzJ2fPTh07dvTI5HPPTj3TkTizNl3f/8HcwX2vvHX5tenjl9/+4aukiL8pjg4ZXevgY9Vqh6vrrd0N6WSghw1hQ0oRkZ2uwVr/H45SrJy84Xj54542DuiqarVa3dn+8GIV+A9LotctAHqj+KLP5r/FtkVDjzvCtRfqE6As7hv5Vj8yEGleZrBpfttJoxFxfPHvL7ItunMfAgBglW+y8c9TrcZ/adzbUO7/+drQSETcFRF7IuLuiNgbEfdE1MreFxH3b7D+5kWSm8c/6dVNBbZO2fjv+Xxta/X4rxj9xUgpz+2uxT+YnDhVmT2cvydjMbgty0+uUce3L/3yWbtjjeO/bMvqL8aCeTuuDmxb/ZqZ8kL5dmJudO2jiP0DreJPllcCkojYFxH7N1nHqSeuHGx37Nbxr6ED60zVLyMer5//xWiKv5CsvT458b+ozB6eKK6Km/3486XX29V/W/F3QHb+d7S8/pfjH0ka12vnN17Hpd8+bTun2ez1P5S8WUsP5fveLy8snJuMGEperTe6cf/UymuLfFE+i3/sUOv+vydW3okDEZFdxA9ExIMR8VDe9ocj4pGIOLRG/N+/+Og7m4+/u7L4ZzZ0/lcSQ9G8p3WidPq7r1dVOrKR+LPzf7SWGsv3rOfzbz3t2tzVDAAAAP8+aUTsiiQdX06n6fh4/f/l98aOtDI3v/Dkibn3zs7UnxEYicG0uNM13HA/dDKf1hf5qab8kfy+8eel7bX8+PRcZabXwUOf29mm/2f+KPW6dUDXeV4L+pf+D/1L/4f+pf9DX7rye+v+v70XjQG2Xqvv/w970A5g6zX1f8t+0EfM/6F/6f/Qv/R/6Evz2+PWD8l3JhFJbFldEkUijYiu/OVI74wAJbqQ+Klc6fUnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8EwAA///8uOVG") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) r1 = gettid() ioctl$VT_RESIZEX(r0, 0x560a, 0x0) rt_sigqueueinfo(r1, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x80}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 11m30.730281086s ago: executing program 4 (id=687): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='veth1_macvtap\x00') 11m26.031464372s ago: executing program 4 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @empty, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffd8}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x68}}], 0x1, 0x404c851) 11m25.44324116s ago: executing program 32 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @empty, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffd8}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x68}}], 0x1, 0x404c851) 10m44.340816748s ago: executing program 5 (id=870): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ptrace$peek(0xffffffffffffffff, r0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r4, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) 10m40.415272766s ago: executing program 5 (id=880): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10m39.466022096s ago: executing program 5 (id=884): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 10m38.478835225s ago: executing program 5 (id=886): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) r4 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r4, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) 10m36.902105451s ago: executing program 5 (id=897): r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x515042, 0x1a8) pwrite64(r0, &(0x7f0000000880)='u', 0xf7d, 0x83) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0xc4) r1 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000244a0362afdc27b2fd51a33f40a65b2b1e756447cdb5532149e39329ee613bb4a2e6a25025c99d4056915ba2278dd88ccd88aefb3df98ea1336ba6218a652d937d7dc85b7dac21b81580d5a64f5fa14447e8db9703d6d63363941775403ab"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x240009ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}], 0x2}, 0x44864) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 10m30.818539427s ago: executing program 5 (id=924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@remote, @in=@local, 0x1, 0xf14, 0x4e23, 0x5, 0xa, 0x0, 0xa0, 0x3a, 0x0, r1}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xfffffffffffffffc, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffe}, {0xffffff7fffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd25, 0x3508, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 10m30.457396432s ago: executing program 33 (id=924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@remote, @in=@local, 0x1, 0xf14, 0x4e23, 0x5, 0xa, 0x0, 0xa0, 0x3a, 0x0, r1}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xfffffffffffffffc, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffe}, {0xffffff7fffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd25, 0x3508, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9m24.165444316s ago: executing program 6 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x11}) 9m22.678360887s ago: executing program 6 (id=1291): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x4000054) r5 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40582, 0x0) unshare(0x20000600) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) 9m21.363527122s ago: executing program 6 (id=1294): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0xfffffffc, 0xfffffffc, 0xfffffff2, 0x84, 0x1}) 9m21.054056278s ago: executing program 6 (id=1297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x884) write(r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) pread64(r3, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 9m20.478032187s ago: executing program 6 (id=1299): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsopen(0x0, 0x1) 9m15.354933068s ago: executing program 6 (id=1326): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 8m59.172641027s ago: executing program 34 (id=1326): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 8m35.874476182s ago: executing program 0 (id=1505): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x0, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6060, 0x1) syz_fuse_handle_req(r0, &(0x7f000000e0c0)="55ca1066fc8ee2140676e0051ae60df9df67d2d47450906eaaf0e443104b17ef1246d15822b8aa49d0b41fd01781db3b129ccba3d01686df676f9d6f019536762a458003e29cb92297647b72317838f58532ca5299c0db2913ee0a7c4a69e9a9a40de25606ff272b6485058c539720299896b320c3b0c0cfa694bcb2b8a56b32eac8854df461d01e890dc43323456c4b05bd0160eb70b099fd1498b39b873d91eaf10769dbdd496ec20e1e0bdea7dd4761b36f0c3cb537e389aea0154c0c22a226bb14e490b72d7a2c724c39f99b6be97ed511b6fadcbf0b0593f3a3dc07c328bde074d04f5329f0044823d6b7f6a70370ce18c7b8624d70fe4abbfedf1268f1e8353efe001f23f32ebae5c58c8b8918d15a81ca04d00c375b73e62ca07f7d723195abb9974832fe282b1cf475f7a5f271389c70be6f97533d524fa800b7e221a1b02d22c1d3898dea3b2c782d02de5147ca738711c123bf2908f7c5eea112b74e618861dc5cfdb520f47cd9bb6959745b73239ffd4c9fb026a2f071fa9926fdf5595d6bc4303e90793dd3acf371889cefa52ee03fa72a23668e34693c8197589d8bc67508b2697dd409c2cb7596529baca5fad7d738ccfb0181d9dcfd34b5bc8fed36543ca0136a6107b0eb9996fd6ae2312bbfc557c01068188d21715985e45c4ca69ef9802b9797caa387eef627421d4911cbc6ba9ef78750b69c02cfbcff0e0bc5affe22c806f679f1d12756bbbf4f0277e3e1621556a2669eb29917972a52f9e66eb6236d166ed23847be6eadc203cc1a2ee97e85971805fa0f81c97bfabe88e1b23995d2deeac1ad20716c482490b42bcd5c377b8b8a25e72cbfe606341c58316f16f4d529350a0e12abfc9af11f2136fcb26ccba8a604388c25d3596bba2ccb4558a7966f65467307f2d5d5389ac1fd2d824b10a6ff17add5412ae7b2e26fa9107df9cac188e10066e175771c8b67dd6035e4dc7d6cde850c355e3ff6a98ffb01d6ff633180070d2c731d5e4d52420ef905fc70baff1db9699005c9e732677f202096754a1d2c4cb067dea58ba15eac0faa1928ac2f7e3e0e2b88123324b2eda90f286105a55c9543e0171eb27d170265350652b5978f3ede49f9e27a63e7089b0fdd42c8eea0974e0400160064afe14b752e73a96175154f81976aa3789d6981136f89df3cdbb10529ccecc8d74f9a158605d028a6bf8d32d95d315acfb32bec802ba94570ea74b849fed88e9d223640232c309d1b36af91296ecb87cbdbce45e46bf3d3c3f9ae84cbc6cba4579d8ab5f0fbd3c2b4ef74bfd5f777e8c7e3be010cd9fbe12b8fdbd7207b2f7d55f7bbd1a0b8f3ca7fa7ef07f32dc67e14c9b9bd3299fc72e8b841768ed39b69cc2ff84e76b08ad4717808c5991b54a6afaed22a448de9f8d2caacda19a1b88d6147bec84ab9dbd852958932fe37421668d3b4447928ee316ffbf3d561c735b72efc8a25760b2ae3df8159c9f89ca70ce9d253a379a0685a658228d5dbb4db13a623ac5f5c1f455a561012f1d4e85c62a602a961770dc53d4de8630b77c4b5b3b4436324200bf6da95d8dd81c229dbf78e874ebcde8dfc491a77e7e3ee99ad34d2b3958e02d6cd10e423838b4f7451d1750cd85aae3a9a03d563f51d3fec7298a1f9c54cca7b84f8ced27b77ffc58453860ad61f87cee59470d560e008fa882b149440f57c976320c9584fc1de549887aec50eafa7caeefdd99252eba2e54ce7b5117b2688db4001aa75dd14d0fa8ec7351287a0e4e615d048796bde9bd1b515a4dd301e3bea8c00a5a70bd6c2cc83283671c5b8920c42bcd9b977fea91bc3aaf3c9099821f694ccb77c3052145870c4b330d38a89a78c31f10bf4772746efe91ae2d8501333a08614cf122d9ec3e64392c74343d4a63d72a70677f0975f8abb0f3812537ba0b9f5bb8bf78f9389f7da66a1ec734d82109b362a1cbe99e0dc590e91ec83c3314293d8585531ddd013101bda4ea46b449fbcb07b71888b6574b58156584d8821e3fb78eab277b4aa8fea350b7bd8bc545ac0d480d7a544eb8e5ca3201f5d2558f78b54fd083a3e395457df4081c02026ddd40b3e1098bfb6e335a9e40631dbd867093388247c5a6e6d17c283565f927baf03fa58f9a8da9b9fe565bfc8779bb7a8cac0bc3840d512ba7cf862df3cf736ccb890807f2b52f149d91ff143657185d7c263c8c16b2b6f9ad773ad863c321d687d84f9f2bf25b0c23df3ac7e493a147cfea9f9d18e927ced9f98ed0c1cddfd2b7250c0a92ccf5651478a518f8efdaf7f900730397627d975f38ec37d8b7c69d229f1af605957c84126d6f0c7627e7765f01d90f4155a40edc52c623465232b8ba815012e31e5b8e3ba34c839abc3b09ff5ccc26d4571e8c81bb82ab8d05b4e5f30e4dcf52a3b695e432d992f9ce3b22ef099b20199ce20e31ce4f1ddfeea21a112033ce1f6d3eb6d260b74ce8397ed36c1f78fc95f0d11875842823eb46b76db3d6d28a66368cc060e1187d021da16747dd576d0f96e5fef25f03bdf5046814c189f209d413a5d3ece1139575bd35b579610df415e80ea79f89f2ea1eb305f83b054b6b3635077574fe8eed40f17721f13f2620dc3bab478f8507b4c633050e5c47714d76c5f4791917cc90b47076afdd01a5b976cf8527e87b94f09219b3f6c59497f2fe391ea8369bc985c9e8210358aa5220175b1c88df556a97b500a0ba956fb12071c5b4a2a07a704b34899c3b19f77282eccf5ccfb7681770b0d51002247fb44b304a5fba4d754cb7e0a0000001abcdb6b89b33243c4e51a0c7d1ef44e651bb5709a7aaa79f2add174a02f2db57a6b586ebec6e7fc89005a1839c836aae73d681755c581c709af9bd0c7d64f715427209f5a0df7b63c198c608c7535d648fdac1b15e4fcbc9245109904a83d0ca116a75bdb7a8fb51d0f92f97882b12f63d420770114642022dca5607cc39869b63878320dd2be8f1ad33f4e668bc6751a6bec0be75e599addb818f3e81bd81aa581b055ad7e1ac48af35c05037ed4228d519a87ea5e412c9e79fdb57ba77201d0210bea5a532cc2f71643d48fbcea8eba8398e12725740581a1d5f3b66486095350cda09a9849e9c2f5b4219045c53602602155fe23461486c7110608bcd1912a7735bbdade1aee329bd156fb9c433e35ca1c35c352f5581ab5ac7d8af484e46cf50fcbcbdb686fa554e23798ccbbd5cb7b998a5377aaa230513a05dcea672b77aaaaae883d8e9d8033676b2b16358055301d4adbc46b3be4d54929433fa4256ffbff46e935c819a084230e84264a4f0fdef79d2fc7e8b6c191dd169066b97226f29e8084139cbd63a51b5accf29fd5d6dfdedb9bd9d9cca0a2a461297cff434a903ce57a474d7e8a199768396968f1b9c51ef18f0bbce9d5c34bb7d95ed66b336d93f807d5d739cbcd1ae8e6da2a225586d56f3bd2aa7caae6ea52eb02dbfd801d905b9bdb9e6c55fcee382406494b8068283a00e129da668c00fc28fa4396515df88d4d50a1cdced6d132a148292adaa9a7184cc56183abcaf770d80bd2cde357cb92e68bdfeaaec430fd87969edbe07ffd2c2715056f17aa072ad05c7e5a4df4aa657f20722124a85c4757dd0cae27bc5daf5384e165f24bb29adb405b503c319ca6fe0d083021fee1c648388e0940256b9ac193afbac771f9c33eb1dcc4ba684cb56416c471b61ba917dec710a0af8e09f34606daa56cfe75e3301b64f3fcf77f39e9929015e62d0231d75e524841f7ab51c97603e0c49ab29c1176750a076021fa6b1fc0daf868bcc43a8b8d393f54e5940c6cf5fa16702d97ac7e43e15bceb9e341f962c44fea3451ddb177f5696c2878baf5757b246eefd653fd20efcc30bdd5b91ba6b3cec292037afc1dd1e7ebe5e2ec8e7c4047cb8c4cda1349f94be593016c7987599aee9e872cc39a8c507b39f3b85a91608c84b8e6620e9ff12bae2097c570fec865cbcb986f959380bb6e49a888c535f9e835ae6504286e37265c77388d6e731400c3a2ad371e7e911a59665ff9f46623e5cd7c6cbbcc1dfbff50f136752903550fa9a89190f987a74053f3a02c0eb9f5c2f121860146f2884b5a3d9231d4a45ad9d469a1fa669cba2319425afe55ce75eb305646717b83c243403e95869290a364e7a936c35bc685e8fffd50c254d5816bd57f4d2af3fdb32bddd569a7a92959a032caf9894b531ac13aa954bd1ac50266f34c5dcddcf5c286a651a3bf08730095bbd6283fbceed9b4ea214de076047c771a7a6b625167513e7ae4edb7c4c8470d62b4722704369f802154cfd416f5323f85408a8908c11aaae1d7d5ce56c7e65d7abcdcedac591f5953e82079ef4b645465c7f393b22be5ddb3fc96f92a9303cfba674fad2d5248e1ce75c4feeff21edff8337ab909ec61e9e6ec4dead9de15e716ca030259a8fd7afc7d184b7b991aff17d479ee0e54d49cebb972c09f2fdd9d1f3878630ef51a44a9099116133a96a58c6f45e155b6d8ebbfc040680785ef73ccf69e7eff85c4e8aedaff29364c57155dabe7e79f2081ee34b4626686c58c9d15ed5d143b94ad4235d11b70824f96571516fb15ee3e5012417493e74d30ac30692523bc202536ba31f71b19c2e9389a4758e79fb5c6f63ad5e58d6ca050fce533deb4f7ef8aa7a5230ff159adbedfb83bf960f16ae6916d390496c836db451d73d61e3b01fe2b87d35991ca44d2eb554d5110d90d9b25501629a13c1fa31926e66942f0b08313d1c396e925766adbcf5b074263f6269e2e74cfe13d86488c0c7e80603e53963cdd22d9a4a87b3a6b99a0fc2c11a14bd3ac9a9442894a43fee6caaf440f828e0f43e6944138f59818124c853da1d1451c76bbe196ff8a273b5a473aa6645fe7d132521eba35ce2a6abdef39b26b9cfb8415d9e550292c8b5b00beef3ce06f4761d4e2d4e171207c887dbe9beea407c3df077fc802f015dc286ac1b61061b1a8616a549b72e8b6c21bdc86af969f40e36876f8c77eadaa664d20437e1b43663baef53825a7e24122bcd2648108a7f4a2b6857a8db79a82065e11833483ab4485a7cb178dc1b08e39423969d1a4fb30c484d1d876199a3d4467a72b7691ccc8e7501072640917409c1a33a052cc945801c18db5b04eadeebd783d83ce2f479996a6c08344a4f832b887124d080968ff6e401eb5f7a7fb6f6297e6557ce9d96ac1a42794bb0e31d4ae9864aebe42f63a676cc2407c8d6cccf968d37a9c326af41926eaec7fe085f1a807348ec2f3af50c1d0b71ea0099313e3128088f33b0c139a758192f231cbc2478a72d538de4a3444e34c8e559580a1fd1aa8b537fefd992107881111de152aab82b4d9069866188a94212b95047a6da536e8d3252e962404cb1751f7f0b4fa017cabcc2a66ba63e72ae3aa9a8c2ea8cdc0d1bfc196443ba2e5ec5795fe39e9185e74277e4a71e99597e83faa750ee13a69ab5e8d8dc420667eb6c8f490dc8376dfafff13154692bf2125f500d0aa673c814d125549bb1f00a7e59ca709fb6bcd76b336e3bf9a2d2a03e0c4190cdbd477d6fae96b440b662af5137747c2eccd5bb8e4376656f7749012bb5035f72ed4eed57fcef0aff37a4d382f5929a203d7a7c8c4dbbcff299193489bb9cebd66ce7eb585b4ee0047468d9ff390c34885cd7f7db27db405dd57e7460f16d47b7b0fc12d5522194761d94487c9e1cf8d8b19b90f662df3d8d043b598c36aa810683d6506caee7f6bf84de9bde640e5cad3a4d76326218691ca91a819a4fda1211c3f55023b9b080bd502c4bc0cb78b0bacaa314a7f6dae659d071ba965b45985131612821f2b38e0fb194bffeb84b2922bd1fd16f05af42ccda789dd767d46a13a43d196232d1b567c8241b4594b9de212cd230fe5cf1bfc3e5ed586217254418b02cadff9e8ba8f041fd5f61a6d85ca9a1416b040cc8d6675cfebfbce8a91e1ff303502e35bc8321fdec4a0841f594d37caee2276d19a8508f53cdbeee0a7d690c14fe44c930a0398bf3853cbdf5ec7f01f5591028ebe5700b586ab54eb38beb8e86565d22f678d709ffc0fdacb2406502aa726db13651082c84607c7466e3c5985828d8903605dcdea699f85434b2e02114499948ce22fbbb91ea0dc864978deb7b758eb1a5d92a464062aac972e6ce363cac8d77379534019e5114a614d0cacaac5d900b76cabffbf0fa4ba76936fb0bf98c75c25c39ef986ad6c2a81892cffd107e5ea15898a50d273a02e6e6dfb9b3bbf7c624e93d5ba63ac245ff3d8cc8adf8df5cea7655f38e043c2ddb7708d2ba4603f0677322b7899b6bd36c4e394acd47ec10fcd595287dc4da1c4c21a6d657610e502f7710fc5deffea9684f004b4744c3c34cb1b56a4099c217895e9a3425e37031b3052a430c3c31817e5ec399b67f5507a6ed3c9be2bab9a239cad248c13a04a9d39865e0200b1b85f10c252da3e0026f4ccc3588ad0017660f0e97213014e466946028aef603205595300b1fc81c6ca4e838d2a75495911319fcfcf465d3469d5a01f3bea8cab16408012aa7ca5911feaf0badb2d84a1aff21aefd92566ba2c07f3903ceeb458d20f6286fcac16c562b6dc91bbece24394ac104b5cd1d7342e0770a6541bf9ec189ed08f8a3bf13dfb186b5969d87f1fb9dceafe8577bb2a0d637c0d0367548aa976363d83a33e27806a3f582e45c499a242e9560e65a9eb6e1c03f926fa10b9c31e0b6454b0360d33121d4eed9206935835336702d1d883310b4fc859b5798fbd94ccd775a50c3d31ecd5bf57c305b9dd869db0864eb118361c07d54898a9267924b47ead55c21584a5656ba63cc6a035d7b95dfa1dc96076f88f51cb4dc7abf05607c77a3463e59ad973499b4927b3fee5b71af0d15112c9590cda8de0fcf5aefc695e87b7abc207993c2e8fdae79b86e1648763d523cb6d324f003da3738b69f66156495ea8f3442f68515d265853dd155a90890df1b05aef980c4c750a831f1bf6882913882f1f4865034bb9212398afcd3d73ed05ba156e92be9982be90691b29f7aa303c952bc4cf280cc376f8451f09a6ed433c0583a62ddd51b4f330c423cb1556df6d8ed684a58d4af96db0e8328c06009070b36f81a6f308503f2af34c0efff1e25fce52d971ae013af93c6c7404590319064b44a81e0038f07ac3f0a269315c5bcc722803755a5c24e54aeb3b3f22e32365a7187b167531843cb036bac8bd126f6905954214e6f6d4e9e924853faa09d86c6700ca2c187a5f0d3fcbe4d1f1b558c6a18c372cd598b88b97184aaa8dea9a58f55f40209b308f8b9ffa97a4b761a2d64ac03af6a88b0da5eaeb5adfd46a4aacee5c8a32f240bd595ead31150c8d0ad4bbfedd7cc38196cf1cb4bfeac5cf8747f204bf67a0edd864386319c277b9187f24a406296deb1d246d83840a021d11ea689d1f540c16c11b4808a7a6055203089fbb6037e9c933f887ddd46f27e72d139c95462bf9a943e5864fb8c11641f1ce6bcbdbdb0fcb8770f807de4a9476ad0d6c31cfe6751555c4a2b2a3b288fd414086b683014d46fc8a1d06d9f9779705463b8f2bfd9c546cdea969f69f93d3193099ba36ca0408381895e66a21ca8eebf39a11e40a6d9b7064a77df05db45015169d53d58983dc8019eac6689458406771fdbe940c756e41df04bccdc857e2adb0dd9bc5acc6d8f630c176b4f49ed42a034d43508cc1f653b99540f2215908cd2f46c8d0d3cd3c68715743644b06ddde1d9d150ab70aa37e8b7d191d1d727d7a4a4e8c41eef77bd473ea19c8a0254ddde4ec57f40766105fa88d64e4da5361c5042e970571b1336f15f85e6238301343b3628e546c845fd4b718a3d35d993a6f5c33e4fb4a76b3cb667d351cf5340447abe3da5d9974928918da1330d5f5c4b343393001f7f3388c4e09c2bc499fcb3a47c42de4615201392c4e41d1ef4f5705941dbf34b94795c21dc6dbf6fd9f2344cda01a602ad25447620be1f46a13adeeb9457383930ca894acd01c814a60ce57615a4672d6c1745643098d2f9af0b30dd9990034ef6999548cca40fbf0ac7a4854c958b13bdd4b15a7677b3f71070d3d30988f57368296df3cdd1b809d2a3275353011f4e84e2c49a73c3c1556015ea480a9d541e050c32e15a4c8c3ab080cd670a98facdd1e8606736e81bd7f01c82427a5274d9d9273b64994e744b8449d0db461b8caf8b16f8ccdc229746ec53ae7ffb2400b18ed1a2ef06cd88d992c20826261f34c9b374e1703ca96f794af4d836b50e903ca8592b6f79b5e1e33f206ae1be059850e0eb454d557b168c29ca3d4d9032464cd2b86fac10923b0f9d67d6ba12a63ea2e628b7a486c7f9d0c3e91f2b0987bf570f55ac5406ae92c88e1c0bb5aeb145af9a8626c365e74ce0a48a20ede17de48bf1cbefe744ae386a732f6fa4869c4fed044d577fdf6c1df8ec3c6abe10fff23b6431563aa8dd29d0a00f301d8427c9ac5d1f2fa87b9cd7835ee40481388069b78c4ce45346ea5d06d9769d0a13f3ee2b64f92a333d172911a8db5bdb30c6f3b72b515b7c8ea22765c542ccb716bf5b30f93e52c4b8a87099ec112cd547c328c973419e0e41127757a4ba4578514bdf716bb6ca5ac0989f5ff17a76ad1eea3e143160cc2021d93371de18c3270c345f16adbe43b445c7f387195b70bdcb3e6ca36417ec94d33b9ea98d5df5737685890e82dff3e1364dd81493446da9e8625ae61e12ef2f87e8875d110863dd58af6156a027f739f549abf224c9403f48bed0c4d3135b075f81abe6ed582e9d30bfc3f9ac155ea4db51bd2d6fe378a17089d7e466606f23ed9ecbe7fb208934cfc6f29f60a8a786f8c813cb0b7eead464cc60fa76d669ecba33b17d90345a2a35afadc5cec1b124fc19e40c121a44369a2732d4b50a31e6e73cc633d95d60a860cbeaa19bdcabc1e442a947e6a915d6301c22b35a5732209670a2533d03747fd65711adac47ec11d20277d77d9ef25015b569e48daea824a75cc35fe0ced1814609b81ffca1d803084da1239e505b4d79710e283de922dcf2ba0387d0fa26b6d957dde7ca5ce4c8b77a828b0d3bdde097773707e025befaaebf176ae6ab7a83c91d2c0e5b0f931bc8f751c241f94f18dbf8ec19afcb9770efe72ceb129fab0e44d10fb1b02860a082761dc5a12a95becf86fc96a21bb16f4706615a95369d8b47bf2cce1d1e14f5ebe76f8fd10a5b82bc7f2e01f50d0cbe259b80a1d717249985ba6bfb809da9dfc4072465f7b1223ba82a2baf91bea8f5c32484572b71becac2ea0437120c8a1142f525b260441b719852f74ee2f217549f0e13494726b6aa0e09c88fd27a0fadcd7df401374194ad00300e9dfa90ab330c2f19514e0a991643f3d0cedda7d1d53bc06e7c2b3c9a124839c0d361581e66b53fb376666b0771fcc4b2076690adeb857343ef98fdcf6e8a02115139685b25db2ec2374542a43f2c76f8a2beba807f934e1f18e55d48897df7315d7f272fb4e4fc693feb15105b5d3b0f89d7f37fdd38e36e4636934d763ca17463d99ccd33ec111fab23a69e1c3448858f76a5fcf7bd1f1b049ef2d085fd92954ae0fc3d9cde7344809834e7a4222dd5ce29ec4701f7d19da56b27467d48667f4f0edba509617ffe01be164e62eb6c23d7b4f05384578051e44a94232f54aace6aa7813077b01edd20e2f978db489af257f79a89101ca2d91eb831fb2b666ef43f564c66b9d18eeb8445817bca4cbe05dd5fbbb5a74ce03b2b6b9231333d76d885d91f8ec90201f447c99be4fade22eb6cb01d19f2a95e779a2f8c31478e2f880c5e98c1445c37c680f31d7da5c59bafcda9258a3d2853064fc647a2c9e4965b764166df37dc569dffe7b6ee9e9326073dff573a3802962ff780465289dc5b634d62fad072973c6b4f306d5a26ce1a993ec0be5584ae6eac1cd7019735837b4075b525909ba6d48a01a0098699a319a0f04a8408068430459679e75db3ad0e378599c15d26e914ccb04516259b4e58182f777f8c277f7f45af2c53d50de9e802d5e3766faa8ac8dae71ae82f6ade7168db88bc872c5f2faeae3b3e7c355a669ce764f448bebb9d54a025ecdb80d5d25a84cd001c2ac105e4e33567bd13f4785da78c08b178cbd14756ad1a5d041d31bdfa925330d1be37c4648bd51d7d5dd571de6ec761a900bc97ceb0d6363f4146af6a866e368ec25038fdd287ba7de5c439aa5e5458865c41a4545a6f5de6cdb555391e134c1b083ac2c93c71c936d8640978861dbdff67b61c965297b84f4e8e52c9ee10d655e5eb2c044d0fcbe428ef6bd2a72bd430a37095e16f8b30c3bc7c1e0f3045a523d9c5ed7f5ef8930490d47720176a38fd02ed7020ab9a42aafebc980f79199e860a576b0353929c623cc2bbf1cc34a368488f1a6945ca7019567f67797be06e1cc9a5cd79d9fb6e1cfd63bc59c7c649559fa3a046e312e29e532024c6d3abf630904942cfd77c5a13e75521696062097daabf07a30983da988018400297ef8d09091db581fac039a1aedbac557bd2dae0e09b68b75df4a05618403d6968f7e78e5bd9cb5000bbf19cae457605a6ed18181dbde47e7f4e52072beb91995613fba566876d0fe69b928b6d964b3e489cec5e1d0c829c55117ca769c3d0b9959000674def403c2283df366ed69ab162af65328dbc6c1f11baa5817fd8ad14f821590c83b9c06c390245155a07e25f760f7d718a77b5d5364d87262aa802767751a24b8332d50066fe142f0661fa0b0a498c35c275969b60adb95a7cd6018ca011b951d6e4abf17aed0ff38496e51caf1c8c14e153a77d7360950136ae5406dddfdcdd95d53a2a2e30d69fac8aa5be8820d2ef555cf997d5fd07a86c0f7498d8fc8978fce05e3406ee81b47082ee3379078a17d1d404d06a2a2b182307b73511f2ff3a108f4993f5da29fabcb537925da1a6932ba079f14cdc3cd76ef8ca4305c317e91df29129e62c52467f79932d92079cb776adee1a2a439fbfcd2b80ed81897e9a85e1610e71629eca7cdb923f8107490113e5be011258c3208d1e31111f993e2782b6aa3e96dc388b55b9830b6940a7b54e380e1adb86f902dabf30f072b21a75bc5d30e2470f746f9a24209884354109f1afd937982f4d62bd692be82bd0af7210ee79d3ab3c81e239d8a8a8a874526cc27cd60b7caba0bc6fa2a61552444055dadec30676166535e5adce7b6116dcefbb0605d5b470dbc54c449a1ed826b6ed36b0604d2a625f347b27f140dd7c64d2081759a40e76f7d823e7fc5a13e71443cd9f4ddedbd847287bef618efb6b589eddb0c62ca6e8688d2ae17c0b4e53d246ec7e60516da6f0242c90523aa50f40b29825a5aaadb0c4d25ecf8c3b0d2f1095d52c3fd8da63f53e9b69810cb05c7a6f25fe98cf0321b8a71aaa34fb27688594daef45bebd13f56165f323e7fe37b14bd56735198ce8d35476f742d92f54f61e4cbb37f4b67e0266a925ed899d5f0027723ee985f3c3a6ee236aedb638849c9ef941dbfbcb7755bc49481a8e8781132d2e8cfd9b9e40ce01cae6ed90c9f180d62682d90f1db1c0fac441f00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x90, 0x0, 0x7, {0x1, 0x1, 0x9, 0x400, 0x801000, 0x1, {0x6, 0x0, 0xffffffffffbffffe, 0x1, 0x5, 0xbba, 0x4, 0x10, 0x2, 0x6000, 0x56000000, 0x0, 0x0, 0x851, 0x3000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m33.480548013s ago: executing program 0 (id=1508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 8m31.600440948s ago: executing program 0 (id=1512): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 8m29.000025633s ago: executing program 0 (id=1517): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x1, 0x1, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7336736181c2082200018000d0000f0fffffffff2ff280100", [0x4]}) write$P9_RREAD(r0, 0x0, 0xb) 8m27.66277234s ago: executing program 0 (id=1523): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000001c0)={0x1, 0x4, 0x8, 0xffffffffffffffff, r1}) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 8m25.807786304s ago: executing program 0 (id=1530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r3, 0x6000000) fallocate(r1, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 8m25.347277033s ago: executing program 35 (id=1530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r3, 0x6000000) fallocate(r1, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 7m45.083529095s ago: executing program 3 (id=1723): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000180), 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 7m43.7185938s ago: executing program 3 (id=1730): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001680)=""/4089, 0xff1}, {&(0x7f00000002c0)=""/81, 0x26}], 0x2}, 0x7fff}], 0x1, 0x2000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2000000010000107000000000000000003"], 0x20}}, 0x4000084) 7m43.375970197s ago: executing program 3 (id=1732): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@abort}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nojournal_checksum}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0xfd, 0xba6, &(0x7f00000017c0)="$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") 7m42.835506033s ago: executing program 3 (id=1738): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) 7m42.650934501s ago: executing program 3 (id=1741): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 7m42.472932676s ago: executing program 3 (id=1742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x6, 0x200) unshare(0x64000680) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7m25.791017773s ago: executing program 36 (id=1742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x6, 0x200) unshare(0x64000680) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 27.427087891s ago: executing program 7 (id=3051): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x40, 0x15, 0x2, "9400"}, 0x0, 0x0, 0x0, 0x0}) 23.270789718s ago: executing program 7 (id=3060): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r2, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f00000005c0)={0x80000000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) mount_setattr(r1, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 21.937960123s ago: executing program 7 (id=3061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701002400128009000100626f6e64000000001400028008000700020000000800030008"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 19.351072728s ago: executing program 7 (id=3067): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000001340)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x1, 0x200, 0x2, 0x9, 0x9, 0x8, 0x3}, 0x20) 17.905881881s ago: executing program 8 (id=3068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f00000008c0)={0x2, 0x0, {&(0x7f00000006c0)=""/174, 0xae, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) dup2(r0, r1) 17.847328847s ago: executing program 7 (id=3071): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r2, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f00000005c0)={0x80000000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) mount_setattr(r1, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 17.778699006s ago: executing program 7 (id=3072): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0) close(0x4) 17.694052069s ago: executing program 8 (id=3073): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 13.162647251s ago: executing program 9 (id=3077): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701002400128009000100626f6e64000000001400028008000700020000000800030008"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 12.317561099s ago: executing program 8 (id=3079): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, 0x0) eventfd2(0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 11.973005552s ago: executing program 8 (id=3081): r0 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x27c4}}, './file0/../file0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) io_uring_enter(r6, 0x847ba, 0x3f00, 0xe, 0x0, 0x0) 9.976376656s ago: executing program 2 (id=3083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f00000008c0)={0x2, 0x0, {&(0x7f00000006c0)=""/174, 0xae, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) dup2(r0, r1) 9.974828199s ago: executing program 1 (id=3084): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x7ff, 0x122, 0x6000, 0x10000, 0x0, r4, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x932, 0x200000000005) syz_open_pts(r1, 0x424002) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.843735558s ago: executing program 9 (id=3085): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000f000000012720dcfe14c639a500ba171627"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000300)={0x20, 0xc, 0x3, "9581b1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 9.705238912s ago: executing program 2 (id=3086): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, 0x0, 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r2, 0x0, 0xffda) write$vhost_msg_v2(r0, &(0x7f0000002540)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578020000000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x9f) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000025c0)={0xc4, 0x1a, 0x8, 0x70bd2c, 0x25dfdbfe, {0x11}, [@generic="7f87c8cdb22059203a848ddaac1b061e96ec1902b975b749b5650ee02f9b836fe8bee2487bbf65ae66dfca2158d0157cb61765040eeda7ac1b2a7a2257029531cbf7fd55c68ac049a0ce646c6f77b2714d71a45ea9a330d0784b667130f2468dc705c3", @typed={0x4, 0x144, 0x0, 0x0, @binary}, @typed={0x4, 0x34}, @typed={0x8, 0x109, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="ce2142f588cc61a71023fd2e85db28ce9f8a7f57d70c3e6962e4a6f7751a372a3cb184743d0cdfff87deb60de85641c59cc758463b59646a416975", @generic]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r6) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x6, [0x1b2b, 0x101, 0x8, 0x7, 0x3, 0x80000000000]}}) 6.232892938s ago: executing program 2 (id=3087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000000)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f0000000040)=0xa5) ioctl$SNDCTL_TMR_START(r3, 0x5402) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6.015243639s ago: executing program 9 (id=3088): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e2200000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5.84561172s ago: executing program 9 (id=3089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.821359669s ago: executing program 1 (id=3090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r3, &(0x7f0000000280)={0xa, 0xfffa, 0x101001, @mcast2, 0xb}, 0x1c) writev(r3, &(0x7f00000000c0), 0x0) 4.658322241s ago: executing program 2 (id=3091): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, 0x0) eventfd2(0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 4.104751098s ago: executing program 9 (id=3092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xd2) openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="476d0000eafb", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @multicast1}}}}, 0x0) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup(r6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xf}}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x4, 0x7, 0x5b, 0x7, 0x38, 0xfffffffa, 0x2}, &(0x7f0000000140)=0x9c) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x40080, 0x0) 3.963392814s ago: executing program 2 (id=3093): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x1000000d, 0x240, 0x9, '\x00=\x00'}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) 3.591086035s ago: executing program 1 (id=3094): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r2, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f00000005c0)={0x80000000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) mount_setattr(r1, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 3.205105648s ago: executing program 1 (id=3095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x124, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x4) 2.219777135s ago: executing program 8 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f00000008c0)={0x2, 0x0, {&(0x7f00000006c0)=""/174, 0xae, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) dup2(r0, r1) 1.707358965s ago: executing program 2 (id=3097): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, 0x0, 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r2, 0x0, 0xffda) write$vhost_msg_v2(r0, &(0x7f0000002540)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578020000000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x9f) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000025c0)={0xc4, 0x1a, 0x8, 0x70bd2c, 0x25dfdbfe, {0x11}, [@generic="7f87c8cdb22059203a848ddaac1b061e96ec1902b975b749b5650ee02f9b836fe8bee2487bbf65ae66dfca2158d0157cb61765040eeda7ac1b2a7a2257029531cbf7fd55c68ac049a0ce646c6f77b2714d71a45ea9a330d0784b667130f2468dc705c3", @typed={0x4, 0x144, 0x0, 0x0, @binary}, @typed={0x4, 0x34}, @typed={0x8, 0x109, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="ce2142f588cc61a71023fd2e85db28ce9f8a7f57d70c3e6962e4a6f7751a372a3cb184743d0cdfff87deb60de85641c59cc758463b59646a416975", @generic]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x6, [0x1b2b, 0x101, 0x8, 0x7, 0x3, 0x80000000000]}}) 1.671128741s ago: executing program 37 (id=3072): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0) close(0x4) 1.634949136s ago: executing program 1 (id=3099): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e2200000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.140660539s ago: executing program 9 (id=3100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ustat(0xfffffffeffffffff, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) 20.771894ms ago: executing program 8 (id=3101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000000)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f0000000040)=0xa5) ioctl$SNDCTL_TMR_START(r3, 0x5402) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 1 (id=3102): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) kernel console output (not intermixed with test programs): tooth: hci5: Opcode 0x0c03 failed: -110 [ 455.470548][T12108] syz.1.1867 (12108): /proc/12107/oom_adj is deprecated, please use /proc/12107/oom_score_adj instead. [ 455.762447][T12126] loop8: detected capacity change from 0 to 512 [ 455.903453][T12126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.964280][T12126] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.566364][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.580462][T12136] usbtmc 3-1:16.0: simple control status returned 95 [ 456.609713][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.798877][T11954] bridge_slave_0: entered allmulticast mode [ 456.848899][ T24] usb 3-1: USB disconnect, device number 8 [ 456.860651][T11954] bridge_slave_0: entered promiscuous mode [ 456.888557][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.917172][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.956201][T11954] bridge_slave_1: entered allmulticast mode [ 457.027162][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.041022][T11954] bridge_slave_1: entered promiscuous mode [ 457.365328][T12146] loop7: detected capacity change from 0 to 128 [ 457.425583][T12146] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 457.468242][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.483133][T12146] FAT-fs (loop7): Filesystem has been set read-only [ 457.492773][T12149] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1874' sets config #1 [ 457.578025][T12146] syz.7.1874: attempt to access beyond end of device [ 457.578025][T12146] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 457.674329][T12146] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 457.709514][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.722076][T12146] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 457.740013][T12146] syz.7.1874: attempt to access beyond end of device [ 457.740013][T12146] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 458.456049][ T30] audit: type=1800 audit(1764013988.701:1060): pid=12146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1874" name="file2" dev="loop7" ino=1048712 res=0 errno=0 [ 461.132166][T12176] loop8: detected capacity change from 0 to 512 [ 461.140236][T12176] EXT4-fs: Ignoring removed bh option [ 461.146511][T12176] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 461.183010][T12176] EXT4-fs (loop8): 1 truncate cleaned up [ 461.201444][T12176] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.907137][T11954] team0: Port device team_slave_0 added [ 461.941997][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.954152][T11954] team0: Port device team_slave_1 added [ 463.193376][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.213604][T12200] loop2: detected capacity change from 0 to 2048 [ 463.223331][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.278033][T12204] xt_TPROXY: Can be used only with -p tcp or -p udp [ 463.393397][T12200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.442310][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.911415][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.938094][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.994491][T12209] loop1: detected capacity change from 0 to 128 [ 464.006130][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.574824][T12209] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 464.607761][T12209] FAT-fs (loop1): Filesystem has been set read-only [ 464.647761][T12209] syz.1.1889: attempt to access beyond end of device [ 464.647761][T12209] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 464.704935][T12215] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1889' sets config #1 [ 464.744057][T12209] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 464.835515][T12209] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 464.858340][ T30] audit: type=1800 audit(1764013994.687:1061): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1889" name="file2" dev="loop1" ino=1048713 res=0 errno=0 [ 465.059646][T11954] hsr_slave_0: entered promiscuous mode [ 465.139892][T11954] hsr_slave_1: entered promiscuous mode [ 465.146478][T11954] debugfs: 'hsr0' already exists in 'hsr' [ 466.419329][T11954] Cannot create hsr debugfs directory [ 466.599318][T12228] netlink: 'syz.7.1893': attribute type 2 has an invalid length. [ 466.776765][T12226] loop1: detected capacity change from 0 to 512 [ 466.789218][T12226] EXT4-fs: Ignoring removed bh option [ 466.872292][T12226] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 466.886473][T12226] EXT4-fs (loop1): 1 truncate cleaned up [ 466.893180][T12226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.013773][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.035920][ T3495] hsr_slave_0: left promiscuous mode [ 467.090706][ T3495] hsr_slave_1: left promiscuous mode [ 467.136928][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.156344][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.198333][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.323680][ T3495] veth1_macvtap: left promiscuous mode [ 467.407216][ T3495] veth0_macvtap: left promiscuous mode [ 467.684101][ T3495] veth1_vlan: left promiscuous mode [ 467.691693][ T3495] veth0_vlan: left promiscuous mode [ 468.493326][T12256] delete_channel: no stack [ 468.757736][T12259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 469.347462][T12270] loop7: detected capacity change from 0 to 128 [ 469.863064][T12270] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 469.870915][T12270] FAT-fs (loop7): Filesystem has been set read-only [ 469.908774][T12270] syz.7.1901: attempt to access beyond end of device [ 469.908774][T12270] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 469.939790][T12274] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1901' sets config #1 [ 469.965655][T12270] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 470.032961][T12270] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 470.084208][T12270] syz.7.1901: attempt to access beyond end of device [ 470.084208][T12270] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 470.100871][ T30] audit: type=1800 audit(1764013999.598:1062): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1901" name="file2" dev="loop7" ino=1048714 res=0 errno=0 [ 470.410787][T12282] loop8: detected capacity change from 0 to 512 [ 470.468533][T12282] EXT4-fs: Ignoring removed bh option [ 470.519909][T12282] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 470.548317][T12282] EXT4-fs (loop8): 1 truncate cleaned up [ 470.938087][T12282] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.307080][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.422396][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 471.609427][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 472.909693][ T3534] smc: removing ib device syz1 [ 473.771899][T12300] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 473.781414][T12300] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 473.791047][T12300] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 473.870166][ T30] audit: type=1800 audit(1764014003.022:1063): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1910" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 474.760457][T12320] loop8: detected capacity change from 0 to 128 [ 474.960324][T12320] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 475.046778][T12320] FAT-fs (loop8): Filesystem has been set read-only [ 475.053416][T12320] syz.8.1915: attempt to access beyond end of device [ 475.053416][T12320] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 475.097550][T12325] kvm: kvm [12324]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 475.125718][T12325] kvm: kvm [12324]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 475.143366][T12320] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 475.157595][T12329] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1915' sets config #1 [ 475.206309][T12320] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 475.221150][T12320] syz.8.1915: attempt to access beyond end of device [ 475.221150][T12320] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 475.346431][ T30] audit: type=1800 audit(1764014004.500:1064): pid=12320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1915" name="file2" dev="loop8" ino=1048715 res=0 errno=0 [ 475.471743][T12333] loop1: detected capacity change from 0 to 512 [ 475.486587][T11954] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 475.490137][T12333] EXT4-fs: Ignoring removed bh option [ 475.560344][T11954] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 475.597489][T12333] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 475.627135][T11954] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 475.656396][T11954] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 475.728105][T12333] EXT4-fs (loop1): 1 truncate cleaned up [ 475.875110][T12333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.678979][T11954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.704589][T11954] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.740891][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.748162][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.758513][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.765683][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.429974][T11954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.604670][T12372] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 480.505912][T11954] veth0_vlan: entered promiscuous mode [ 480.671915][T11954] veth1_vlan: entered promiscuous mode [ 480.823942][T11954] veth0_macvtap: entered promiscuous mode [ 480.874744][T11954] veth1_macvtap: entered promiscuous mode [ 481.078457][T11954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.115737][T11954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.159335][ T155] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.188348][ T155] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.222309][ T155] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.251400][ T6397] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.435472][T10339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.459288][T10339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.531955][T10339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.554960][T10339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.471492][T12432] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.811534][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.955438][T12438] loop9: detected capacity change from 0 to 512 [ 483.078926][T12438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.102567][T12438] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.458381][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.654382][T12448] loop9: detected capacity change from 0 to 256 [ 483.681415][T12448] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 483.761605][T12448] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 483.789607][T12448] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 483.826163][T12448] exFAT-fs (loop9): failed to load alloc-bitmap [ 483.842035][T12448] exFAT-fs (loop9): failed to recognize exfat type [ 485.873973][ T5942] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 486.102332][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.116139][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.134395][ T5942] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 486.158880][T12469] kvm: kvm [12467]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 486.165799][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.171011][T12469] kvm: kvm [12467]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 486.201569][ T5942] usb 3-1: config 0 descriptor?? [ 486.522227][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 486.546835][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 486.590613][ T5942] usb 3-1: USB disconnect, device number 9 [ 486.820966][ T5899] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 487.009208][ T5899] usb 10-1: Using ep0 maxpacket: 8 [ 487.016731][ T5899] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 487.037049][ T5899] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.148936][ T5899] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.181217][ T5899] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.191287][ T5899] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.205228][ T5899] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.214458][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.362987][T12492] loop8: detected capacity change from 0 to 256 [ 488.384631][T12492] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 488.418714][T12492] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 488.459870][T12492] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 488.501006][T12492] exFAT-fs (loop8): failed to load alloc-bitmap [ 488.528635][T12492] exFAT-fs (loop8): failed to recognize exfat type [ 489.623667][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1956'. [ 490.300423][ T5942] usb 10-1: USB disconnect, device number 2 [ 493.108762][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1962'. [ 493.407168][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1962'. [ 494.268694][ T5942] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 494.390537][T12548] loop1: detected capacity change from 0 to 256 [ 494.439279][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 494.457495][ T5942] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 494.474671][T12548] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 494.495712][ T5942] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 494.540030][T12548] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 494.560167][ T5942] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.604004][T12548] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 494.616410][ T5942] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 494.660990][ T5942] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 494.681069][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.689177][T12548] exFAT-fs (loop1): failed to load alloc-bitmap [ 494.700000][ T5942] usb 3-1: Product: syz [ 494.704247][T12548] exFAT-fs (loop1): failed to recognize exfat type [ 494.735535][ T5942] usb 3-1: Manufacturer: syz [ 494.741006][ T5942] usb 3-1: SerialNumber: syz [ 494.765149][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 495.558599][ T5942] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input11 [ 495.739617][T12566] siw: device registration error -23 [ 495.865326][ T5942] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 496.260201][ T5942] (id 0x00) [ 496.301062][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.309807][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.385405][ T5942] rc_core: IR keymap rc-imon-pad not found [ 496.417397][ T5942] Registered IR keymap rc-empty [ 496.422380][ T5942] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 496.457595][ T5942] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 496.687183][ T5942] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 496.702700][ T5942] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input12 [ 496.774112][T12583] loop9: detected capacity change from 0 to 8 [ 496.803560][T12583] unable to read inode lookup table [ 497.205378][ T5942] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:10> initialized [ 497.407096][T12588] loop1: detected capacity change from 0 to 2048 [ 497.503878][T12588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.630966][ T5942] usb 3-1: USB disconnect, device number 10 [ 497.665070][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.633198][T12614] loop7: detected capacity change from 0 to 128 [ 502.042405][T12616] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1981'. [ 502.122151][T12614] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 502.260292][T12614] FAT-fs (loop7): Filesystem has been set read-only [ 502.388496][T12614] syz.7.1980: attempt to access beyond end of device [ 502.388496][T12614] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 502.426452][T12614] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 502.449675][T12622] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1980' sets config #1 [ 502.476950][T12614] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 502.518979][T12614] syz.7.1980: attempt to access beyond end of device [ 502.518979][T12614] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 502.609188][ T30] audit: type=1800 audit(1764014030.008:1065): pid=12614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1980" name="file2" dev="loop7" ino=1048721 res=0 errno=0 [ 503.919800][T12635] loop8: detected capacity change from 0 to 2048 [ 504.215769][T12635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.412192][T12652] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 504.439874][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.460578][T12654] loop7: detected capacity change from 0 to 512 [ 504.482832][T12652] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 504.646635][T12654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.664374][T12654] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.690868][T12651] kvm: kvm [12650]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 504.736908][T12651] kvm: kvm [12650]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 504.977594][T12652] EXT4-fs error (device loop7): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.7.1988: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 505.010226][T12669] loop8: detected capacity change from 0 to 8 [ 505.034534][T12669] unable to read inode lookup table [ 505.286533][T12652] EXT4-fs error (device loop7): ext4_get_first_dir_block:3540: inode #12: comm syz.7.1988: directory missing '.' [ 506.387569][T10435] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.239286][T12685] loop2: detected capacity change from 0 to 128 [ 507.258331][T12688] netlink: 'syz.7.1996': attribute type 1 has an invalid length. [ 507.772251][T12685] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 507.781001][T12685] FAT-fs (loop2): Filesystem has been set read-only [ 507.802572][T12685] syz.2.1998: attempt to access beyond end of device [ 507.802572][T12685] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 507.827562][T12685] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 507.858429][T12685] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 507.978246][T12685] syz.2.1998: attempt to access beyond end of device [ 507.978246][T12685] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 508.009331][ T30] audit: type=1800 audit(1764014035.041:1066): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1998" name="file2" dev="loop2" ino=1048722 res=0 errno=0 [ 508.041965][T12688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.091546][T12685] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1998' sets config #1 [ 508.162170][T12692] bond1: (slave dummy0): making interface the new active one [ 508.204715][T12692] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 508.724916][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1996'. [ 509.139448][ T5972] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 509.247519][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2005'. [ 509.274293][T12720] rdma_rxe: rxe_newlink: failed to add bond0 [ 509.300354][T12721] loop7: detected capacity change from 0 to 512 [ 509.331412][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 509.361097][T12721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.378236][ T5972] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 509.397233][T12721] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.447536][T12721] EXT4-fs error (device loop7): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.7.2006: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 509.501955][ T5972] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.514762][T12721] EXT4-fs error (device loop7): ext4_get_first_dir_block:3540: inode #12: comm syz.7.2006: directory missing '.' [ 509.540586][ T5972] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.560112][ T5972] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.588322][ T5972] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.605005][ T5972] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.616218][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.767279][T12729] kvm: kvm [12728]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 509.818411][T12729] kvm: kvm [12728]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 509.910668][ T5972] usb 3-1: usb_control_msg returned -32 [ 509.927276][ T5972] usbtmc 3-1:16.0: can't read capabilities [ 510.203482][T10435] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.388720][T12742] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 510.618166][ T5863] usb 3-1: USB disconnect, device number 11 [ 510.752785][ T5972] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 510.973764][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 511.026998][ T5972] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 511.064332][ T5972] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 511.106904][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.156840][ T5972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 511.205205][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.257406][ T5972] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 511.316454][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 511.389849][ T5972] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 511.411003][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.422473][T12750] loop2: detected capacity change from 0 to 128 [ 511.422664][ T5972] usb 2-1: config 0 descriptor?? [ 511.529486][T12750] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 511.595513][T12750] FAT-fs (loop2): Filesystem has been set read-only [ 511.603309][T12750] syz.2.2010: attempt to access beyond end of device [ 511.603309][T12750] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 511.641209][T12750] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 511.649032][T12750] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 511.686173][T12750] syz.2.2010: attempt to access beyond end of device [ 511.686173][T12750] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 511.737917][ T30] audit: type=1800 audit(1764014038.548:1067): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2010" name="file2" dev="loop2" ino=1048723 res=0 errno=0 [ 511.742233][T12750] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2010' sets config #1 [ 512.707273][ T30] audit: type=1800 audit(1764014039.446:1068): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2014" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 512.717315][T12761] batadv_slave_0: entered promiscuous mode [ 513.561949][T12759] batadv_slave_0: left promiscuous mode [ 513.750799][ T5972] usb 2-1: USB disconnect, device number 5 [ 513.962321][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 514.037357][T12773] rdma_rxe: rxe_newlink: failed to add bond0 [ 514.227319][T12777] loop2: detected capacity change from 0 to 512 [ 514.306029][T12777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.320645][T12777] ext4 filesystem being mounted at /444/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 514.370883][T12777] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.2018: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 514.408257][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2020'. [ 514.437334][T12777] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.2018: directory missing '.' [ 514.512766][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.519539][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.559602][ T5972] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 514.765175][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.782595][ T5972] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 514.791947][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.812737][ T5972] usb 2-1: config 0 descriptor?? [ 515.764108][T12792] loop8: detected capacity change from 0 to 128 [ 515.798300][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.838589][T12792] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 515.848488][T12792] FAT-fs (loop8): Filesystem has been set read-only [ 515.856951][T12792] syz.8.2022: attempt to access beyond end of device [ 515.856951][T12792] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 515.902493][T12793] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.2022' sets config #1 [ 515.918559][T12792] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 515.927982][T12792] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 515.937259][T12792] syz.8.2022: attempt to access beyond end of device [ 515.937259][T12792] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 515.971367][ T30] audit: type=1800 audit(1764014042.505:1069): pid=12792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2022" name="file2" dev="loop8" ino=1048724 res=0 errno=0 [ 516.113209][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'. [ 516.156760][ T5972] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 516.200528][ T5972] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input13 [ 516.707981][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 516.731096][ T7308] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 516.868043][ T5972] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 517.114440][ T7308] usb 3-1: Using ep0 maxpacket: 16 [ 517.146937][ T7308] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 517.155936][ T7308] usb 3-1: config 1 has no interface number 1 [ 517.161928][ T5972] usb 2-1: USB disconnect, device number 6 [ 517.178163][ T7308] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.231608][ T7308] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 517.257820][ T7308] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.271761][T12810] fido_id[12810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 517.311797][ T7308] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.338408][ T7308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.346427][ T7308] usb 3-1: Product: syz [ 517.372775][ T7308] usb 3-1: Manufacturer: syz [ 517.377410][ T7308] usb 3-1: SerialNumber: syz [ 517.864636][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2031'. [ 518.038193][ T7308] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 518.098473][T12825] loop8: detected capacity change from 0 to 512 [ 518.478724][T12832] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 519.304131][T12825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.423415][T12825] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 519.523489][T12825] EXT4-fs error (device loop8): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.8.2033: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 519.906285][ T7308] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 519.976978][T12825] EXT4-fs error (device loop8): ext4_get_first_dir_block:3540: inode #12: comm syz.8.2033: directory missing '.' [ 521.288594][ T7308] usb 3-1: USB disconnect, device number 12 [ 521.390987][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.621306][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2039'. [ 521.646018][ T6524] udevd[6524]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.736683][T12857] rdma_rxe: rxe_newlink: failed to add bond0 [ 522.452159][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2043'. [ 524.300537][T12886] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 524.603444][T12892] loop8: detected capacity change from 0 to 512 [ 524.938762][T12892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.084167][T12892] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 525.157656][T12892] EXT4-fs error (device loop8): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.8.2049: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 525.261432][T12892] EXT4-fs error (device loop8): ext4_get_first_dir_block:3540: inode #12: comm syz.8.2049: directory missing '.' [ 525.570323][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 526.828878][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.954409][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 526.987176][ T9] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 527.004712][T12912] comedi comedi0: pcl724: I/O port conflict (0x8002f,4) [ 527.041577][ T9] usb 10-1: config 1 has no interface number 1 [ 527.077579][ T9] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.105856][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 527.132442][ T9] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.146813][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.158822][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.172889][ T9] usb 10-1: Product: syz [ 527.182140][ T9] usb 10-1: Manufacturer: syz [ 527.197992][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2053'. [ 527.319169][ T9] usb 10-1: SerialNumber: syz [ 527.971562][T12915] rdma_rxe: rxe_newlink: failed to add bond0 [ 528.552981][ T9] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 529.417569][ T9] usb 10-1: 2:1: cannot get freq at ep 0x82 [ 529.639389][ T9] usb 10-1: USB disconnect, device number 3 [ 529.784215][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.793493][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.801352][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.809664][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.817602][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.825529][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.833440][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.841344][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.849301][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 529.857202][T12945] netlink: 'syz.7.2056': attribute type 3 has an invalid length. [ 530.150600][T12950] loop1: detected capacity change from 0 to 512 [ 530.326241][T12953] xt_hashlimit: max too large, truncated to 1048576 [ 531.352102][T12950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.526988][T12950] ext4 filesystem being mounted at /479/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 531.565435][T12961] comedi comedi0: pcl724: I/O port conflict (0x8002f,4) [ 532.015040][T12950] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.1.2063: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 532.513342][T12950] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #12: comm syz.1.2063: directory missing '.' [ 532.926762][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.316756][T12983] loop9: detected capacity change from 0 to 2048 [ 534.328325][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 534.682879][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 534.894507][T12983] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.275668][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.480341][T13004] usb usb8: usbfs: process 13004 (syz.9.2074) did not claim interface 0 before use [ 536.719107][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2069'. [ 536.744771][T13017] xt_TPROXY: Can be used only with -p tcp or -p udp [ 536.837667][T13006] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.907170][T13018] loop1: detected capacity change from 0 to 512 [ 537.234939][T13018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.257259][T13018] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 537.359412][T13016] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.1.2078: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 537.396590][T13006] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.420584][T13016] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #12: comm syz.1.2078: directory missing '.' [ 537.582205][T13006] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.915795][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.261127][T13006] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.128807][T13037] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 539.573888][ T6397] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.658128][T10347] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.117022][ T3495] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.260041][ T3495] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.556938][T13049] usb usb8: usbfs: process 13049 (syz.8.2089) did not claim interface 0 before use [ 542.785596][T13065] loop8: detected capacity change from 0 to 512 [ 542.964899][T13065] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.977846][T13065] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.007608][T13065] EXT4-fs error (device loop8): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.8.2092: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 543.045157][T13065] EXT4-fs error (device loop8): ext4_get_first_dir_block:3540: inode #12: comm syz.8.2092: directory missing '.' [ 543.954048][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.934149][T13088] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 544.942107][T13088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.302353][T13094] validate_nla: 42 callbacks suppressed [ 545.302372][T13094] netlink: 'syz.1.2098': attribute type 4 has an invalid length. [ 545.316740][T13094] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2098'. [ 545.948935][T13101] Bluetooth: MGMT ver 1.23 [ 547.329492][T13125] loop8: detected capacity change from 0 to 256 [ 547.935990][T13125] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 547.948395][T13125] exFAT-fs (loop8): failed to load alloc-bitmap [ 547.954889][T13125] exFAT-fs (loop8): failed to recognize exfat type [ 548.049396][T13119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 548.135870][T13124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2106'. [ 551.143327][T13151] loop9: detected capacity change from 0 to 2048 [ 551.204369][T13151] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.336665][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.659313][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2117'. [ 553.117373][ T5822] Bluetooth: hci3: link tx timeout [ 553.124278][ T5822] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 553.491677][T13182] xt_TPROXY: Can be used only with -p tcp or -p udp [ 555.365015][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 555.678902][T13196] loop9: detected capacity change from 0 to 2048 [ 555.851978][T13196] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.263924][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.168751][T13223] loop9: detected capacity change from 0 to 128 [ 558.276498][T13223] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 558.305038][T13223] FAT-fs (loop9): Filesystem has been set read-only [ 558.317667][T13223] syz.9.2135: attempt to access beyond end of device [ 558.317667][T13223] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 558.362704][T13223] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 558.390460][T13223] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 558.410797][T13223] syz.9.2135: attempt to access beyond end of device [ 558.410797][T13223] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 558.587227][ T30] audit: type=1800 audit(1764014082.353:1070): pid=13223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2135" name="file2" dev="loop9" ino=1048725 res=0 errno=0 [ 558.718880][T13232] netlink: 'syz.1.2133': attribute type 4 has an invalid length. [ 558.726789][T13232] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2133'. [ 559.155235][T13223] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.2135' sets config #1 [ 561.966832][T13245] loop2: detected capacity change from 0 to 2048 [ 562.107725][T13245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.454294][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.338589][T13272] netlink: 'syz.9.2148': attribute type 4 has an invalid length. [ 563.346676][T13272] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2148'. [ 564.313199][ T43] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 564.530157][ T43] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.568976][ T43] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.690676][ T43] usb 10-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 565.298332][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.204142][ T43] usb 10-1: config 0 descriptor?? [ 566.291583][T13126] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 566.352163][T13295] loop1: detected capacity change from 0 to 2048 [ 566.596910][T13295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.745398][T13126] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 566.770441][T13126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.807869][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.854162][T13126] usb 3-1: config 0 has no interfaces? [ 566.870921][T13126] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 566.985605][T13126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.062047][T13307] loop8: detected capacity change from 0 to 512 [ 567.071044][ T5942] usb 10-1: USB disconnect, device number 4 [ 567.083010][T13126] usb 3-1: config 0 descriptor?? [ 567.151167][T13307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.238534][T13307] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.261656][ T5863] usb 3-1: USB disconnect, device number 13 [ 567.983910][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.242700][T13322] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 571.942946][T13352] loop8: detected capacity change from 0 to 164 [ 571.958340][T13352] isofs_fill_super: root inode is not a directory. Corrupted media? [ 572.917924][T13365] binder_alloc: 13362: binder_alloc_buf, no vma [ 573.243187][T13375] loop2: detected capacity change from 0 to 7 [ 573.257440][T13375] Dev loop2: unable to read RDB block 7 [ 573.263258][T13375] loop2: unable to read partition table [ 573.271471][T13375] loop2: partition table beyond EOD, truncated [ 573.278001][T13375] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 573.939514][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 574.303618][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 580.390795][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.407888][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.619777][T13439] ALSA: mixer_oss: invalid OSS volume '' [ 582.543446][ T5863] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 582.798231][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'. [ 582.861175][ T5863] usb 10-1: Using ep0 maxpacket: 16 [ 582.869046][ T5863] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.881165][ T5863] usb 10-1: config 0 has no interfaces? [ 582.908794][ T5863] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 582.988884][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.032945][ T5863] usb 10-1: Product: syz [ 583.037533][ T5863] usb 10-1: Manufacturer: syz [ 583.045522][ T5863] usb 10-1: SerialNumber: syz [ 583.063517][ T5863] usb 10-1: config 0 descriptor?? [ 583.081181][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.180150][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.224939][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.252509][ T6051] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.552245][ T5863] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 586.608515][T12502] usb 10-1: USB disconnect, device number 5 [ 586.624320][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2219'. [ 586.758931][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.778769][ T5863] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 586.792107][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.818102][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.826126][ T5863] usb 2-1: Product: syz [ 586.840697][ T5863] usb 2-1: Manufacturer: syz [ 586.846216][ T5863] usb 2-1: SerialNumber: syz [ 587.054281][ T5822] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 587.616515][T13509] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 588.098384][T13534] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 588.371370][ T5863] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 588.429933][ T5863] cdc_ncm 2-1:1.0: bind() failure [ 588.544249][ T5863] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 588.638265][ T5863] cdc_ncm 2-1:1.1: bind() failure [ 589.700114][T13554] netlink: 'syz.9.2233': attribute type 4 has an invalid length. [ 589.708084][T13554] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2233'. [ 590.473426][T13126] usb 2-1: USB disconnect, device number 7 [ 591.982071][ T5822] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 595.379027][T13614] binder: 13608:13614 ioctl 4018620d 0 returned -22 [ 595.436184][T13614] binder: 13608:13614 ioctl c0306201 0 returned -14 [ 595.829134][ T6046] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 596.135549][ T6046] usb 2-1: unable to get BOS descriptor or descriptor too short [ 596.156340][ T5822] Bluetooth: Wrong link type (-71) [ 596.632102][ T6046] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.660429][ T6046] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 596.675562][ T6046] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 596.707597][ T6046] usb 2-1: config 1 interface 1 has no altsetting 0 [ 596.732918][ T6046] usb 2-1: string descriptor 0 read error: -22 [ 596.740282][ T6046] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.750337][ T6046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.805636][ T6046] hub 2-1:1.2: Invalid hub with more than one config or interface [ 596.813597][ T6046] hub 2-1:1.2: probe with driver hub failed with error -22 [ 597.046332][T12609] usb 2-1: USB disconnect, device number 8 [ 597.435851][T13632] syz.9.2257 (13632) used obsolete PPPIOCDETACH ioctl [ 598.940878][T13651] FAT-fs (nbd2): unable to read boot sector [ 599.388369][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 599.777968][ T5822] Bluetooth: Wrong link type (-71) [ 606.494633][T13735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.603364][ T5863] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 610.873877][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.901173][ T5863] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 610.948729][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.972094][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.031526][ T5863] usb 2-1: Product: syz [ 611.047660][ T5863] usb 2-1: Manufacturer: syz [ 611.075041][ T5863] usb 2-1: SerialNumber: syz [ 611.322296][T13771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 611.828089][ T5863] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 611.854836][ T5863] cdc_ncm 2-1:1.0: bind() failure [ 611.867162][ T5863] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 611.873997][ T5863] cdc_ncm 2-1:1.1: bind() failure [ 612.207033][ T5863] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 612.498453][ T5863] usb 10-1: Using ep0 maxpacket: 16 [ 612.526054][T13804] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 612.534644][ T5863] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.554114][ T5863] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 612.572498][ T5863] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 612.585840][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.594303][ T5863] usb 10-1: Product: syz [ 612.598928][ T5863] usb 10-1: Manufacturer: syz [ 612.604305][ T5863] usb 10-1: SerialNumber: syz [ 612.614916][ T5863] usb 10-1: config 0 descriptor?? [ 613.081627][ T5863] usb 2-1: USB disconnect, device number 9 [ 615.312298][ T5863] usb 10-1: USB disconnect, device number 6 [ 615.580789][T13840] infiniband syz2: set down [ 615.585454][T13840] infiniband syz2: added ipvlan0 [ 616.179199][T13840] RDS/IB: syz2: added [ 616.183272][T13840] smc: adding ib device syz2 with port count 1 [ 616.189574][T13840] smc: ib device syz2 port 1 has no pnetid [ 617.477460][T13852] comedi comedi3: dt2817: I/O port conflict (0x6,5) [ 619.199653][T13866] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2325'. [ 619.683417][T13876] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 620.697220][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 621.278345][T13889] 9p: Bad value for 'rfdno' [ 623.855649][T13901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.876535][T13901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.181097][T13369] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.196196][T13369] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.214763][T13369] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.242124][T13369] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.062107][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2349'. [ 626.877395][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2349'. [ 629.295118][T12609] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 629.488260][T12609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.511684][T12609] usb 10-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 629.523707][T12609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.543856][T12609] usb 10-1: config 0 descriptor?? [ 630.129659][T12609] hid_parser_main: 2 callbacks suppressed [ 630.129681][T12609] hid-alps 0003:044E:1215.0005: unknown main item tag 0x0 [ 630.788257][T12609] hid-alps 0003:044E:1215.0005: hidraw0: USB HID v58.6c Device [HID 044e:1215] on usb-dummy_hcd.9-1/input0 [ 631.033570][T12609] usb 10-1: USB disconnect, device number 7 [ 631.099509][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2359'. [ 631.137959][T13975] fido_id[13975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 631.173689][T13976] rdma_rxe: rxe_newlink: failed to add bond0 [ 631.557492][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2361'. [ 631.829318][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2361'. [ 632.262514][T12609] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 632.974587][T12609] usb 10-1: Using ep0 maxpacket: 32 [ 632.981981][T12609] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.992539][T12609] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.031244][T12609] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.115940][T12609] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 633.160725][T12609] usb 10-1: config 0 interface 0 has no altsetting 0 [ 633.171255][T12609] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 633.327264][T12609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.505216][T12609] usb 10-1: config 0 descriptor?? [ 634.700672][T12609] usbhid 10-1:0.0: can't add hid device: -71 [ 634.708700][T12609] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 634.720515][T12609] usb 10-1: USB disconnect, device number 8 [ 635.405760][T14016] overlayfs: failed to get inode (-116) [ 635.426590][T14016] overlayfs: failed to get inode (-116) [ 635.611807][T14016] overlayfs: failed to get inode (-116) [ 635.618917][T14016] overlayfs: failed to get inode (-116) [ 636.335096][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 637.109833][T14023] rdma_rxe: rxe_newlink: failed to add bond0 [ 638.279012][T14051] tmpfs: Bad value for 'mpol' [ 638.504567][T14024] syz.7.2374 (14024) used greatest stack depth: 16264 bytes left [ 641.856760][T14106] loop7: detected capacity change from 0 to 512 [ 641.971956][T14106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.001922][T14106] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.498703][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'. [ 643.181499][T10435] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.895483][T14136] loop8: detected capacity change from 0 to 8 [ 643.903643][T14136] unable to read inode lookup table [ 645.719662][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2416'. [ 645.832055][T14155] loop1: detected capacity change from 0 to 512 [ 645.865897][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 645.873429][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 645.923070][T14155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.980508][T14155] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.809600][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.548582][T14167] delete_channel: no stack [ 647.804321][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2424'. [ 647.868641][T14179] rdma_rxe: rxe_newlink: failed to add bond0 [ 647.896703][T14184] loop6: detected capacity change from 0 to 524287487 [ 647.925068][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 647.934330][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.003121][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.028352][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.040850][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.050715][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.065189][T14191] loop8: detected capacity change from 0 to 512 [ 648.075000][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.109634][T14191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.127804][T14191] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.138915][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.149126][T14184] ldm_validate_partition_table(): Disk read failed. [ 648.214680][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.373596][T14184] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.468965][T14184] Dev loop6: unable to read RDB block 0 [ 648.551990][T14184] loop6: unable to read partition table [ 648.688979][T14184] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 649.590098][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.308032][T14237] loop2: detected capacity change from 0 to 512 [ 651.502819][T14237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.614464][T14243] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 651.624666][T14243] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 651.642872][T14243] loop9: detected capacity change from 0 to 512 [ 651.683056][T14237] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.793495][T14243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.826652][T14243] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 652.032094][T14243] EXT4-fs error (device loop9): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.9.2444: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 652.055289][T14243] EXT4-fs error (device loop9): ext4_get_first_dir_block:3540: inode #12: comm syz.9.2444: directory missing '.' [ 652.326327][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.124338][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.151544][T14254] loop6: detected capacity change from 0 to 524287487 [ 653.159854][T14254] ldm_validate_partition_table(): Disk read failed. [ 653.295113][T14254] buffer_io_error: 15 callbacks suppressed [ 653.295152][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.295655][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.296398][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.296994][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.297481][T14254] Dev loop6: unable to read RDB block 0 [ 653.297593][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.859687][T14254] Buffer I/O error on dev loop6, logical block 3, async page read [ 653.907111][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.949430][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.045278][T14254] loop6: unable to read partition table [ 654.239924][T14254] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 654.250552][ T6080] Buffer I/O error on dev loop6, logical block 0, async page read [ 655.286994][T14282] loop8: detected capacity change from 0 to 128 [ 655.391891][T14282] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 655.410335][T14282] FAT-fs (loop8): Filesystem has been set read-only [ 655.417505][T14282] syz.8.2455: attempt to access beyond end of device [ 655.417505][T14282] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 655.434337][T14280] FAT-fs (nbd7): unable to read boot sector [ 655.452033][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2454'. [ 655.487845][T14289] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.2455' sets config #1 [ 655.568240][T14282] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 655.683305][T14292] loop1: detected capacity change from 0 to 512 [ 655.729214][T14282] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 655.742156][T14282] syz.8.2455: attempt to access beyond end of device [ 655.742156][T14282] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 656.239121][ T30] audit: type=1800 audit(1764014173.695:1071): pid=14282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2455" name="file2" dev="loop8" ino=1048726 res=0 errno=0 [ 656.278709][T14292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.295266][T14292] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.387232][T14292] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.1.2459: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 656.445222][T14292] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #12: comm syz.1.2459: directory missing '.' [ 657.924648][T14310] loop7: detected capacity change from 0 to 8 [ 657.933780][T14310] unable to read inode lookup table [ 657.970030][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.497827][T14316] input: syz1 as /devices/virtual/input/input17 [ 659.541640][T14333] loop7: detected capacity change from 0 to 128 [ 660.131696][T14333] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 660.159649][T14333] FAT-fs (loop7): Filesystem has been set read-only [ 660.180588][T14333] syz.7.2470: attempt to access beyond end of device [ 660.180588][T14333] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 660.213013][T14333] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 660.226752][T14333] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 660.393568][T14333] syz.7.2470: attempt to access beyond end of device [ 660.393568][T14333] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 660.401957][T14339] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2470' sets config #1 [ 660.487498][ T30] audit: type=1800 audit(1764014177.680:1072): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2470" name="file2" dev="loop7" ino=1048727 res=0 errno=0 [ 660.830809][T14346] loop2: detected capacity change from 0 to 512 [ 660.893480][T14346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.992399][T14346] ext4 filesystem being mounted at /536/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.477863][T14346] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.2473: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 661.524116][T14346] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.2473: directory missing '.' [ 661.719955][T14359] loop8: detected capacity change from 0 to 8 [ 661.729075][T14359] unable to read inode lookup table [ 661.820648][T14362] input: syz1 as /devices/virtual/input/input18 [ 661.903974][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.182135][T14369] loop6: detected capacity change from 0 to 524287487 [ 662.189745][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.204694][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.234646][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.254911][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.444237][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.454139][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.465026][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.473067][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.481562][T14369] ldm_validate_partition_table(): Disk read failed. [ 662.492337][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.524273][T14369] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.582243][T14369] Dev loop6: unable to read RDB block 0 [ 662.616798][T14369] loop6: unable to read partition table [ 662.664736][T14369] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 663.002766][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2486'. [ 663.005149][T14384] loop7: detected capacity change from 0 to 128 [ 663.347485][T14389] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2485' sets config #1 [ 663.595847][T14396] loop9: detected capacity change from 0 to 512 [ 665.084199][T14396] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.166981][T14396] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 665.476143][T14414] netlink: 'syz.2.2492': attribute type 4 has an invalid length. [ 665.485110][T14414] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2492'. [ 666.296935][T14396] EXT4-fs error (device loop9): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.9.2489: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 666.575104][T14396] EXT4-fs error (device loop9): ext4_get_first_dir_block:3540: inode #12: comm syz.9.2489: directory missing '.' [ 667.692620][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.048386][T14440] loop2: detected capacity change from 0 to 128 [ 669.069283][T14440] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 669.098009][T14440] FAT-fs (loop2): Filesystem has been set read-only [ 669.192045][T14440] syz.2.2500: attempt to access beyond end of device [ 669.192045][T14440] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 669.273748][T14440] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 669.281742][T14440] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 669.362789][T14440] syz.2.2500: attempt to access beyond end of device [ 669.362789][T14440] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 669.458053][T14449] input: syz1 as /devices/virtual/input/input19 [ 669.519844][ T30] audit: type=1800 audit(1764014186.108:1073): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2500" name="file2" dev="loop2" ino=1048729 res=0 errno=0 [ 670.813922][T14465] loop8: detected capacity change from 0 to 512 [ 670.975351][T14465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.145166][T14465] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.222308][T14465] EXT4-fs error (device loop8): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.8.2508: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 671.399464][T14473] ªªªªªª: renamed from lo (while UP) [ 671.412367][T14465] EXT4-fs error (device loop8): ext4_get_first_dir_block:3540: inode #12: comm syz.8.2508: directory missing '.' [ 671.885803][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.198902][T14496] loop9: detected capacity change from 0 to 128 [ 673.255888][T14496] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 673.271860][T14496] FAT-fs (loop9): Filesystem has been set read-only [ 673.278500][T14496] syz.9.2515: attempt to access beyond end of device [ 673.278500][T14496] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 673.538778][T14499] tipc: Started in network mode [ 673.544347][T14499] tipc: Node identity 46, cluster identity 4711 [ 673.550877][T14499] tipc: Node number set to 70 [ 673.718552][T14496] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 673.751045][T14496] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 673.764362][T14496] syz.9.2515: attempt to access beyond end of device [ 673.764362][T14496] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 673.868679][ T30] audit: type=1800 audit(1764014190.195:1074): pid=14496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2515" name="file2" dev="loop9" ino=1048730 res=0 errno=0 [ 673.920066][T14496] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.2515' sets config #1 [ 673.934752][T14503] fuse: Bad value for 'fd' [ 675.558601][T14522] loop2: detected capacity change from 0 to 512 [ 675.652205][T14522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.750530][T14522] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 675.762051][T14528] loop1: detected capacity change from 0 to 2048 [ 675.815593][T14528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.879571][T14522] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.2523: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 675.953978][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.968164][T14522] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.2523: directory missing '.' [ 675.986921][ T30] audit: type=1326 audit(1764014192.178:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.8.2525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effff78f749 code=0x0 [ 676.770451][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.492948][T14545] comedi comedi0: pcl724: I/O port conflict (0x8002f,4) [ 677.651997][T14550] loop1: detected capacity change from 0 to 128 [ 678.200641][T14550] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 678.208520][T14550] FAT-fs (loop1): Filesystem has been set read-only [ 678.215575][T14550] syz.1.2530: attempt to access beyond end of device [ 678.215575][T14550] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 678.230318][T14550] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 678.254561][T14550] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 678.271433][T14550] syz.1.2530: attempt to access beyond end of device [ 678.271433][T14550] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 678.276076][T14555] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2530' sets config #1 [ 678.414236][ T30] audit: type=1800 audit(1764014194.433:1076): pid=14550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2530" name="file2" dev="loop1" ino=1048731 res=0 errno=0 [ 680.502319][T14582] loop1: detected capacity change from 0 to 512 [ 680.527363][T14582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.559505][T14582] ext4 filesystem being mounted at /570/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.579288][T14582] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.1.2538: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 680.605041][T14582] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #12: comm syz.1.2538: directory missing '.' [ 683.216814][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.502545][T14607] loop2: detected capacity change from 0 to 128 [ 684.651936][T14607] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 684.702014][T14607] FAT-fs (loop2): Filesystem has been set read-only [ 684.726346][T14614] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2543' sets config #1 [ 685.653794][T14607] syz.2.2543: attempt to access beyond end of device [ 685.653794][T14607] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 685.680000][T14607] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 685.701640][T14607] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 685.711081][T14607] syz.2.2543: attempt to access beyond end of device [ 685.711081][T14607] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 685.776333][ T30] audit: type=1800 audit(1764014201.336:1077): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2543" name="file2" dev="loop2" ino=1048732 res=0 errno=0 [ 686.074848][ T5822] Bluetooth: hci3: link tx timeout [ 686.080042][ T5822] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 686.869513][T14638] loop1: detected capacity change from 0 to 512 [ 686.890978][T14638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.933128][T14638] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 687.020133][T14638] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.1.2551: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 687.277844][T14638] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #12: comm syz.1.2551: directory missing '.' [ 688.272916][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 688.455531][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.091934][ T5822] Bluetooth: hci3: Malformed LE Event: 0x1d [ 689.834354][ T107] IPVS: starting estimator thread 0... [ 689.927772][T14663] IPVS: using max 34 ests per chain, 81600 per kthread [ 689.957880][T14668] loop1: detected capacity change from 0 to 128 [ 690.111809][T14668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 690.140020][T14668] FAT-fs (loop1): Filesystem has been set read-only [ 690.201765][T14668] syz.1.2560: attempt to access beyond end of device [ 690.201765][T14668] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 691.018837][T14672] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2560' sets config #1 [ 691.128204][T14668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 691.279458][T14668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 691.296614][T14668] syz.1.2560: attempt to access beyond end of device [ 691.296614][T14668] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 691.316516][ T30] audit: type=1800 audit(1764014206.518:1078): pid=14668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2560" name="file2" dev="loop1" ino=1048733 res=0 errno=0 [ 692.445980][T14692] loop8: detected capacity change from 0 to 512 [ 692.496323][T14692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.579556][T14692] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.739611][T14692] EXT4-fs error (device loop8): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.8.2566: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 692.768959][T14692] EXT4-fs error (device loop8): ext4_get_first_dir_block:3540: inode #12: comm syz.8.2566: directory missing '.' [ 693.430346][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.119888][T14723] loop7: detected capacity change from 0 to 128 [ 696.202175][T14723] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 696.224587][T14723] FAT-fs (loop7): Filesystem has been set read-only [ 696.231228][T14723] syz.7.2574: attempt to access beyond end of device [ 696.231228][T14723] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 696.375562][T14723] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 696.383896][T14723] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 696.413868][T14728] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2574' sets config #1 [ 696.448177][T14723] syz.7.2574: attempt to access beyond end of device [ 696.448177][T14723] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 696.589119][ T30] audit: type=1800 audit(1764014211.448:1079): pid=14723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2574" name="file2" dev="loop7" ino=1048734 res=0 errno=0 [ 697.804163][T14741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 697.810215][T14741] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 697.831180][T14746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 697.843669][T14741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 697.849750][T14741] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 706.953087][T14808] loop1: detected capacity change from 0 to 2048 [ 706.992022][T14808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.365042][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.975286][T14837] loop2: detected capacity change from 0 to 512 [ 710.618427][T14837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.649686][T14837] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.130281][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.550519][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.557282][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.437315][T14868] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2612'. [ 714.791119][T14882] loop9: detected capacity change from 0 to 512 [ 714.867101][T14882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.946489][T14882] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.061674][T13126] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 715.232701][T13126] usb 3-1: Using ep0 maxpacket: 32 [ 715.339655][T13126] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 715.500681][T13126] usb 3-1: config 0 has no interface number 0 [ 715.609637][T13126] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 715.864136][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.920972][T13126] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 716.009581][T13126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.138410][T14906] netlink: 868 bytes leftover after parsing attributes in process `syz.9.2624'. [ 716.385375][T13126] usb 3-1: Product: syz [ 716.389739][T13126] usb 3-1: Manufacturer: syz [ 716.394423][T13126] usb 3-1: SerialNumber: syz [ 716.402443][T13126] usb 3-1: config 0 descriptor?? [ 716.409021][T14881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 716.926651][T14881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 718.096273][T14921] loop9: detected capacity change from 0 to 2048 [ 718.263290][T14921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.307111][T14926] netlink: 212916 bytes leftover after parsing attributes in process `syz.7.2629'. [ 718.918679][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.180288][T14941] loop7: detected capacity change from 0 to 512 [ 719.254099][T14941] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.330032][T14941] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.223902][T13126] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 720.270414][T10435] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.282592][T13126] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 720.309837][T13126] asix 3-1:0.188: probe with driver asix failed with error -71 [ 720.546968][T13126] usb 3-1: USB disconnect, device number 14 [ 720.892351][T14965] netlink: 868 bytes leftover after parsing attributes in process `syz.1.2638'. [ 723.336020][T14987] loop8: detected capacity change from 0 to 512 [ 723.626557][T14987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.733145][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 723.746136][T14987] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.766327][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 723.955501][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 723.976448][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 723.984133][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.912466][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.920734][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.962448][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.973055][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.980769][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.201132][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.859261][T15006] netlink: 868 bytes leftover after parsing attributes in process `syz.8.2650'. [ 727.187094][ T5822] Bluetooth: hci1: command tx timeout [ 728.991297][T15037] netlink: 'syz.2.2657': attribute type 2 has an invalid length. [ 729.303474][T15044] FAT-fs (nbd8): unable to read boot sector [ 729.410062][ T5822] Bluetooth: hci1: command tx timeout [ 729.560820][ T4536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.606836][ T4536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.819683][T15046] netlink: 860 bytes leftover after parsing attributes in process `syz.2.2662'. [ 730.063081][ T4536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.073435][ T4536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.613762][ T4536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.633971][ T4536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.632144][ T5822] Bluetooth: hci1: command tx timeout [ 732.237274][ T4536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.261087][ T4536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.383654][T14994] chnl_net:caif_netlink_parms(): no params data found [ 733.480323][T15087] loop8: detected capacity change from 0 to 512 [ 733.696729][T15087] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.764946][T15087] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.856624][ T5822] Bluetooth: hci1: command tx timeout [ 734.434923][T15097] netlink: 860 bytes leftover after parsing attributes in process `syz.2.2673'. [ 734.634759][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.696688][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.753822][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.778956][ T4536] bond0 (unregistering): Released all slaves [ 736.010163][T14994] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.017347][T14994] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.025230][T14994] bridge_slave_0: entered allmulticast mode [ 736.033065][T14994] bridge_slave_0: entered promiscuous mode [ 736.352117][T14994] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.367836][T14994] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.396813][T14994] bridge_slave_1: entered allmulticast mode [ 736.420849][T14994] bridge_slave_1: entered promiscuous mode [ 736.588668][T14994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.619063][T14994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.191595][T15141] loop2: detected capacity change from 0 to 512 [ 738.294959][T15141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.405420][T15141] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.960825][T14994] team0: Port device team_slave_0 added [ 739.141674][T14994] team0: Port device team_slave_1 added [ 739.438310][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.163058][T15159] netlink: 860 bytes leftover after parsing attributes in process `syz.7.2687'. [ 740.717424][T14994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.730257][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.758408][T14994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.886375][ T4536] hsr_slave_0: left promiscuous mode [ 740.905618][ T4536] hsr_slave_1: left promiscuous mode [ 740.920459][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.936973][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.045842][ T4536] veth1_macvtap: left promiscuous mode [ 741.059610][ T4536] veth0_macvtap: left promiscuous mode [ 741.071954][T12609] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 741.079834][ T4536] veth1_vlan: left promiscuous mode [ 741.090870][ T4536] veth0_vlan: left promiscuous mode [ 741.268477][T12609] usb 3-1: Using ep0 maxpacket: 8 [ 741.277985][T12609] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 741.326230][T12609] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.362945][T12609] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.401773][T12609] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.412194][T12609] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.426010][T12609] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.435099][T12609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.866112][T12609] usb 3-1: usb_control_msg returned -32 [ 741.886315][T12609] usbtmc 3-1:16.0: can't read capabilities [ 742.447588][T15194] loop7: detected capacity change from 0 to 512 [ 742.511318][T15194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.578396][T15194] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.687219][T15201] evm: overlay not supported [ 743.441963][T10435] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.773190][T15214] netlink: 860 bytes leftover after parsing attributes in process `syz.7.2699'. [ 744.632904][ T7007] usb 3-1: USB disconnect, device number 15 [ 745.674109][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 745.975592][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 747.055861][T15248] loop9: detected capacity change from 0 to 512 [ 747.128598][T15248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.141651][T15248] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.781392][T14994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.788763][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.823341][T14994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.126371][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.364428][T14994] hsr_slave_0: entered promiscuous mode [ 748.989379][T14994] hsr_slave_1: entered promiscuous mode [ 748.997847][T14994] debugfs: 'hsr0' already exists in 'hsr' [ 749.003614][T14994] Cannot create hsr debugfs directory [ 750.953740][T15304] netlink: 860 bytes leftover after parsing attributes in process `syz.7.2721'. [ 751.088912][T14994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 751.312510][T14994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 751.530296][T14994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 751.591783][T14994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 752.424367][T15325] FAT-fs (nbd9): unable to read boot sector [ 753.310047][T14994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.381301][T14994] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.428586][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.435840][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.502219][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.509378][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.727528][T15356] netlink: 860 bytes leftover after parsing attributes in process `syz.2.2732'. [ 754.930941][T15362] vivid-007: disconnect [ 755.499165][T15351] vivid-007: reconnect [ 755.723268][T14994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.912920][T14994] veth0_vlan: entered promiscuous mode [ 755.946813][T14994] veth1_vlan: entered promiscuous mode [ 756.380140][T14994] veth0_macvtap: entered promiscuous mode [ 756.489216][T14994] veth1_macvtap: entered promiscuous mode [ 756.542386][T14994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.566657][T14994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.830785][T10343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.899813][ T1036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.945407][ T1036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.989045][ T1036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.117927][T10343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.147674][T10343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.202157][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2738'. [ 757.245849][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.288768][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.121121][T15418] netlink: 772 bytes leftover after parsing attributes in process `syz.9.2742'. [ 760.080890][T15434] loop6: detected capacity change from 0 to 524287487 [ 760.390957][T15434] buffer_io_error: 7 callbacks suppressed [ 760.390969][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.474011][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.544537][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.555967][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.579635][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.627385][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.677952][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.711993][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 761.928915][T15434] ldm_validate_partition_table(): Disk read failed. [ 761.961042][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.035899][T15434] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.053208][T15434] Dev loop6: unable to read RDB block 0 [ 762.056127][T15453] misc userio: Invalid payload size [ 762.059672][T15434] loop6: unable to read partition table [ 762.086216][T15434] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 762.983358][T15473] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 763.030846][ T5899] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 763.203649][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 763.229813][ T5899] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 763.256047][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 763.319850][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 763.345496][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.420685][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.433899][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 763.443042][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.451433][T15476] netlink: 772 bytes leftover after parsing attributes in process `syz.2.2756'. [ 763.696930][ T5899] usb 2-1: GET_CAPABILITIES returned 0 [ 763.703382][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 765.007321][T15507] misc userio: Invalid payload size [ 766.097277][ T5972] usb 2-1: USB disconnect, device number 10 [ 766.304698][T15518] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2769'. [ 767.584275][T13126] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 767.819468][T13126] usb 2-1: Using ep0 maxpacket: 16 [ 768.273550][T13126] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.285925][T13126] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.297621][T13126] usb 2-1: config 0 interface 0 has no altsetting 0 [ 768.349298][T13126] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 768.376035][T13126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.406969][T13126] usb 2-1: config 0 descriptor?? [ 769.338825][T15543] misc userio: Invalid payload size [ 769.369147][T13126] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 769.415608][T13126] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 769.424871][T13126] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 769.432478][T13126] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 769.453058][T13126] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 769.915000][T13126] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 770.753367][ T5942] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 771.154654][ T107] usb 2-1: USB disconnect, device number 11 [ 771.432822][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 771.447938][ T5942] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 771.478674][ T5942] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.507117][ T5942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.754605][ T5942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 771.787513][ T5942] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.842056][ T5942] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 772.111914][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.836953][ T5942] usb 3-1: GET_CAPABILITIES returned 0 [ 772.864833][ T5942] usbtmc 3-1:16.0: can't read capabilities [ 773.976697][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'. [ 774.364352][T12910] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 774.558717][T12910] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 774.572262][T12910] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 774.581632][T12910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.982545][ T5972] usb 3-1: USB disconnect, device number 16 [ 775.006361][T12910] usb 10-1: config 0 descriptor?? [ 776.246785][T12910] usb 10-1: language id specifier not provided by device, defaulting to English [ 776.276405][ T5899] IPVS: starting estimator thread 0... [ 776.527786][T12910] letsketch 0003:6161:4D15.0007: Device info: 㡵 [ 776.646634][T15616] tipc: Started in network mode [ 776.653382][T15616] tipc: Node identity 46, cluster identity 4711 [ 776.659722][T15616] tipc: Node number set to 70 [ 776.758839][T15609] IPVS: using max 42 ests per chain, 100800 per kthread [ 777.007867][T12910] letsketch 0003:6161:4D15.0007: Device info: 繋 [ 777.035808][T12910] letsketch 0003:6161:4D15.0007: Device info: 劸 [ 777.294062][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.300508][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.638040][T12910] usb 10-1: Max retries (5) exceeded reading string descriptor 1 [ 777.648204][T12910] letsketch 0003:6161:4D15.0007: probe with driver letsketch failed with error -71 [ 777.706401][T12910] usb 10-1: USB disconnect, device number 9 [ 779.222294][T15640] sp0: Synchronizing with TNC [ 779.265361][T15637] [U] è [ 780.103007][T15639] orangefs_mount: mount request failed with -4 [ 780.315059][T15649] loop6: detected capacity change from 0 to 524287487 [ 780.334781][T15649] buffer_io_error: 7 callbacks suppressed [ 780.334798][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 780.606838][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 780.835431][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 780.862074][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 780.870018][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 780.962756][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 780.996320][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.089050][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.102837][T15649] ldm_validate_partition_table(): Disk read failed. [ 781.110087][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.120329][T15649] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.132055][T15649] Dev loop6: unable to read RDB block 0 [ 781.142482][T15649] loop6: unable to read partition table [ 781.149742][T15649] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 781.192992][ T5822] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 781.203808][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 781.203833][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 781.203846][ T5822] Workqueue: hci1 hci_rx_work [ 781.203875][ T5822] Call Trace: [ 781.203881][ T5822] [ 781.203885][ T5822] dump_stack_lvl+0x189/0x250 [ 781.203907][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.203951][ T5822] sysfs_create_dir_ns+0x259/0x280 [ 781.203974][ T5822] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 781.203995][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 781.204019][ T5822] kobject_add_internal+0x59f/0xb70 [ 781.204046][ T5822] kobject_add+0x155/0x220 [ 781.204060][ T5822] ? __pfx_kobject_add+0x10/0x10 [ 781.204071][ T5822] ? _raw_spin_unlock+0x3f/0x50 [ 781.204087][ T5822] ? get_device_parent+0x366/0x3a0 [ 781.204103][ T5822] device_add+0x408/0xb80 [ 781.204118][ T5822] hci_conn_add_sysfs+0xd5/0x210 [ 781.204131][ T5822] le_conn_complete_evt+0xf1d/0x1420 [ 781.204151][ T5822] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 781.204163][ T5822] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 781.204173][ T5822] ? irqentry_exit+0x5dd/0x660 [ 781.204185][ T5822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 781.204194][ T5822] ? skb_pull_data+0xfb/0x200 [ 781.204215][ T5822] hci_le_conn_complete_evt+0x187/0x480 [ 781.204233][ T5822] hci_event_packet+0x78f/0x1260 [ 781.204246][ T5822] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 781.204261][ T5822] ? __pfx_hci_event_packet+0x10/0x10 [ 781.204273][ T5822] ? kcov_remote_start+0x4d3/0x810 [ 781.204283][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.204295][ T5822] ? hci_send_to_monitor+0xe2/0x590 [ 781.204310][ T5822] hci_rx_work+0x3ee/0x1060 [ 781.204326][ T5822] ? process_one_work+0x868/0x15e0 [ 781.204337][ T5822] process_one_work+0x93a/0x15e0 [ 781.204348][ T5822] ? __lock_acquire+0xab9/0xd20 [ 781.204371][ T5822] ? __pfx_process_one_work+0x10/0x10 [ 781.204388][ T5822] ? assign_work+0x3a1/0x410 [ 781.204402][ T5822] worker_thread+0x9b0/0xee0 [ 781.204428][ T5822] kthread+0x711/0x8a0 [ 781.204440][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 781.204451][ T5822] ? __pfx_kthread+0x10/0x10 [ 781.204461][ T5822] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.204474][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.204482][ T5822] ? __pfx_kthread+0x10/0x10 [ 781.204491][ T5822] ret_from_fork+0x599/0xb30 [ 781.204504][ T5822] ? __pfx_ret_from_fork+0x10/0x10 [ 781.204521][ T5822] ? __switch_to_asm+0x39/0x70 [ 781.204530][ T5822] ? __switch_to_asm+0x33/0x70 [ 781.204538][ T5822] ? __pfx_kthread+0x10/0x10 [ 781.204547][ T5822] ret_from_fork_asm+0x1a/0x30 [ 781.204566][ T5822] [ 781.460851][ T5822] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 781.476151][ T5822] Bluetooth: hci1: failed to register connection device [ 785.853409][T15716] batadv0: entered promiscuous mode [ 786.039820][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 786.085329][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 786.095813][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 786.103796][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 786.113667][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 786.603828][ T6086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.802855][ T6086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.001427][ T6086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.131843][T15661] Bluetooth: hci1: command 0x0406 tx timeout [ 788.432830][ T5822] Bluetooth: hci2: command tx timeout [ 789.643046][ T6086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.928414][T15746] FAT-fs (nbd1): unable to read boot sector [ 790.457619][T15759] vivid-007: disconnect [ 790.465865][T15756] vivid-007: reconnect [ 790.491280][ T30] audit: type=1326 audit(1764014299.282:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15750 comm="syz.7.2839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40ec38f749 code=0x0 [ 790.541031][T15717] chnl_net:caif_netlink_parms(): no params data found [ 790.650049][ T5822] Bluetooth: hci2: command tx timeout [ 790.759262][ T6086] bridge_slave_1: left allmulticast mode [ 790.766987][ T6086] bridge_slave_1: left promiscuous mode [ 790.779795][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.801415][ T6086] bridge_slave_0: left allmulticast mode [ 790.814365][ T6086] bridge_slave_0: left promiscuous mode [ 790.828523][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.867645][ T5822] Bluetooth: hci2: command tx timeout [ 793.149628][T15790] netlink: 'syz.7.2848': attribute type 4 has an invalid length. [ 793.157490][T15790] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2848'. [ 793.772364][T15800] syz2: rxe_newlink: already configured on ipvlan0 [ 795.122649][ T5822] Bluetooth: hci2: command tx timeout [ 795.500257][T15801] FAT-fs (nbd1): unable to read boot sector [ 796.560205][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.572900][ T6086] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 796.582786][ T6086] bond0 (unregistering): Released all slaves [ 797.605458][T15717] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.616054][T15717] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.627094][T15717] bridge_slave_0: entered allmulticast mode [ 797.639912][T15717] bridge_slave_0: entered promiscuous mode [ 797.671513][T15717] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.775490][T15717] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.782775][T15717] bridge_slave_1: entered allmulticast mode [ 797.791213][T15717] bridge_slave_1: entered promiscuous mode [ 798.013383][T15717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.355657][T15717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.055063][T15717] team0: Port device team_slave_0 added [ 800.076521][T15717] team0: Port device team_slave_1 added [ 800.197787][ T6086] hsr_slave_0: left promiscuous mode [ 800.215443][T15868] netlink: 'syz.8.2867': attribute type 4 has an invalid length. [ 800.233641][ T6086] hsr_slave_1: left promiscuous mode [ 800.243121][T15868] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2867'. [ 800.256030][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.272544][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.293856][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.312212][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.381405][ T6086] veth1_macvtap: left promiscuous mode [ 800.412301][ T6086] veth0_macvtap: left promiscuous mode [ 800.450518][ T6086] veth1_vlan: left promiscuous mode [ 801.067337][ T6086] veth0_vlan: left promiscuous mode [ 804.801357][T15919] fuse: Unknown parameter 'group_id00000000000000000000' [ 804.869278][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 805.057969][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 807.103391][T15946] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 808.246390][T15953] overlayfs: failed lookup in lower (newroot/297, name='file0', err=-40): overlapping layers [ 809.784764][T15971] fuse: Unknown parameter 'group_id00000000000000000000' [ 810.833736][T15717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.841032][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.448552][T15717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.464859][ T7007] infiniband syz0: ib_query_port failed (-19) [ 811.503966][T15717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.514360][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.554753][T15717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.715681][ T7007] libceph: connect (1)[c::]:6789 error -101 [ 811.722219][ T7007] libceph: mon0 (1)[c::]:6789 connect error [ 811.745566][ T7007] libceph: connect (1)[c::]:6789 error -101 [ 811.752392][ T7007] libceph: mon0 (1)[c::]:6789 connect error [ 811.764846][T15717] hsr_slave_0: entered promiscuous mode [ 811.799097][T15717] hsr_slave_1: entered promiscuous mode [ 811.824959][T15717] debugfs: 'hsr0' already exists in 'hsr' [ 811.830716][T15717] Cannot create hsr debugfs directory [ 812.051978][ T7007] libceph: connect (1)[c::]:6789 error -101 [ 812.083845][ T7007] libceph: mon0 (1)[c::]:6789 connect error [ 812.855852][ T130] libceph: connect (1)[c::]:6789 error -101 [ 812.862088][ T130] libceph: mon0 (1)[c::]:6789 connect error [ 812.908257][T15985] ceph: No mds server is up or the cluster is laggy [ 814.382634][T16023] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 815.125534][T16029] overlayfs: failed to resolve './file1/file0': -2 [ 816.524380][T15717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 816.541367][T15717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 817.094803][T15717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 817.127252][T15717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 818.414051][T15717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.497465][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 818.499954][T15717] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.520115][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 818.528502][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.535752][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.577166][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.584371][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.816550][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 818.824752][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 819.381523][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 819.396673][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 819.414717][T16057] ceph: No mds server is up or the cluster is laggy [ 819.640263][T16078] overlayfs: failed to resolve './file1/file0': -2 [ 820.188284][T15717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.350176][T15717] veth0_vlan: entered promiscuous mode [ 820.396294][T15717] veth1_vlan: entered promiscuous mode [ 820.744221][T15717] veth0_macvtap: entered promiscuous mode [ 820.757030][T15717] veth1_macvtap: entered promiscuous mode [ 821.916076][T15717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.018740][T15717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.421669][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.526543][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.549096][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.562674][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2929'. [ 822.574682][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.793320][T10342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.811466][T10342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.027137][T10349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.049862][T10349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.451935][T16101] infiniband syz0: set down [ 823.456963][T16101] infiniband syz0: added bond0 [ 823.512990][T16101] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 823.516556][T16101] infiniband syz0: Couldn't open port 1 [ 823.688613][T16101] RDS/IB: syz0: added [ 823.716150][T16123] overlayfs: failed to resolve './file1/file0': -2 [ 823.825272][T16101] smc: adding ib device syz0 with port count 1 [ 824.212484][T16101] smc: ib device syz0 port 1 has no pnetid [ 830.072598][T16190] netlink: 'syz.9.2949': attribute type 4 has an invalid length. [ 830.141653][T16190] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2949'. [ 831.599630][T12838] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 831.785424][T12838] usb 2-1: Using ep0 maxpacket: 8 [ 831.817445][T12838] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 831.833076][T12838] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.856864][T12838] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.874025][T12838] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 831.890781][T12838] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.913061][T12838] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 831.923088][T12838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.222181][ T7261] usb 2-1: USB disconnect, device number 12 [ 836.728984][T16243] bond1 (unregistering): Released all slaves [ 839.521341][ T5907] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 839.756777][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 839.774717][ T5907] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 839.786093][ T5907] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 839.796275][ T5907] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 839.834003][ T5907] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 839.847115][ T5907] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.860676][ T5907] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 839.891364][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.457738][ T5907] usb 2-1: USB disconnect, device number 13 [ 842.905818][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 842.912293][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.926107][T16386] IPVS: nq: FWM 3 0x00000003 - no destination available [ 846.933161][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 850.875099][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 851.151763][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.205892][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 851.226444][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.255409][ T43] usb 3-1: config 0 descriptor?? [ 851.289337][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 851.762455][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 851.774115][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 851.781788][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 851.797008][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 851.828176][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 851.845320][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 851.926905][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 852.094701][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 852.106633][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 852.142827][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 852.163071][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 852.179821][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 852.450943][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 852.467729][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 852.496839][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 852.644612][ T43] pwc: Registered as video103. [ 852.665268][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 852.682066][ T43] usb 3-1: USB disconnect, device number 17 [ 852.959427][ T7007] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 853.194691][ T7007] usb 2-1: Using ep0 maxpacket: 8 [ 853.207877][ T7007] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 853.321310][ T7007] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 853.675928][ T7007] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 853.685847][ T7007] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 853.695860][ T7007] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.750582][ T7007] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 853.793425][ T7007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.684393][T16461] netlink: 212924 bytes leftover after parsing attributes in process `syz.9.3030'. [ 856.070426][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 856.142917][ T5907] usb 2-1: USB disconnect, device number 14 [ 858.183908][T16501] fuse: Invalid rootmode [ 858.288243][T16484] infiniband syz!: set active [ 858.292990][T16484] infiniband syz!: added team_slave_0 [ 858.300601][T16484] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 858.303673][T16484] infiniband syz!: Couldn't open port 1 [ 859.167934][T16484] RDS/IB: syz!: added [ 859.192733][T16484] smc: adding ib device syz! with port count 1 [ 859.199296][T16484] smc: ib device syz! port 1 has no pnetid [ 859.500266][T16517] tipc: Enabled bearer , priority 0 [ 859.524871][T16517] syzkaller0: entered promiscuous mode [ 859.530381][T16517] syzkaller0: entered allmulticast mode [ 859.565418][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3048'. [ 859.602783][T16517] syzkaller0: MTU too low for tipc bearer [ 859.617385][T16517] tipc: Disabling bearer [ 861.441403][T16534] fuse: Invalid rootmode [ 861.744878][ T10] IPVS: starting estimator thread 0... [ 861.880915][T16540] IPVS: using max 28 ests per chain, 67200 per kthread [ 864.765723][T16552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 864.771665][T16552] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 864.845420][T16552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 864.851675][T16552] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 866.311344][T16561] loop6: detected capacity change from 0 to 524287487 [ 866.319022][T16561] buffer_io_error: 7 callbacks suppressed [ 866.319038][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.333038][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.341748][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.350397][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.359161][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.372284][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.380384][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.391157][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.401307][T16561] ldm_validate_partition_table(): Disk read failed. [ 866.408372][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.416417][T16561] Buffer I/O error on dev loop6, logical block 0, async page read [ 866.424482][T16561] Dev loop6: unable to read RDB block 0 [ 866.431854][T16561] loop6: unable to read partition table [ 866.439109][T16561] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 866.587261][T16558] bond2 (unregistering): Released all slaves [ 869.701236][ T5907] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 873.519471][ T5907] usb 10-1: device not accepting address 10, error -71 [ 873.820066][T16606] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.123016][T16610] bond1 (unregistering): Released all slaves [ 878.531367][T16628] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 879.718007][T16628] usb 10-1: Using ep0 maxpacket: 8 [ 880.789967][T16639] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 880.801792][T16639] block device autoloading is deprecated and will be removed. [ 880.978775][T16628] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 880.987070][T16628] usb 10-1: can't read configurations, error -71 [ 884.069115][ T30] audit: type=1326 audit(1764014386.816:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.2.3093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb44fb8f749 code=0x0 [ 908.625934][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 908.632266][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.762795][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 999.769801][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16595/1:b..l P16678/1:b..l [ 999.779549][ C1] rcu: (detected by 1, t=10502 jiffies, g=75273, q=751 ncpus=2) [ 999.787258][ C1] task:syz-executor state:R running task stack:24400 pid:16678 tgid:16678 ppid:5806 task_flags:0x400100 flags:0x00080000 [ 999.801948][ C1] Call Trace: [ 999.805217][ C1] [ 999.808136][ C1] __schedule+0x14bc/0x5030 [ 999.812637][ C1] ? __pfx___schedule+0x10/0x10 [ 999.817468][ C1] ? do_raw_spin_lock+0x121/0x290 [ 999.822476][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 999.827824][ C1] ? preempt_schedule+0xae/0xc0 [ 999.832651][ C1] preempt_schedule_common+0x83/0xd0 [ 999.837911][ C1] preempt_schedule+0xae/0xc0 [ 999.842561][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 999.847911][ C1] preempt_schedule_thunk+0x16/0x30 [ 999.853095][ C1] _raw_spin_unlock+0x3f/0x50 [ 999.857756][ C1] ? copy_pmd_range+0x7653/0x7fa0 [ 999.862753][ C1] copy_pmd_range+0x7689/0x7fa0 [ 999.867611][ C1] ? arch_stack_walk+0xfc/0x150 [ 999.872446][ C1] ? stack_trace_save+0x9c/0xe0 [ 999.877279][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 999.882634][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 999.887822][ C1] ? copy_process+0x1663/0x3950 [ 999.892649][ C1] ? kernel_clone+0x21e/0x850 [ 999.897319][ C1] copy_page_range+0xb88/0x11d0 [ 999.902167][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 999.907716][ C1] ? up_write+0x1a8/0x430 [ 999.912028][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 999.918773][ C1] dup_mmap+0xeed/0x1b00 [ 999.923009][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 999.927675][ C1] ? mm_init+0xa91/0xc60 [ 999.931902][ C1] copy_mm+0x13c/0x4b0 [ 999.935953][ C1] copy_process+0x1663/0x3950 [ 999.940614][ C1] ? copy_process+0x915/0x3950 [ 999.945359][ C1] ? __pfx_copy_process+0x10/0x10 [ 999.950359][ C1] ? perf_event_namespaces+0x15e/0x920 [ 999.955796][ C1] ? copy_pid_ns+0x7bd/0x8d0 [ 999.960370][ C1] kernel_clone+0x21e/0x850 [ 999.964860][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 999.969860][ C1] ? __lock_acquire+0xab9/0xd20 [ 999.974700][ C1] __x64_sys_clone+0x18b/0x1e0 [ 999.979440][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 999.984715][ C1] ? do_syscall_64+0xbe/0xfa0 [ 999.989367][ C1] do_syscall_64+0xfa/0xfa0 [ 999.993845][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.999888][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1000.004540][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.010411][ C1] RIP: 0033:0x7fbe43785e93 [ 1000.014816][ C1] RSP: 002b:00007ffc07233028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1000.023204][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbe43785e93 [ 1000.031161][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1000.039111][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1000.047057][ C1] R10: 000055558091e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1000.055008][ C1] R13: 0000000000000003 R14: 00007ffc072333f8 R15: 0000000000000000 [ 1000.062969][ C1] [ 1000.065976][ C1] task:syz.7.3072 state:R running task stack:24712 pid:16595 tgid:16590 ppid:10435 task_flags:0x400140 flags:0x00080002 [ 1000.079433][ C1] Call Trace: [ 1000.082696][ C1] [ 1000.085662][ C1] __schedule+0x14bc/0x5030 [ 1000.090182][ C1] ? __pfx___schedule+0x10/0x10 [ 1000.095027][ C1] ? __lock_acquire+0xab9/0xd20 [ 1000.099873][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1000.105141][ C1] preempt_schedule_irq+0xb5/0x150 [ 1000.110237][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1000.115945][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1000.121731][ C1] irqentry_exit+0x5d8/0x660 [ 1000.126308][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1000.132288][ C1] RIP: 0010:lock_release+0x2ac/0x3d0 [ 1000.137574][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 f4 d9 d7 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 1000.157207][ C1] RSP: 0018:ffffc90003e7f2b0 EFLAGS: 00000206 [ 1000.163261][ C1] RAX: 21cad335b649fb00 RBX: 0000000000000202 RCX: 21cad335b649fb00 [ 1000.171221][ C1] RDX: 0000000000000002 RSI: ffffffff8d977664 RDI: ffffffff8bbf7760 [ 1000.179178][ C1] RBP: ffff888029126700 R08: ffffc90003e7f908 R09: 0000000000000000 [ 1000.187135][ C1] R10: ffffc90003e7f438 R11: fffff520007cfe89 R12: 0000000000000002 [ 1000.195095][ C1] R13: 0000000000000002 R14: ffffffff8df3d700 R15: ffff888029125b80 [ 1000.203063][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1000.208161][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1000.213252][ C1] unwind_next_frame+0x19a9/0x2390 [ 1000.218347][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1000.223453][ C1] ? kernfs_put+0x18e/0x480 [ 1000.227940][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1000.234073][ C1] arch_stack_walk+0x11c/0x150 [ 1000.238830][ C1] ? kernfs_remove_by_name_ns+0xb7/0x130 [ 1000.244460][ C1] stack_trace_save+0x9c/0xe0 [ 1000.249122][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1000.254481][ C1] ? stack_depot_save_flags+0x40/0x860 [ 1000.259940][ C1] kasan_save_stack+0x3e/0x60 [ 1000.264599][ C1] ? kasan_save_stack+0x3e/0x60 [ 1000.269425][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1000.274774][ C1] ? call_rcu+0x157/0x9c0 [ 1000.279081][ C1] ? kernfs_put+0x18e/0x480 [ 1000.283628][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1000.288809][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 1000.294073][ C1] call_rcu+0x157/0x9c0 [ 1000.298218][ C1] ? delete_node+0x2de/0xa50 [ 1000.302794][ C1] ? __pfx_call_rcu+0x10/0x10 [ 1000.307518][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1000.312698][ C1] kernfs_put+0x18e/0x480 [ 1000.317012][ C1] ? __kernfs_remove+0x4d9/0x650 [ 1000.321934][ C1] kernfs_remove_by_name_ns+0xb7/0x130 [ 1000.327399][ C1] sysfs_remove_group+0xfc/0x2f0 [ 1000.332387][ C1] sysfs_remove_groups+0x54/0xb0 [ 1000.337318][ C1] ib_free_port_attrs+0xc5/0x3b0 [ 1000.342245][ C1] rdma_dev_exit_net+0x1d8/0x340 [ 1000.347163][ C1] ? __pfx___might_resched+0x10/0x10 [ 1000.352494][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1000.357933][ C1] ? net_generic+0x1e/0x240 [ 1000.362415][ C1] ? mutex_is_locked+0x17/0x50 [ 1000.367159][ C1] ? rtnl_is_locked+0x15/0x20 [ 1000.371814][ C1] ops_undo_list+0x49a/0x990 [ 1000.376385][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 1000.381479][ C1] ? ops_init+0x469/0x5c0 [ 1000.385793][ C1] setup_net+0x2e8/0x330 [ 1000.390020][ C1] ? __pfx_setup_net+0x10/0x10 [ 1000.394764][ C1] ? copy_net_ns+0x3cc/0x570 [ 1000.399598][ C1] ? down_read_killable+0x1bd/0x350 [ 1000.404781][ C1] ? preinit_net+0x47d/0x780 [ 1000.409352][ C1] copy_net_ns+0x3e3/0x570 [ 1000.413750][ C1] create_new_namespaces+0x3e7/0x6a0 [ 1000.419017][ C1] ? security_capable+0x7e/0x2e0 [ 1000.423936][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 1000.429636][ C1] ksys_unshare+0x4c8/0x8c0 [ 1000.434119][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 1000.439123][ C1] __x64_sys_unshare+0x38/0x50 [ 1000.443866][ C1] do_syscall_64+0xfa/0xfa0 [ 1000.448346][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.454390][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1000.459051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.464922][ C1] RIP: 0033:0x7f40ec38f749 [ 1000.469313][ C1] RSP: 002b:00007f40ed215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1000.477705][ C1] RAX: ffffffffffffffda RBX: 00007f40ec5e6090 RCX: 00007f40ec38f749 [ 1000.485658][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1000.493609][ C1] RBP: 00007f40ec413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1000.501558][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.509511][ C1] R13: 00007f40ec5e6128 R14: 00007f40ec5e6090 R15: 00007fff779a8b78 [ 1000.517498][ C1] [ 1000.520499][ C1] rcu: rcu_preempt kthread starved for 10493 jiffies! g75273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1000.531705][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1000.541655][ C1] rcu: RCU grace-period kthread stack dump: [ 1000.549083][ C1] task:rcu_preempt state:R running task stack:27200 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1000.562640][ C1] Call Trace: [ 1000.565924][ C1] [ 1000.568841][ C1] __schedule+0x14bc/0x5030 [ 1000.573345][ C1] ? __pfx___schedule+0x10/0x10 [ 1000.578182][ C1] ? schedule+0x91/0x360 [ 1000.582400][ C1] schedule+0x165/0x360 [ 1000.586532][ C1] schedule_timeout+0x12b/0x270 [ 1000.591454][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1000.596842][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1000.602717][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1000.607981][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1000.613512][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1000.618360][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1000.623538][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1000.629678][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1000.634956][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1000.640140][ C1] ? finish_swait+0xcd/0x1f0 [ 1000.644716][ C1] rcu_gp_kthread+0x99/0x390 [ 1000.649289][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1000.654812][ C1] ? __kthread_parkme+0x7b/0x200 [ 1000.659840][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1000.664848][ C1] kthread+0x711/0x8a0 [ 1000.668895][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1000.674071][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.678636][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1000.683815][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1000.688990][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.693558][ C1] ret_from_fork+0x599/0xb30 [ 1000.698134][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1000.703228][ C1] ? __switch_to_asm+0x39/0x70 [ 1000.707979][ C1] ? __switch_to_asm+0x33/0x70 [ 1000.712719][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.717285][ C1] ret_from_fork_asm+0x1a/0x30 [ 1000.722032][ C1] [ 1000.725036][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1000.731344][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1000.736557][ C0] NMI backtrace for cpu 0 [ 1000.736576][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1000.736611][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1000.736627][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1000.736647][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 40 0c 00 f3 0f 1e fa fb f4 c8 f2 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1000.736660][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1000.736674][ C0] RAX: a34fdf362bb3b700 RBX: ffffffff8197a977 RCX: a34fdf362bb3b700 [ 1000.736686][ C0] RDX: 0000000000000001 RSI: ffffffff8d790e8f RDI: ffffffff8bbf7760 [ 1000.736697][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1000.736716][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f7df370 [ 1000.736727][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a60 [ 1000.736738][ C0] FS: 0000000000000000(0000) GS:ffff888125eb8000(0000) knlGS:0000000000000000 [ 1000.736750][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1000.736761][ C0] CR2: 00007f32a4efde80 CR3: 000000007617a000 CR4: 00000000003526f0 [ 1000.736775][ C0] Call Trace: [ 1000.736780][ C0] [ 1000.736786][ C0] default_idle+0x13/0x20 [ 1000.736803][ C0] default_idle_call+0x73/0xb0 [ 1000.736820][ C0] do_idle+0x1e7/0x510 [ 1000.736838][ C0] ? irqentry_exit+0x5ba/0x660 [ 1000.736855][ C0] ? __pfx_do_idle+0x10/0x10 [ 1000.736881][ C0] cpu_startup_entry+0x44/0x60 [ 1000.736900][ C0] rest_init+0x2de/0x300 [ 1000.736917][ C0] start_kernel+0x3a7/0x410 [ 1000.736933][ C0] x86_64_start_reservations+0x24/0x30 [ 1000.736951][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1000.736969][ C0] common_startup_64+0x13e/0x147 [ 1000.736991][ C0]