last executing test programs: 12m46.691929175s ago: executing program 32 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) clock_gettime(0x0, 0x0) utimes(0x0, &(0x7f0000002240)) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) 12m38.178698688s ago: executing program 33 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) 10m8.062772847s ago: executing program 34 (id=276): r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") r1 = openat(r0, 0x0, 0x200000, 0x1a4) sendmsg$AUDIT_SET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 9m52.482446296s ago: executing program 35 (id=308): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 9m45.722349254s ago: executing program 36 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 8m37.440651566s ago: executing program 6 (id=431): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x62, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x39, 0x37, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 8m36.475503952s ago: executing program 6 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 8m25.893311987s ago: executing program 6 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_secret(0x0) ftruncate(r2, 0x51a9497) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) preadv2(r4, &(0x7f0000003500)=[{0x0}, {0x0}], 0x2, 0x0, 0x7e, 0x10) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x1, 0x20, 0x3e7, 0x20, 0x1, &(0x7f0000000040)=[0x0], 0x1, 0x0}) 8m24.070804837s ago: executing program 6 (id=447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 8m16.526158834s ago: executing program 6 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003525d7f0803040ae8b8000102030109022400017f04700509046a0802b0592dab090507080800060e0609050f"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$key(0xf, 0x3, 0x2) syz_open_dev$MSR(&(0x7f0000000000), 0x6, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(&(0x7f00000002c0)=@filename='ubi0_0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='ubifs\x00', 0x8000, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xff}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x4}, &(0x7f0000000180)=0x8) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500080000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) recvmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/238, 0xee}], 0x1}, 0x40010000) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143042, 0x59) fallocate(r7, 0x0, 0x9, 0x10001) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)=0xfffffffffffffed7) 8m9.6064527s ago: executing program 6 (id=457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0x200080, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x7002}, {&(0x7f0000000140)=""/222, 0xde}], 0x2) 7m52.1806578s ago: executing program 37 (id=457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0x200080, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x7002}, {&(0x7f0000000140)=""/222, 0xde}], 0x2) 7m23.123260236s ago: executing program 7 (id=521): r0 = msgget$private(0x0, 0x41b5ec9c19d036db) r1 = openat(0xffffffffffffff9c, 0x0, 0x62c40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/242) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x0, 0x64}, 0x28) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000280)=ANY=[], 0x0, 0x1b5, &(0x7f0000000080)="$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") 7m20.826162981s ago: executing program 7 (id=525): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x33, 0x65, 0x63, 0x65, 0x66, 0x34, 0x63, 0x66, 0x31, 0x38, 0x38, 0x37, 0x38, 0x0, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x61, 0x30, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x61, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x35, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x65, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x63, 0x66, 0x30, 0x30, 0x31, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x65, 0x38, 0x30, 0x30, 0x65]}, &(0x7f0000000800)={0x0, "0011223380ffffff8899aabbbcddeeff001122334455667736e59ce1f3495a3e00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 7m20.114756682s ago: executing program 9 (id=528): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) 7m19.953579256s ago: executing program 7 (id=531): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80000) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x53, "175d0feab1df47ac84f339b2162b6cdb10045d3aad65f107d3a90361e49126956a7783f0d265b0ae8d30e3e272a8cdb985c6cd7cfa9fedac5a48949727f48c1681243a557b7f5b6b85196cfae8e5e203316012067106dc88e03ae780bc76f61462d1f02a1dc1569513102080b4bade99d8c879ceb21f526b2b6ffcbd1bed7b24"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c00018008000100000001001400000011000100000000000000000a000a00"], 0xb0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40080c0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, r1, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) 7m16.435563294s ago: executing program 9 (id=533): sched_setscheduler(0x0, 0x1, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', 0x0, &(0x7f00000000c0)='\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 7m15.728742104s ago: executing program 7 (id=536): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_get$uid(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)=0x11) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) 7m13.160059953s ago: executing program 9 (id=539): openat$full(0xffffffffffffff9c, 0x0, 0x12b282, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000000), 0x75) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000940)={r3}) sendfile(r1, r3, 0x0, 0x9) 7m12.992874786s ago: executing program 7 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sched_setattr(r1, 0x0, 0x0) inotify_init() r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84", 0xcc, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 7m10.7987063s ago: executing program 9 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) 7m9.099877275s ago: executing program 7 (id=547): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m6.530869068s ago: executing program 9 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {0x0, 0x9}, {}, @raw32}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) 7m0.377118437s ago: executing program 9 (id=558): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) sendto$inet6(r0, 0x0, 0x0, 0x810, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5411, 0x0) 6m53.342720945s ago: executing program 38 (id=547): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m45.263178668s ago: executing program 39 (id=558): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) sendto$inet6(r0, 0x0, 0x0, 0x810, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5411, 0x0) 5m42.516431356s ago: executing program 8 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) 5m40.902103918s ago: executing program 8 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bca38be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 5m39.564313836s ago: executing program 8 (id=681): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5m37.323879051s ago: executing program 8 (id=683): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 5m32.83449552s ago: executing program 8 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000040)=""/42) fsmount(0xffffffffffffffff, 0x0, 0x80) open(0x0, 0x80140, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) 5m30.820886845s ago: executing program 8 (id=695): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 5m15.277936654s ago: executing program 40 (id=695): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 40.408118422s ago: executing program 4 (id=1149): inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x52000b04) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000340)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0xfe4e, 0x4040001}, 0x20004840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r6, &(0x7f0000000040)='oom_score_adj & 1&', 0x12) 36.400835312s ago: executing program 4 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r7 = semget$private(0x0, 0x3, 0x100) semtimedop(r7, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$SETVAL(r7, 0x2, 0x10, &(0x7f0000000100)=0x3) 30.324480393s ago: executing program 4 (id=1162): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r1, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) fcntl$setpipe(r4, 0x407, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f00000000c0)={0x1, 0x1}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5}, 0x0) 24.170487635s ago: executing program 5 (id=1177): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, 0x0) getdents(r5, 0x0, 0x0) 22.102726523s ago: executing program 5 (id=1181): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) r1 = fsopen(&(0x7f0000000340)='ceph\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r3, 0x4, 0x82, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x80c0) sendmmsg(r2, &(0x7f0000000700)=[{{&(0x7f00000003c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)="b149a8a4f1c59dfcb3e8ca4fee7b77b1b1005c8178", 0x15}], 0x1, 0x0, 0x1c8}}], 0x1, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x600000e, 0x64c6, 0x3) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='[27.0.0.1\x00', 0x0) syz_pidfd_open(0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c444, &(0x7f0000000480)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,errors=continue,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,subj_user=-+]^(-%*@@k+,:@{^[^@,uid>', @ANYRES32, @ANYBLOB="2c617564692c0093591481b2dac6c586482df1499a5d110264abd884a04c3c17f1c678294ba89de3d86c0645512aed6d9103b453b32f2367ac88ec9428d5c7acbe688a0077fcfc4862ee05f019c1f7fd56a6ffbf9af11e85ba202f6f3745d3"], 0x1, 0x211, &(0x7f0000000a00)="$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") setfsgid(0xee00) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x3fffffff}}, 0x100) r5 = syz_open_dev$evdev(0x0, 0x0, 0x2002) writev(r5, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f0000000740)=ANY=[@ANYBLOB="f9d492964ab9c4762069ad7eb36db65c2a7305ebc3a6c412c862e5e187296a6d48cd7fae979280bc8de5340a8a9683fedef7cc8775d1683f92b443725e05ad66c9353c2344d6ccf9e95d13973c54b5c5f57e889d56efc8b9d2339fffa9cf9d838972e898e44abd50aa194c06ae2ed3472980550c182a8a0f7951153cb9939e4d1dc7ede40b3c48bcba1f299127", @ANYRESHEX=r0, @ANYBLOB=',iocharset=maciceland,codepage=cp950,quiet,quiet,\x00'], 0x2, 0x2fd, &(0x7f0000001100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x13f) 20.457158286s ago: executing program 0 (id=1184): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) uname(0x0) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x17d) r2 = openat(0xffffffffffffff9c, 0x0, 0x503002, 0x40) pwritev(r2, 0x0, 0x0, 0x800, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88c3f946cad3b39e, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 17.406931854s ago: executing program 4 (id=1185): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x8601, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='1234567890\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) 16.568118862s ago: executing program 5 (id=1187): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, 0x0, 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x8601, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='1234567890\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) 16.303058283s ago: executing program 3 (id=1188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0xdc82964405a8d329) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x610900, 0x80, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100001d60f27fd7f0400"/25, @ANYRES32=0x0, @ANYBLOB="0320000000000000140012800a00010069706f696200000004000280080020007f040000"], 0x3c}}, 0x0) write(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xc, 0x9, 0x62, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8000, 0x7, 0x9, 0x4}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0xa6fe, 0x1000, 0x3, 0x200404e}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000740)={0x2020}, 0x2020) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 14.923111414s ago: executing program 1 (id=1189): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf0000"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = io_uring_setup(0x6ed6, &(0x7f00000004c0)={0x0, 0xbf57, 0x40000, 0x2, 0x26e}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x3, 0x1}, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x400000000000007c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x400e0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 14.915870223s ago: executing program 0 (id=1190): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001540)) dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.829695156s ago: executing program 5 (id=1191): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(0x0, 0xdafbe5d6891b6e4) execve(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000002000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000001fc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 14.115085614s ago: executing program 2 (id=1192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000400)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r7, 0x1, 0x0, 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) 13.947008535s ago: executing program 3 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000"], 0x30}, 0x3400c8d4) mkdir(0x0, 0x1ff) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) 13.386590743s ago: executing program 0 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'sed\x00', 0x10, 0x81, 0x40000077}, {@rand_addr=0x64010100, 0x4e21, 0x0, 0x6, 0x1002, 0x8}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001") 11.662463306s ago: executing program 5 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc517ba9b67", 0x98}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18}, 0x2c000811) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x0, 0x40055}, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 10.642898941s ago: executing program 3 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000"], 0x30}, 0x3400c8d4) mkdir(0x0, 0x1ff) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000480)=0x3) 9.144571304s ago: executing program 2 (id=1197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000000)={0xc6a1, 0x5}) r1 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x49) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffa83) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x7, 0x7fff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 9.093466016s ago: executing program 1 (id=1198): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r3, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r3, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000b00000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r4, 0x0, 0xa0028000}, 0x38) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x50) setsockopt(r3, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r3, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, 0x0, 0x0, 0x317, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8.710561733s ago: executing program 0 (id=1199): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c46800b040001000200010000000200030001000000dd0000003800000045030000080000f504002000010005000900000000000000030000000400000007000000000000008000"], 0x158) close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x10, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000010) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000100)={0x20, 0xc, 0x5, 0x1, 0x0, 0x7, 0x0}) pidfd_send_signal(0xffffffffffffffff, 0x3e, 0x0, 0x0) write(r0, &(0x7f0000000080)="040000000000", 0x6) 8.494753625s ago: executing program 3 (id=1200): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 8.09221141s ago: executing program 0 (id=1201): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 6.015740746s ago: executing program 5 (id=1202): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x249, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) chroot(0x0) r4 = socket$inet(0x2, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r5], 0x44}}, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.631043531s ago: executing program 2 (id=1203): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, 0x0, 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x8601, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='1234567890\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) 5.517883886s ago: executing program 1 (id=1204): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2, 0x0) ioctl(r2, 0x40946400, &(0x7f0000000100)='pc212e') r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000040)=0x5, 0x12) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) chdir(&(0x7f00000001c0)='./bus\x00') 5.450476069s ago: executing program 4 (id=1205): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x3) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r3, 0x0, 0x0, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x8010, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.287650429s ago: executing program 2 (id=1206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 3.284293799s ago: executing program 4 (id=1207): syz_emit_ethernet(0x66, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)='hfsplus\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x30000000}) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, 0x0) pwrite64(r0, 0x0, 0x0, 0xe7c) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000540)={r4, 0x0, 0x412800, &(0x7f0000000480)={@align=0x7, {0x0, 0x9, 0x9, 0x7fff}}, 0xa30, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.416190079s ago: executing program 2 (id=1208): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) pwrite64(r4, &(0x7f0000000080), 0xfdcf, 0x404042ffe) 2.281139912s ago: executing program 1 (id=1209): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d8, 0x325, 0x378, 0x3d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x11}, 0x0, 0x230, 0x2a0, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x4000000000000, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x3, 0x10, 0x6, 0x0, "a3248fc87b24ee73f335970c3a5369f49905a21ae893e7653334ffb53ae7806048e252e29e369d98586fe7b4535788469805bc21c887a286f4033514ea854ac9"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xffffff, 0xff000000], 'bond_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x62, 0xbc, 0x1, 0x4}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r7 = semget(0x2, 0x3, 0x33a) semtimedop(r7, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x8000}}, 0x26) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) 1.85658976s ago: executing program 3 (id=1210): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='readonly', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) 1.391001502s ago: executing program 1 (id=1211): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.20704088s ago: executing program 0 (id=1212): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000001140)=ANY=[@ANYBLOB='rodir,shortname=mixed,uni_xlate=1,utf8=0,shortname=win95,shortname=winnt,shortname=winnt,utf8=1,iocharset=iso8859-8,shortname=lower,\x00'], 0x1, 0x264, &(0x7f0000001640)="$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") madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8000, 0x10000) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r1, r1, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r6, 0x4004743c, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) 690.74455ms ago: executing program 2 (id=1213): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000480)=0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000900)={0x7, 0x7f, 0x200}) pwritev(r0, 0x0, 0x0, 0x2, 0xffffff7f) 372.464246ms ago: executing program 1 (id=1214): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) r1 = getpid() mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x4, @val=@tracing={0x0, 0x5}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='6', 0x1) sched_setaffinity(r1, 0xfffffffffffffd4b, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0xfffffffffffffffe, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 3 (id=1215): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xeffe, 0x3}, 0x6) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x80000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x9c2a}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0x0, 0x8000000000000000, 0x9}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) kernel console output (not intermixed with test programs): ilesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.276299][T10426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.353654][T10038] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.361057][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.361073][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.361104][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.634746][T10441] loop4: detected capacity change from 0 to 128 [ 617.637936][T10441] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 617.640253][T10441] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 617.723790][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.723903][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.601129][T10452] loop4: detected capacity change from 0 to 4096 [ 618.609519][T10452] ntfs3: Unknown parameter '1' [ 618.741458][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.741573][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.980602][T10268] hsr_slave_0: entered promiscuous mode [ 621.009121][T10268] hsr_slave_1: entered promiscuous mode [ 621.030145][T10268] debugfs: 'hsr0' already exists in 'hsr' [ 621.030167][T10268] Cannot create hsr debugfs directory [ 621.252709][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 621.252732][ T31] audit: type=1800 audit(2000000027.098:411): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.797" name="file1" dev="overlay" ino=1104 res=0 errno=0 [ 621.253319][T10458] evm: overlay not supported [ 621.430674][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.430803][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.430941][T10326] bridge_slave_0: entered allmulticast mode [ 621.436006][T10326] bridge_slave_0: entered promiscuous mode [ 621.440689][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.441948][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.442092][T10326] bridge_slave_1: entered allmulticast mode [ 621.450877][T10326] bridge_slave_1: entered promiscuous mode [ 621.592148][T10464] loop4: detected capacity change from 0 to 1024 [ 621.595573][T10464] EXT4-fs: Ignoring removed bh option [ 621.787766][T10464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.892319][T10469] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 621.908363][T10469] i2c i2c-0: delete_device: Can't find device in list [ 622.183769][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.344491][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.475520][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.678193][T10489] loop4: detected capacity change from 0 to 128 [ 622.749888][T10489] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 622.782241][T10489] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 622.877297][T10326] team0: Port device team_slave_0 added [ 623.040267][T10326] team0: Port device team_slave_1 added [ 623.318096][T10496] loop5: detected capacity change from 0 to 1024 [ 623.336272][T10496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.336332][T10496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.340181][T10496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 623.456656][T10496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.500794][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.522674][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.522693][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.522724][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.533540][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.533556][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.533587][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.660428][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.660489][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.696556][T10500] loop2: detected capacity change from 0 to 2048 [ 623.737437][T10500] loop2: p1 < > p3 [ 623.797943][T10500] loop2: p3 size 134217728 extends beyond EOD, truncated [ 623.881860][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 623.905459][T10500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.290415][T10326] hsr_slave_0: entered promiscuous mode [ 624.301684][T10326] hsr_slave_1: entered promiscuous mode [ 624.307387][T10326] debugfs: 'hsr0' already exists in 'hsr' [ 624.307426][T10326] Cannot create hsr debugfs directory [ 624.372931][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 624.374125][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 624.647429][T10520] loop4: detected capacity change from 0 to 32768 [ 624.689446][T10520] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 624.727623][T10520] XFS (loop4): Ending clean mount [ 625.335496][ T5945] bridge_slave_1: left allmulticast mode [ 625.335570][ T5945] bridge_slave_1: left promiscuous mode [ 625.336424][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.483018][ T5945] bridge_slave_0: left allmulticast mode [ 625.483174][ T5945] bridge_slave_0: left promiscuous mode [ 625.483966][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.718987][ T5624] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 625.960844][T10538] loop2: detected capacity change from 0 to 128 [ 625.962292][T10538] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 626.023738][T10538] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 626.138154][T10536] loop5: detected capacity change from 0 to 40427 [ 626.282313][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.299969][T10536] F2FS-fs (loop5): invalid crc value [ 626.392820][T10536] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 626.404868][T10536] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 626.404895][T10536] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 626.404923][T10536] F2FS-fs (loop5): Start checkpoint disabled! [ 626.449356][T10536] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 626.449724][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.471647][ T5945] bond0 (unregistering): Released all slaves [ 626.473637][T10536] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 626.764872][T10536] syz.5.814: attempt to access beyond end of device [ 626.764872][T10536] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 626.766585][T10536] syz.5.814: attempt to access beyond end of device [ 626.766585][T10536] loop5: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 626.859525][T10543] loop4: detected capacity change from 0 to 64 [ 626.940509][ T989] kworker/u8:8: attempt to access beyond end of device [ 626.940509][ T989] loop5: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 626.940594][ T989] CPU: 1 UID: 0 PID: 989 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 626.940621][ T989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 626.940638][ T989] Workqueue: writeback wb_workfn (flush-7:5) [ 626.940678][ T989] Call Trace: [ 626.940687][ T989] [ 626.940697][ T989] dump_stack_lvl+0xe8/0x150 [ 626.940737][ T989] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 626.940779][ T989] f2fs_write_end_bio+0x1211/0x16e0 [ 626.940809][ T989] ? blkg_put+0x22/0x240 [ 626.940861][ T989] __submit_merged_bio+0x258/0x6a0 [ 626.940895][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.940924][ T989] ? rcu_is_watching+0x16/0xb0 [ 626.940962][ T989] __submit_merged_write_cond+0x3c9/0x4e0 [ 626.941008][ T989] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 626.941059][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941104][ T989] f2fs_write_data_pages+0x2a27/0x36f0 [ 626.941185][ T989] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 626.941239][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941268][ T989] ? __lock_acquire+0x747/0x2de0 [ 626.941335][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941364][ T989] ? __lock_acquire+0x747/0x2de0 [ 626.941403][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941431][ T989] ? rcu_is_watching+0x16/0xb0 [ 626.941461][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941489][ T989] ? trace_hrtimer_start+0x82/0x200 [ 626.941538][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941582][ T989] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 626.941623][ T989] do_writepages+0x338/0x560 [ 626.941658][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941686][ T989] ? reacquire_held_locks+0x117/0x1a0 [ 626.941717][ T989] ? writeback_sb_inodes+0x450/0x1b00 [ 626.941757][ T989] __writeback_single_inode+0x136/0x1220 [ 626.941795][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941823][ T989] ? do_raw_spin_unlock+0xf5/0x200 [ 626.941864][ T989] writeback_sb_inodes+0x9de/0x1b00 [ 626.941897][ T989] ? __lock_acquire+0x747/0x2de0 [ 626.941930][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.941968][ T989] ? do_raw_spin_unlock+0xf5/0x200 [ 626.942012][ T989] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 626.942100][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942129][ T989] ? rcu_is_watching+0x16/0xb0 [ 626.942159][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942187][ T989] ? queue_io+0x2d3/0x470 [ 626.942224][ T989] wb_writeback+0x41c/0xad0 [ 626.942261][ T989] ? queue_io+0x231/0x470 [ 626.942301][ T989] ? __pfx_wb_writeback+0x10/0x10 [ 626.942331][ T989] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.942386][ T989] wb_workfn+0x431/0x10f0 [ 626.942435][ T989] ? __pfx_wb_workfn+0x10/0x10 [ 626.942468][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942497][ T989] ? trace_hrtimer_start+0x82/0x200 [ 626.942540][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942569][ T989] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.942613][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942643][ T989] ? lock_acquire+0x115/0x350 [ 626.942669][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942706][ T989] ? rcu_is_watching+0x16/0xb0 [ 626.942736][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942767][ T989] ? process_scheduled_works+0x97a/0x1630 [ 626.942802][ T989] process_scheduled_works+0xc3d/0x1630 [ 626.942836][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942901][ T989] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.942942][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.942971][ T989] ? assign_work+0x3cf/0x5d0 [ 626.943011][ T989] worker_thread+0xa47/0xfb0 [ 626.943077][ T989] kthread+0x38b/0x480 [ 626.943110][ T989] ? __pfx_worker_thread+0x10/0x10 [ 626.943142][ T989] ? __pfx_kthread+0x10/0x10 [ 626.943169][ T989] ret_from_fork+0x514/0xb70 [ 626.943198][ T989] ? __pfx_ret_from_fork+0x10/0x10 [ 626.943222][ T989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.943251][ T989] ? __switch_to+0xc89/0x1420 [ 626.943290][ T989] ? __pfx_kthread+0x10/0x10 [ 626.943317][ T989] ret_from_fork_asm+0x1a/0x30 [ 626.943375][ T989] [ 626.949201][ T989] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 627.627583][ T5945] hsr_slave_0: left promiscuous mode [ 627.629697][ T5945] hsr_slave_1: left promiscuous mode [ 627.630597][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.632839][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.005346][ T5945] team0 (unregistering): Port device team_slave_1 removed [ 629.049155][ T5945] team0 (unregistering): Port device team_slave_0 removed [ 633.643568][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 633.832788][T10038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.461557][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 636.492953][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 636.493750][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 636.524931][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 636.528158][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 637.114172][T10268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.910588][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.974917][T10268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.245162][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.344944][T10268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.391538][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.685373][T10621] loop2: detected capacity change from 0 to 40427 [ 638.694330][ T5629] Bluetooth: hci5: command tx timeout [ 640.357550][T10621] F2FS-fs (loop2): invalid crc value [ 640.510744][T10621] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 640.524236][T10621] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 640.524266][T10621] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 640.524294][T10621] F2FS-fs (loop2): Start checkpoint disabled! [ 640.536875][T10621] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 640.549983][T10621] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 640.621198][T10268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 640.794587][ T5629] Bluetooth: hci5: command tx timeout [ 640.811371][T10621] syz.2.833: attempt to access beyond end of device [ 640.811371][T10621] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 640.830108][T10621] syz.2.833: attempt to access beyond end of device [ 640.830108][T10621] loop2: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 640.959929][ T62] kworker/u8:5: attempt to access beyond end of device [ 640.959929][ T62] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 640.960011][ T62] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 640.960039][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 640.960056][ T62] Workqueue: writeback wb_workfn (flush-7:2) [ 640.960094][ T62] Call Trace: [ 640.960104][ T62] [ 640.960115][ T62] dump_stack_lvl+0xe8/0x150 [ 640.960160][ T62] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 640.960208][ T62] f2fs_write_end_bio+0x1211/0x16e0 [ 640.960240][ T62] ? blkg_put+0x22/0x240 [ 640.960296][ T62] __submit_merged_bio+0x258/0x6a0 [ 640.960331][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.960361][ T62] ? rcu_is_watching+0x16/0xb0 [ 640.960400][ T62] __submit_merged_write_cond+0x3c9/0x4e0 [ 640.960450][ T62] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 640.960506][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.960548][ T62] f2fs_write_data_pages+0x2a27/0x36f0 [ 640.960640][ T62] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 640.960700][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.960729][ T62] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 640.960816][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.960846][ T62] ? __lock_acquire+0x747/0x2de0 [ 640.960898][ T62] ? lock_acquire+0x115/0x350 [ 640.960935][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.960980][ T62] ? unwind_next_frame+0x8f/0x2550 [ 640.961012][ T62] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 640.961055][ T62] do_writepages+0x338/0x560 [ 640.961084][ T62] ? __lock_acquire+0x747/0x2de0 [ 640.961116][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.961151][ T62] ? reacquire_held_locks+0x117/0x1a0 [ 640.961182][ T62] ? writeback_sb_inodes+0x450/0x1b00 [ 640.961225][ T62] __writeback_single_inode+0x136/0x1220 [ 640.961264][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.961294][ T62] ? do_raw_spin_unlock+0xf5/0x200 [ 640.961337][ T62] writeback_sb_inodes+0x9de/0x1b00 [ 640.961370][ T62] ? __lock_acquire+0x747/0x2de0 [ 640.961418][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.961460][ T62] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 640.961553][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.961583][ T62] ? rcu_is_watching+0x16/0xb0 [ 640.961614][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.961643][ T62] ? queue_io+0x2d3/0x470 [ 640.961682][ T62] wb_writeback+0x41c/0xad0 [ 640.961720][ T62] ? queue_io+0x231/0x470 [ 640.961763][ T62] ? __pfx_wb_writeback+0x10/0x10 [ 640.961794][ T62] ? do_raw_spin_lock+0x12b/0x2f0 [ 640.961854][ T62] wb_workfn+0x431/0x10f0 [ 640.961909][ T62] ? __pfx_wb_workfn+0x10/0x10 [ 640.961945][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.961984][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.962013][ T62] ? do_raw_spin_lock+0x12b/0x2f0 [ 640.962062][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.962092][ T62] ? lock_acquire+0x115/0x350 [ 640.962125][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.962165][ T62] ? rcu_is_watching+0x16/0xb0 [ 640.962196][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.962227][ T62] ? process_scheduled_works+0x97a/0x1630 [ 640.962263][ T62] process_scheduled_works+0xc3d/0x1630 [ 640.962297][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.962372][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 640.962415][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.962444][ T62] ? assign_work+0x3cf/0x5d0 [ 640.962486][ T62] worker_thread+0xa47/0xfb0 [ 640.962562][ T62] kthread+0x38b/0x480 [ 640.962590][ T62] ? __pfx_worker_thread+0x10/0x10 [ 640.962622][ T62] ? __pfx_kthread+0x10/0x10 [ 640.962651][ T62] ret_from_fork+0x514/0xb70 [ 640.962681][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 640.962705][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.962734][ T62] ? __switch_to+0xc89/0x1420 [ 640.962775][ T62] ? __pfx_kthread+0x10/0x10 [ 640.962803][ T62] ret_from_fork_asm+0x1a/0x30 [ 640.962868][ T62] [ 640.983492][ T5641] udevd[5641]: 'scsi_id --export --whitelisted -d /dev/sda' [10629] terminated by signal 11 (Segmentation fault) [ 641.104463][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.209557][ T62] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 642.143781][ T5836] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 642.295162][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 642.295886][ T5836] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 642.297403][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.335916][ T5836] usb 3-1: config 0 descriptor?? [ 642.553895][ T5836] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 642.745532][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 642.747063][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 642.747122][ T5836] usb 3-1: media controller created [ 642.809251][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.844614][ T5629] Bluetooth: hci5: command tx timeout [ 645.017248][ T5616] Bluetooth: hci5: command tx timeout [ 645.034315][ T5836] az6027: usb out operation failed. (-110) [ 645.063664][ T5836] az6027: usb out operation failed. (-32) [ 645.063683][ T5836] stb0899_attach: Driver disabled by Kconfig [ 645.063695][ T5836] az6027: no front-end attached [ 645.063695][ T5836] [ 645.065472][ T5836] az6027: usb out operation failed. (-32) [ 645.065489][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 645.073066][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 645.185663][ T5836] dvb-usb: schedule remote query interval to 400 msecs. [ 645.185688][ T5836] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 645.258648][ T5754] usb 3-1: USB disconnect, device number 2 [ 645.611793][ T5754] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 646.394924][T10651] loop5: detected capacity change from 0 to 4096 [ 652.332842][T10326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 652.401947][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.431385][ T5944] bridge_slave_1: left allmulticast mode [ 652.431414][ T5944] bridge_slave_1: left promiscuous mode [ 652.431624][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.820665][ T5944] bridge_slave_0: left allmulticast mode [ 652.828933][ T5944] bridge_slave_0: left promiscuous mode [ 652.829171][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.476771][T10716] CacheFiles: Failed to register: -95 [ 653.595505][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.696644][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.751023][ T5944] bond0 (unregistering): Released all slaves [ 654.423810][T10720] loop2: detected capacity change from 0 to 1024 [ 654.438596][T10720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.438663][T10720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.439364][T10720] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 654.527311][T10268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.530880][T10326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 654.539962][T10720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.568097][T10720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.590212][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.591284][T10326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 654.620376][T10714] Process accounting resumed [ 654.631665][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.632703][T10326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 654.682471][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.822039][T10596] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.822126][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.822250][T10596] bridge_slave_0: entered allmulticast mode [ 654.824225][T10596] bridge_slave_0: entered promiscuous mode [ 654.963242][ T5944] hsr_slave_0: left promiscuous mode [ 654.982094][ T5944] hsr_slave_1: left promiscuous mode [ 654.989661][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.007521][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.845797][T10748] loop2: detected capacity change from 0 to 512 [ 657.111822][T10748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 657.155642][T10748] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.850: bad orphan inode 15 [ 657.155677][T10748] loop2: lost filesystem error report for type 5 error -117 [ 657.157816][T10748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.428972][ T8686] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.897478][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 657.913332][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 657.914865][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 657.916749][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 657.918186][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 658.725316][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 658.776070][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 659.317916][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.318031][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.318204][T10596] bridge_slave_1: entered allmulticast mode [ 659.327101][T10596] bridge_slave_1: entered promiscuous mode [ 659.329249][T10766] loop5: detected capacity change from 0 to 256 [ 659.449365][T10766] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 659.924821][T10596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.977922][T10596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.124417][ T5629] Bluetooth: hci6: command tx timeout [ 660.352411][T10775] syz.5.855: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 660.352787][T10775] CPU: 1 UID: 0 PID: 10775 Comm: syz.5.855 Not tainted syzkaller #0 PREEMPT(full) [ 660.352807][T10775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 660.352819][T10775] Call Trace: [ 660.352826][T10775] [ 660.352835][T10775] dump_stack_lvl+0xe8/0x150 [ 660.352867][T10775] warn_alloc+0x24d/0x270 [ 660.352886][T10775] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.352909][T10775] ? kasan_save_track+0x4f/0x80 [ 660.352929][T10775] ? kasan_save_track+0x3e/0x80 [ 660.352951][T10775] ? __pfx_warn_alloc+0x10/0x10 [ 660.352967][T10775] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 660.352994][T10775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.353030][T10775] __vmalloc_node_range_noprof+0x127/0x1540 [ 660.353078][T10775] ? rcu_is_watching+0x16/0xb0 [ 660.353107][T10775] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 660.353141][T10775] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.353170][T10775] ? __kmalloc_cache_noprof+0x321/0x600 [ 660.353190][T10775] ? __kmalloc_cache_noprof+0x14d/0x600 [ 660.353208][T10775] ? xskq_create+0x56/0x220 [ 660.353235][T10775] xskq_create+0x148/0x220 [ 660.353261][T10775] ? xsk_init_queue+0x8a/0xe0 [ 660.353285][T10775] xsk_init_queue+0x8a/0xe0 [ 660.353308][T10775] xsk_setsockopt+0x52a/0x960 [ 660.353330][T10775] ? __pfx_xsk_setsockopt+0x10/0x10 [ 660.353351][T10775] ? __pfx_aa_sk_perm+0x10/0x10 [ 660.353373][T10775] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.353397][T10775] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.353424][T10775] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.353446][T10775] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.353468][T10775] ? __pfx_xsk_setsockopt+0x10/0x10 [ 660.353490][T10775] do_sock_setsockopt+0x17c/0x1b0 [ 660.353521][T10775] __x64_sys_setsockopt+0x13d/0x1b0 [ 660.353552][T10775] do_syscall_64+0x166/0x520 [ 660.353575][T10775] ? trace_irq_disable+0x3b/0x140 [ 660.353595][T10775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.353619][T10775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.353638][T10775] RIP: 0033:0x7feb6df9e159 [ 660.353655][T10775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.353671][T10775] RSP: 002b:00007feb6c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 660.353690][T10775] RAX: ffffffffffffffda RBX: 00007feb6e225fa0 RCX: 00007feb6df9e159 [ 660.353704][T10775] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 660.353716][T10775] RBP: 00007feb6e03506b R08: 0000000000000004 R09: 0000000000000000 [ 660.353728][T10775] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.353741][T10775] R13: 00007feb6e226038 R14: 00007feb6e225fa0 R15: 00007ffd5a1ff888 [ 660.353771][T10775] [ 660.353778][T10775] Mem-Info: [ 660.353787][T10775] active_anon:12077 inactive_anon:257 isolated_anon:0 [ 660.353787][T10775] active_file:367 inactive_file:64571 isolated_file:0 [ 660.353787][T10775] unevictable:0 dirty:311 writeback:0 [ 660.353787][T10775] slab_reclaimable:8295 slab_unreclaimable:104981 [ 660.353787][T10775] mapped:39592 shmem:5590 pagetables:1482 [ 660.353787][T10775] sec_pagetables:0 bounce:0 [ 660.353787][T10775] kernel_misc_reclaimable:0 [ 660.353787][T10775] free:794692 free_pcp:22828 free_cma:0 [ 660.353833][T10775] Node 0 active_anon:48300kB inactive_anon:1028kB active_file:1468kB inactive_file:257980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133692kB dirty:1240kB writeback:0kB shmem:22360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13824kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 660.353881][T10775] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24676kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 660.353926][T10775] Node 0 DMA free:11156kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:108kB local_pcp:48kB free_cma:0kB [ 660.353989][T10775] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 660.354028][T10775] Node 0 DMA32 free:203436kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48300kB inactive_anon:1028kB active_file:1468kB inactive_file:257980kB unevictable:0kB writepending:1240kB zspages:0kB present:3129332kB managed:2546944kB mlocked:0kB bounce:0kB free_pcp:65928kB local_pcp:9248kB free_cma:0kB [ 660.354082][T10775] lowmem_reserve[]: 0 0 0 0 0 [ 660.354117][T10775] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.354166][T10775] lowmem_reserve[]: 0 0 0 0 0 [ 660.354201][T10775] Node 1 Normal free:2964176kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:25276kB local_pcp:13164kB free_cma:0kB [ 660.354258][T10775] lowmem_reserve[]: 0 0 0 0 0 [ 660.354293][T10775] Node 0 DMA: 3*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 2*4096kB (M) = 11156kB [ 660.354456][T10775] Node 0 DMA32: 802*4kB (UME) 1212*8kB (UME) 903*16kB (UME) 796*32kB (UME) 546*64kB (UME) 120*128kB (UME) 108*256kB (UME) 30*512kB (ME) 24*1024kB (UME) 4*2048kB (M) 6*4096kB (U) = 203480kB [ 660.354616][T10775] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 660.354715][T10775] Node 1 Normal: 9*4kB (UM) 4*8kB (UM) 14*16kB (UM) 7*32kB (UM) 4*64kB (UM) 2*128kB (UM) 3*256kB (U) 4*512kB (UM) 1*1024kB (U) 1*2048kB (M) 722*4096kB (M) = 2964228kB [ 660.354875][T10775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.354890][T10775] Node 0 hugepages_total=442 hugepages_free=442 hugepages_surp=0 hugepages_size=2048kB [ 660.354906][T10775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.354921][T10775] Node 1 hugepages_total=441 hugepages_free=441 hugepages_surp=0 hugepages_size=2048kB [ 660.354936][T10775] 70483 total pagecache pages [ 660.354943][T10775] 0 pages in swap cache [ 660.354950][T10775] Free swap = 124996kB [ 660.354958][T10775] Total swap = 124996kB [ 660.354966][T10775] 2097051 pages RAM [ 660.354973][T10775] 0 pages HighMem/MovableOnly [ 660.354980][T10775] 428699 pages reserved [ 660.354988][T10775] 0 pages cma reserved [ 660.390678][ T5629] Bluetooth: hci1: unexpected event for opcode 0x002d [ 660.657170][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 661.037384][T10596] team0: Port device team_slave_0 added [ 661.121643][T10596] team0: Port device team_slave_1 added [ 662.202519][ T5629] Bluetooth: hci6: command tx timeout [ 662.592108][T10596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.592129][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.592168][T10596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.680392][T10596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.680412][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.680443][T10596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.108534][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 663.498834][T10596] hsr_slave_0: entered promiscuous mode [ 663.499926][T10596] hsr_slave_1: entered promiscuous mode [ 663.503005][T10596] debugfs: 'hsr0' already exists in 'hsr' [ 663.503026][T10596] Cannot create hsr debugfs directory [ 663.650189][T10809] xt_policy: output policy not valid in PREROUTING and INPUT [ 664.313976][ T5629] Bluetooth: hci6: command tx timeout [ 664.480340][T10815] loop2: detected capacity change from 0 to 4096 [ 664.499593][T10815] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 666.372430][ T5629] Bluetooth: hci6: command tx timeout [ 666.993909][T10815] ntfs3(loop2): Failed to read $AttrDef (-4). [ 667.409744][T10823] loop5: detected capacity change from 0 to 512 [ 667.410824][T10823] EXT4-fs: Ignoring removed nobh option [ 667.433866][T10823] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 667.453385][T10823] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.864: attempt to clear invalid blocks 1 len 1 [ 667.453427][T10823] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.467712][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 667.467735][ C0] EXT4-fs (loop5): initial error at time 2000000073: ext4_clear_blocks:876: inode 13 [ 667.467766][ C0] EXT4-fs (loop5): last error at time 2000000073: ext4_clear_blocks:876: inode 13 [ 667.506465][T10823] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 667.507018][T10823] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.864: invalid indirect mapped block 1819239214 (level 0) [ 667.507052][T10823] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.522257][T10823] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.864: invalid indirect mapped block 1819239214 (level 1) [ 667.522292][T10823] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.525883][T10823] EXT4-fs (loop5): 1 truncate cleaned up [ 667.544389][T10823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.581495][T10823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.826710][T10831] Line length is too long: Should be less than 4094 [ 670.242512][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 670.248643][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 670.250425][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 670.251400][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 670.281167][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 670.507369][T10851] loop4: detected capacity change from 0 to 512 [ 670.508433][T10851] ext4: Bad value for 'stripe' [ 670.817943][T10859] netlink: 44 bytes leftover after parsing attributes in process `syz.4.871'. [ 670.896143][T10859] loop4: detected capacity change from 0 to 512 [ 670.908298][T10859] EXT4-fs: Ignoring removed orlov option [ 671.254680][T10859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.255128][T10859] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.332653][T10859] Quota error (device loop4): do_check_range: Getting block 32772 out of range 0-5 [ 672.015159][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.097604][T10872] loop2: detected capacity change from 0 to 256 [ 672.105576][T10872] exfat: Deprecated parameter 'namecase' [ 672.158130][T10872] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 672.297026][T10872] batman_adv: batadv0: Adding interface: veth0 [ 672.297047][T10872] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.297083][T10872] batman_adv: batadv0: Interface activated: veth0 [ 672.367283][ T5616] Bluetooth: hci0: command tx timeout [ 672.489729][T10875] loop4: detected capacity change from 0 to 164 [ 672.711860][ T5761] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 672.839455][T10872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.839486][T10872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.845689][T10872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.845712][T10872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.860524][T10872] batman_adv: batadv0: Interface deactivated: veth0 [ 672.860546][T10872] batman_adv: batadv0: Removing interface: veth0 [ 672.874367][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 673.104298][T10882] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 673.343433][T10882] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 673.784498][ T5761] usb 3-1: unable to get BOS descriptor or descriptor too short [ 673.784554][ T5761] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 673.846692][ T5761] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 673.846735][ T5761] usb 3-1: can't read configurations, error -71 [ 674.116522][T10886] loop5: detected capacity change from 0 to 4096 [ 674.205054][T10886] ntfs3(loop5): ino=b, mi_enum_attr [ 674.205108][T10886] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 674.224801][T10886] ntfs3(loop5): Failed to load $Extend (-22). [ 674.224825][T10886] ntfs3(loop5): Failed to initialize $Extend. [ 674.261164][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.261349][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.261492][T10758] bridge_slave_0: entered allmulticast mode [ 674.286363][T10758] bridge_slave_0: entered promiscuous mode [ 674.298132][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 674.312460][T10886] ntfs3(loop5): ino=1e, "file1" attr_set_size_ex [ 674.346677][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.350170][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.350324][T10758] bridge_slave_1: entered allmulticast mode [ 674.358247][T10758] bridge_slave_1: entered promiscuous mode [ 674.384572][T10886] ntfs3(loop5): ino=1b, mi_enum_attr [ 674.388888][T10886] ntfs3(loop5): ino=1b, mi_enum_attr [ 674.393745][T10886] ntfs3(loop5): ino=1b, mi_enum_attr [ 674.442378][ T5616] Bluetooth: hci0: command tx timeout [ 674.485223][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.490712][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.624472][T10758] team0: Port device team_slave_0 added [ 676.495265][T10758] team0: Port device team_slave_1 added [ 676.523950][ T5616] Bluetooth: hci0: command tx timeout [ 678.601618][ T5616] Bluetooth: hci0: command tx timeout [ 680.031336][ T5895] bridge_slave_1: left allmulticast mode [ 680.033462][ T5895] bridge_slave_1: left promiscuous mode [ 680.033691][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.072423][ T5895] bridge_slave_0: left allmulticast mode [ 680.072451][ T5895] bridge_slave_0: left promiscuous mode [ 680.114454][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.476786][T10937] loop2: detected capacity change from 0 to 32768 [ 680.530821][T10937] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 680.590716][T10937] XFS (loop2): Ending clean mount [ 681.323266][T10938] loop5: detected capacity change from 0 to 512 [ 681.397651][T10938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.397765][T10938] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.545226][ T8686] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 681.676281][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.717670][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.734932][ T5895] bond0 (unregistering): Released all slaves [ 681.827030][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.827050][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.828678][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.887643][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.887665][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.887692][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.948731][T10942] warning: `syz.5.888' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 682.074243][ T8222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.093772][ T5895] hsr_slave_0: left promiscuous mode [ 682.103818][ T5895] hsr_slave_1: left promiscuous mode [ 682.104829][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.127550][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.936911][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 684.993869][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 685.092097][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.092205][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.670672][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.670778][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.670891][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.670960][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.671006][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.673273][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.680204][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.680280][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.680345][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 685.680408][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: unknown main item tag 0x0 [ 686.178594][ T5734] hid-generic 0007:FFFFFF1D:0102.0001: hidraw0: HID v0.04 Device [syz0] on syz1 [ 686.208846][T10983] udevd[10983]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 686.412782][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 686.469949][T10975] lo: entered allmulticast mode [ 686.542573][T10758] hsr_slave_0: entered promiscuous mode [ 686.555985][T10758] hsr_slave_1: entered promiscuous mode [ 686.556773][T10758] debugfs: 'hsr0' already exists in 'hsr' [ 686.558108][T10758] Cannot create hsr debugfs directory [ 690.987640][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 691.039640][T10596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 691.062229][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.073632][T10596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 691.113946][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.164538][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.164711][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.166264][T10839] bridge_slave_0: entered allmulticast mode [ 691.169064][T10839] bridge_slave_0: entered promiscuous mode [ 691.173810][T10596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 691.240106][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.527532][T10839] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.527650][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.527841][T10839] bridge_slave_1: entered allmulticast mode [ 691.530537][T10839] bridge_slave_1: entered promiscuous mode [ 691.536622][T10596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 691.542237][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.686411][T10839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.817547][T10839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.212410][T10839] team0: Port device team_slave_0 added [ 694.294510][T10839] team0: Port device team_slave_1 added [ 695.447612][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 695.471653][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 695.478248][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 695.519452][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 695.537390][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 695.754414][T11047] netlink: 'syz.4.904': attribute type 2 has an invalid length. [ 695.793216][T10839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.793237][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.793268][T10839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.855169][T10839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.855189][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.855221][T10839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.374408][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 697.640464][ T5616] Bluetooth: hci4: command tx timeout [ 699.374619][T10839] hsr_slave_0: entered promiscuous mode [ 699.386506][T10839] hsr_slave_1: entered promiscuous mode [ 699.388529][T10839] debugfs: 'hsr0' already exists in 'hsr' [ 699.388546][T10839] Cannot create hsr debugfs directory [ 699.417317][ T5895] bridge_slave_1: left allmulticast mode [ 699.417346][ T5895] bridge_slave_1: left promiscuous mode [ 699.417562][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.457634][ T5895] bridge_slave_0: left allmulticast mode [ 699.457666][ T5895] bridge_slave_0: left promiscuous mode [ 699.462042][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.730636][ T5616] Bluetooth: hci4: command tx timeout [ 699.842119][T11066] loop4: detected capacity change from 0 to 128 [ 699.843243][T11066] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 699.860362][T11066] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 700.380171][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.433523][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.482096][ T5895] bond0 (unregistering): Released all slaves [ 701.057913][ T5895] hsr_slave_0: left promiscuous mode [ 701.079143][ T5895] hsr_slave_1: left promiscuous mode [ 701.079910][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.122275][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.800258][ T5616] Bluetooth: hci4: command tx timeout [ 702.010620][T10472] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 702.317713][T10472] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 702.352483][T10472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.007254][T10472] usb 6-1: config 0 descriptor?? [ 703.199219][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 703.247015][T10472] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 703.280969][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 703.464716][T10472] [drm:udl_init] *ERROR* Selecting channel failed [ 703.543763][T10472] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 703.543790][T10472] [drm] Initialized udl on minor 1 [ 703.564364][T10472] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 703.567826][T10472] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 703.600757][T10472] usb 6-1: USB disconnect, device number 3 [ 703.686017][T11083] gfs2: error -5 reading superblock [ 703.880102][ T5616] Bluetooth: hci4: command tx timeout [ 703.910312][T11084] loop4: detected capacity change from 0 to 2048 [ 704.209352][T11084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 705.581840][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 706.036829][ T5616] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 707.426998][T10758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.447097][T10758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.565795][ T5762] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 707.613470][T10758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.704184][T10758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 707.740679][T10758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 707.853058][ T5762] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 707.859030][T10758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 707.859784][ T5762] usb 6-1: config index 0 descriptor too short (expected 65000, got 45) [ 707.900347][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.900375][ T5762] usb 6-1: Product: syz [ 707.900394][ T5762] usb 6-1: Manufacturer: syz [ 707.900411][ T5762] usb 6-1: SerialNumber: syz [ 709.107798][T10758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 709.123853][T10758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.148053][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 709.235058][ T5762] rtl8150 6-1:1.0: couldn't reset the device [ 709.235409][ T5762] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 709.328366][ T5762] usb 6-1: USB disconnect, device number 4 [ 709.956495][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 712.521160][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.521285][T11043] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.521426][T11043] bridge_slave_0: entered allmulticast mode [ 712.523327][T11043] bridge_slave_0: entered promiscuous mode [ 712.525937][T11043] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.526043][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.526178][T11043] bridge_slave_1: entered allmulticast mode [ 712.528110][T11043] bridge_slave_1: entered promiscuous mode [ 712.565078][T11043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.568539][T11043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.910466][ T5754] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 712.950436][ T31] audit: type=1326 audit(2000000119.770:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.950642][ T31] audit: type=1326 audit(2000000119.770:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.950868][ T31] audit: type=1326 audit(2000000119.770:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.951096][ T31] audit: type=1326 audit(2000000119.770:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.951251][ T31] audit: type=1326 audit(2000000119.770:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.951459][ T31] audit: type=1326 audit(2000000119.770:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.951619][ T31] audit: type=1326 audit(2000000119.780:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.951793][ T31] audit: type=1326 audit(2000000119.780:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.952079][ T31] audit: type=1326 audit(2000000119.780:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 712.952236][ T31] audit: type=1326 audit(2000000119.780:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.5.932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6df9e159 code=0x7ffc0000 [ 713.391303][ T5754] usb 5-1: Using ep0 maxpacket: 16 [ 713.438460][ T5754] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 713.491725][ T5754] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 713.491778][ T5754] usb 5-1: config 0 has no interface number 0 [ 713.491912][ T5754] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 713.491959][ T5754] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 713.635883][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 713.635931][ T5754] usb 5-1: Product: syz [ 713.635991][ T5754] usb 5-1: SerialNumber: syz [ 713.864550][ T5754] usb 5-1: config 0 descriptor?? [ 714.168723][ T5754] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 714.516298][ T5754] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input12 [ 714.903889][T11169] loop5: detected capacity change from 0 to 128 [ 714.930079][T11169] EXT4-fs (loop5): Test dummy encryption mode enabled [ 714.951292][T11169] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 714.974576][T11169] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 715.036310][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 715.037463][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 715.037692][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 715.037773][T10472] usb 5-1: USB disconnect, device number 7 [ 715.037915][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 715.037938][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 715.247035][T10472] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 715.392906][T11043] team0: Port device team_slave_0 added [ 715.406753][T11043] team0: Port device team_slave_1 added [ 715.449273][ T8222] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 715.788801][T11043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.788823][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.788855][T11043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.805223][T11043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.805248][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.805278][T11043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.537679][T10839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 716.723579][T10839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.795665][T11043] hsr_slave_0: entered promiscuous mode [ 716.802366][T11043] hsr_slave_1: entered promiscuous mode [ 716.812358][T11043] debugfs: 'hsr0' already exists in 'hsr' [ 716.812381][T11043] Cannot create hsr debugfs directory [ 716.814843][T10839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 716.848169][T10839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.992443][T10839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 717.008810][T10839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.067296][T10839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 717.093579][T10839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 717.135195][T11188] input: syz0 as /devices/virtual/input/input13 [ 717.250896][ T5762] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 717.409466][ T5762] usb 6-1: Using ep0 maxpacket: 16 [ 717.410360][ T5762] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 717.415632][ T5762] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.415658][ T5762] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 717.415698][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.438621][ T5762] usb 6-1: config 0 descriptor?? [ 717.943670][ T5944] bridge_slave_1: left allmulticast mode [ 717.943704][ T5944] bridge_slave_1: left promiscuous mode [ 717.950761][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.626156][ T5944] bridge_slave_0: left allmulticast mode [ 719.626189][ T5944] bridge_slave_0: left promiscuous mode [ 719.626425][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.052609][T10472] usb 6-1: USB disconnect, device number 5 [ 720.134617][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.142108][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.153763][ T5944] bond0 (unregistering): Released all slaves [ 720.178281][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 720.432782][ T5944] hsr_slave_0: left promiscuous mode [ 720.437703][ T5944] hsr_slave_1: left promiscuous mode [ 720.438564][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.446997][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.469949][T11220] loop4: detected capacity change from 0 to 512 [ 720.497895][T11220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 720.498024][T11220] System zones: 1-12 [ 720.518702][T11220] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.942: missing EA_INODE flag [ 720.518733][T11220] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 720.519479][ C0] EXT4-fs (loop4): initial error at time 2000000127: ext4_xattr_inode_iget:437: inode 12 [ 720.519517][ C0] EXT4-fs (loop4): last error at time 2000000127: ext4_xattr_inode_iget:437: inode 12 [ 720.547989][T11220] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.942: error while reading EA inode 12 err=-117 [ 720.548024][T11220] loop4: lost filesystem error report for type 5 error -117 [ 720.549484][T11220] EXT4-fs (loop4): 1 orphan inode deleted [ 720.558477][T11220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.730252][T11219] netlink: 'syz.2.943': attribute type 17 has an invalid length. [ 720.763596][T11218] netlink: Invalid conntrack timeout [ 720.763632][T11218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.853791][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 720.874698][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 720.908564][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 720.912481][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 720.913081][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 721.178781][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.121255][ T5629] Bluetooth: hci5: command tx timeout [ 723.211800][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 723.232873][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 723.951517][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 724.781524][T11276] loop4: detected capacity change from 0 to 1024 [ 725.183332][ T5629] Bluetooth: hci5: command tx timeout [ 725.729747][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 725.731863][T11280] bridge_slave_1: left allmulticast mode [ 725.731888][T11280] bridge_slave_1: left promiscuous mode [ 725.732141][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.776743][T11280] bridge_slave_0: left allmulticast mode [ 725.776779][T11280] bridge_slave_0: left promiscuous mode [ 725.777393][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.849074][ T5762] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 726.015191][T10839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.029408][ T5762] usb 3-1: Using ep0 maxpacket: 16 [ 726.032062][ T5762] usb 3-1: unable to get BOS descriptor or descriptor too short [ 726.032114][ T5762] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 726.033325][ T5762] usb 3-1: config 4 has an invalid interface number: 28 but max is 0 [ 726.033351][ T5762] usb 3-1: config 4 has no interface number 0 [ 726.033383][ T5762] usb 3-1: config 4 interface 28 has no altsetting 0 [ 726.036252][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.036288][ T5762] usb 3-1: Product: syz [ 726.036377][ T5762] usb 3-1: Manufacturer: syz [ 726.036397][ T5762] usb 3-1: SerialNumber: syz [ 726.470202][T11278] af_packet: tpacket_rcv: packet too big, clamped from 3953 to 3952. macoff=96 [ 726.514190][T11299] loop4: detected capacity change from 0 to 128 [ 726.648606][T10839] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.729988][ T5762] usb 3-1: USB disconnect, device number 5 [ 726.858133][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.858243][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.976243][T11306] loop5: detected capacity change from 0 to 128 [ 727.239130][ T5629] Bluetooth: hci5: command tx timeout [ 727.476064][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.476173][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.655260][T11043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.688216][T11043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.743188][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.743311][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.747359][T11226] bridge_slave_0: entered allmulticast mode [ 727.755527][T11226] bridge_slave_0: entered promiscuous mode [ 727.768303][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.770135][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.770294][T11226] bridge_slave_1: entered allmulticast mode [ 727.787843][T11226] bridge_slave_1: entered promiscuous mode [ 727.810674][T11318] loop5: detected capacity change from 0 to 512 [ 727.829648][T11317] loop4: detected capacity change from 0 to 512 [ 727.877783][T11318] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 727.877809][T11318] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 727.877896][T11318] System zones: 0-1, 15-15, 18-18, 34-34 [ 727.878200][T11318] EXT4-fs (loop5): orphan cleanup on readonly fs [ 727.878290][T11318] __quota_error: 95 callbacks suppressed [ 727.878306][T11318] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 727.878384][T11318] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 727.878415][T11318] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 727.882439][T11318] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.963: bad orphan inode 16 [ 727.882467][T11318] loop5: lost filesystem error report for type 5 error -117 [ 727.888985][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 727.889027][ C1] EXT4-fs (loop5): initial error at time 2000000390: ext4_orphan_get:1429 [ 727.889052][ C1] EXT4-fs (loop5): last error at time 2000000390: ext4_orphan_get:1429 [ 727.896418][T11318] ext4_test_bit(bit=15, block=18) = 1 [ 727.896437][T11318] is_bad_inode(inode)=0 [ 727.896447][T11318] NEXT_ORPHAN(inode)=0 [ 727.896457][T11318] max_ino=32 [ 727.896467][T11318] i_nlink=2 [ 727.905015][T11318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 728.122883][T11043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 728.155051][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 728.169214][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 728.169997][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 728.178498][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 728.179664][T11317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.179782][T11317] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.217637][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 728.221348][T11318] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 728.224437][T11317] EXT4-fs warning (device loop4): ext4_group_extend:1861: can't shrink FS - resize aborted [ 728.364730][T11043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.371402][T11043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 728.434896][ T8222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.458277][T11043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.633593][T11337] loop5: detected capacity change from 0 to 128 [ 728.683836][T11337] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 728.688046][T11337] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 728.743721][T11043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 728.784973][T11043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.840473][T11317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.862900][T11226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.866752][T11226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.974693][T11349] EXT4-fs (loop5): shut down requested (2) [ 729.072071][T11226] team0: Port device team_slave_0 added [ 729.120528][T11226] team0: Port device team_slave_1 added [ 729.153743][ T59] bridge_slave_1: left allmulticast mode [ 729.153780][ T59] bridge_slave_1: left promiscuous mode [ 729.153998][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.158521][ T59] bridge_slave_0: left allmulticast mode [ 729.158544][ T59] bridge_slave_0: left promiscuous mode [ 729.161239][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.319289][ T5629] Bluetooth: hci5: command tx timeout [ 729.445392][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.475516][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.492561][ T59] bond0 (unregistering): Released all slaves [ 729.494458][T11365] netlink: NAT attribute has 8 unknown bytes [ 729.494492][T11365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.512717][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 729.550885][T11226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.550906][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.550937][T11226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.553087][T11226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.553104][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.553131][T11226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.554184][ T8222] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.951405][ T59] hsr_slave_0: left promiscuous mode [ 729.952143][ T59] hsr_slave_1: left promiscuous mode [ 729.953008][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.953672][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.010479][T11368] loop5: detected capacity change from 0 to 1024 [ 730.161407][T11368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 730.238049][T11370] loop4: detected capacity change from 0 to 32768 [ 730.251449][T11370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.973 (11370) [ 730.258809][T11370] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 730.258844][T11370] BTRFS info (device loop4): using sha256 checksum algorithm [ 730.412942][T11370] BTRFS info (device loop4): enabling ssd optimizations [ 730.412973][T11370] BTRFS info (device loop4): turning on sync discard [ 730.412992][T11370] BTRFS info (device loop4): enabling free space tree [ 730.413013][T11370] BTRFS info (device loop4): use zlib compression, level 3 [ 730.440121][ T5629] Bluetooth: hci0: command tx timeout [ 730.573395][ T5641] udevd[5641]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [11391] terminated by signal 11 (Segmentation fault) [ 730.897024][ T59] team0 (unregistering): Port device team_slave_1 removed [ 730.941528][ T59] team0 (unregistering): Port device team_slave_0 removed [ 731.087840][ T5643] udevd[5643]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [11393] terminated by signal 11 (Segmentation fault) [ 731.621170][T11226] hsr_slave_0: entered promiscuous mode [ 731.622140][ T5624] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 731.622521][T11226] hsr_slave_1: entered promiscuous mode [ 731.623254][T11226] debugfs: 'hsr0' already exists in 'hsr' [ 731.623284][T11226] Cannot create hsr debugfs directory [ 731.624455][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 731.910982][T11406] gfs2: error -5 reading superblock [ 732.116554][T11406] loop5: detected capacity change from 0 to 2048 [ 732.200157][T11406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 732.519509][ T5629] Bluetooth: hci0: command tx timeout [ 733.184473][ T31] audit: type=1326 audit(2000000396.037:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.184716][ T31] audit: type=1326 audit(2000000396.037:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.187531][ T31] audit: type=1326 audit(2000000396.037:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.187768][ T31] audit: type=1326 audit(2000000396.037:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.188002][ T31] audit: type=1326 audit(2000000396.037:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.189484][ T31] audit: type=1326 audit(2000000396.047:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.189789][ T31] audit: type=1326 audit(2000000396.047:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.190546][ T31] audit: type=1326 audit(2000000396.047:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.218750][ T31] audit: type=1326 audit(2000000396.067:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.218810][ T31] audit: type=1326 audit(2000000396.067:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.2.981" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 733.297603][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 735.297037][ T5629] Bluetooth: hci0: command tx timeout [ 735.369387][ T5734] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 735.541042][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 735.604254][ T5734] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 735.679891][ T5734] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 735.679939][ T5734] usb 3-1: config 0 has no interface number 0 [ 735.680199][ T5734] usb 3-1: config 0 interface 12 has no altsetting 0 [ 735.930482][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.941727][ T5734] usb 3-1: Product: syz [ 735.941837][ T5734] usb 3-1: Manufacturer: syz [ 735.941855][ T5734] usb 3-1: SerialNumber: syz [ 736.097323][ T5734] usb 3-1: config 0 descriptor?? [ 737.242433][ T5734] usb 3-1: can't set config #0, error -71 [ 737.277114][ T5734] usb 3-1: USB disconnect, device number 6 [ 737.288106][T11043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.320283][ T5616] Bluetooth: hci0: command tx timeout [ 737.414974][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 743.775727][T11325] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.777483][T11325] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.777659][T11325] bridge_slave_0: entered allmulticast mode [ 743.806207][T11325] bridge_slave_0: entered promiscuous mode [ 743.822575][T11325] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.824277][T11325] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.824429][T11325] bridge_slave_1: entered allmulticast mode [ 743.849537][T11325] bridge_slave_1: entered promiscuous mode [ 744.510858][T11043] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.241286][T11325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.259788][T11325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.418255][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.418367][ T5876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.458313][T11475] loop4: detected capacity change from 0 to 128 [ 745.473970][T11475] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 745.476211][T11475] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 745.577722][T11476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.597717][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.597826][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.389300][T11480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.479177][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.479239][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.551204][T11325] team0: Port device team_slave_0 added [ 747.673885][T11325] team0: Port device team_slave_1 added [ 747.771182][T11325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.771202][T11325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.771233][T11325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.843424][T11325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.843443][T11325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.843470][T11325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.329436][T11325] hsr_slave_0: entered promiscuous mode [ 748.330520][T11325] hsr_slave_1: entered promiscuous mode [ 748.331282][T11325] debugfs: 'hsr0' already exists in 'hsr' [ 748.331311][T11325] Cannot create hsr debugfs directory [ 748.335600][ T8273] bridge_slave_1: left allmulticast mode [ 748.335625][ T8273] bridge_slave_1: left promiscuous mode [ 748.335837][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.388922][ T8273] bridge_slave_0: left allmulticast mode [ 748.389182][ T8273] bridge_slave_0: left promiscuous mode [ 748.389404][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.836248][ T8273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.891484][ T8273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.906770][ T8273] bond0 (unregistering): Released all slaves [ 749.238913][ T8273] hsr_slave_0: left promiscuous mode [ 749.239833][ T8273] hsr_slave_1: left promiscuous mode [ 749.240740][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.242719][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.108171][ T8273] team0 (unregistering): Port device team_slave_1 removed [ 751.119847][ T8273] team0 (unregistering): Port device team_slave_0 removed [ 751.251029][T11226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 751.256303][T11226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 751.257473][T11226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 751.277563][T11226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 751.324604][T11226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 751.357336][T11226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 751.605661][T11226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 751.631005][T11513] gfs2: error -5 reading superblock [ 751.748959][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 751.960909][T11226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 752.001337][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 752.037854][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.066110][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 753.119516][T11043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.187723][ T9] rtsx_usb 5-1:1.0: probe with driver rtsx_usb failed with error -110 [ 755.815934][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 755.932052][T10472] usb 5-1: USB disconnect, device number 8 [ 756.206884][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 756.226424][T11226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.270913][T11226] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.358374][T11226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.358404][T11226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.524196][ T25] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 756.573353][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 756.587547][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 756.593684][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 756.606440][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 756.640283][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 756.661080][ T25] usb 3-1: device descriptor read/64, error -71 [ 756.679435][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.679536][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.685387][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.685494][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.939876][ T25] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 757.077028][ T25] usb 3-1: device descriptor read/64, error -71 [ 757.196359][ T25] usb usb3-port1: attempt power cycle [ 757.574325][ T25] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 757.603832][ T25] usb 3-1: device descriptor read/8, error -71 [ 757.856361][ T25] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 757.879471][ T25] usb 3-1: device descriptor read/8, error -71 [ 757.894610][ T5812] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 758.033617][ T25] usb usb3-port1: unable to enumerate USB device [ 758.050471][ T5812] usb 5-1: device descriptor read/64, error -71 [ 758.305805][ T5812] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 758.444767][ T5812] usb 5-1: device descriptor read/64, error -71 [ 758.563848][ T5812] usb usb5-port1: attempt power cycle [ 758.917347][ T5629] Bluetooth: hci6: command tx timeout [ 758.939525][ T5812] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 758.965523][ T5812] usb 5-1: device descriptor read/8, error -71 [ 759.250272][ T5812] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 761.583703][ T5629] Bluetooth: hci6: command tx timeout [ 763.463225][ T5812] usb 5-1: device descriptor read/8, error -71 [ 763.575464][ T5812] usb usb5-port1: unable to enumerate USB device [ 763.753327][ T5629] Bluetooth: hci6: command tx timeout [ 763.809348][T11226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.848022][T11588] loop4: detected capacity change from 0 to 1024 [ 763.848859][T11588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 763.848912][T11588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 763.854918][T11588] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 763.905934][T11588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.932502][T11588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.423846][T11325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 764.428719][T11325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.610575][T11325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 764.641303][T11325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.663173][T11325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 764.682833][T11325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.770193][T11325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 764.789118][T11325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.793628][T11226] veth0_vlan: entered promiscuous mode [ 765.451034][T11609] loop4: detected capacity change from 0 to 32768 [ 766.000096][ T5629] Bluetooth: hci6: command tx timeout [ 766.618683][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.622169][T11541] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.622338][T11541] bridge_slave_0: entered allmulticast mode [ 766.633710][T11541] bridge_slave_0: entered promiscuous mode [ 766.654212][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.657179][T11541] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.662353][T11541] bridge_slave_1: entered allmulticast mode [ 766.669162][T11541] bridge_slave_1: entered promiscuous mode [ 766.686155][T11226] veth1_vlan: entered promiscuous mode [ 766.699060][ T1449] bridge_slave_1: left allmulticast mode [ 766.699088][ T1449] bridge_slave_1: left promiscuous mode [ 766.699297][ T1449] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.706523][ T1449] bridge_slave_0: left allmulticast mode [ 766.706548][ T1449] bridge_slave_0: left promiscuous mode [ 766.706738][ T1449] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.775459][T11625] loop4: detected capacity change from 0 to 4096 [ 766.793879][T11625] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 766.793903][T11625] EXT4-fs (loop4): Test dummy encryption mode enabled [ 766.818618][T11625] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 766.818749][T11625] System zones: 0-5 [ 766.839388][T11625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.876850][ T5762] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 767.048535][ T5762] usb 6-1: Using ep0 maxpacket: 16 [ 767.050821][ T5762] usb 6-1: unable to get BOS descriptor or descriptor too short [ 767.050870][ T5762] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 767.051923][ T5762] usb 6-1: config 9 has an invalid interface number: 57 but max is 0 [ 767.051949][ T5762] usb 6-1: config 9 has no interface number 0 [ 767.051991][ T5762] usb 6-1: config 9 interface 57 has no altsetting 0 [ 767.056598][ T5762] usb 6-1: string descriptor 0 read error: -22 [ 767.056736][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.258777][ T1449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.264896][ T1449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.285917][ T1449] bond0 (unregistering): Released all slaves [ 767.503302][T11446] udevd[11446]: 'v4l_id /dev/radio48' [11632] terminated by signal 11 (Segmentation fault) [ 767.552372][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.640448][ T1449] hsr_slave_0: left promiscuous mode [ 767.654339][ T1449] hsr_slave_1: left promiscuous mode [ 767.666733][ T1449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.668708][ T1449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.976018][ T1449] team0 (unregistering): Port device team_slave_1 removed [ 768.001285][ T1449] team0 (unregistering): Port device team_slave_0 removed [ 768.142599][ T5762] video4linux radio48: keene_cmd_set failed (-110) [ 768.142628][ T5762] radio-keene 6-1:9.57: V4L2 device registered as radio48 [ 768.172400][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 768.186829][T11541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.215397][T11541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.284846][T11541] team0: Port device team_slave_0 added [ 768.298395][T11541] team0: Port device team_slave_1 added [ 768.398416][ T25] usb 6-1: USB disconnect, device number 6 [ 768.426405][T11541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.426423][T11541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.426454][T11541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.480209][T11541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.480228][T11541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.480259][T11541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.811618][T11325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.872079][T11325] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.999601][T11226] veth0_macvtap: entered promiscuous mode [ 769.006894][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 769.048844][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.048958][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.088949][T11541] hsr_slave_0: entered promiscuous mode [ 769.090040][T11541] hsr_slave_1: entered promiscuous mode [ 769.092559][T11541] debugfs: 'hsr0' already exists in 'hsr' [ 769.092580][T11541] Cannot create hsr debugfs directory [ 769.093636][T11226] veth1_macvtap: entered promiscuous mode [ 769.190844][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.190958][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.295273][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 769.322642][T11226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.366160][T11657] loop4: detected capacity change from 0 to 1024 [ 769.368354][T11657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 769.369671][T11657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 769.372034][T11657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 769.416766][T11657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.419248][T11226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.427590][T11657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.623166][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 769.959242][ T5876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.959267][ T5876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.122667][T11325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.125293][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.125464][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.125505][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.125544][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.125734][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.125753][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.307134][T11683] loop4: detected capacity change from 0 to 1024 [ 770.308153][T11683] EXT4-fs: Ignoring removed bh option [ 772.096803][T11683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 772.096904][T11683] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.311846][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 772.311870][ T31] audit: type=1400 audit(2000000433.834:586): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11687 comm="syz.5.1041" [ 772.625422][T11325] veth0_vlan: entered promiscuous mode [ 772.814175][ T31] audit: type=1800 audit(2000000434.268:587): pid=11697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.567" name="file0" dev="overlay" ino=26 res=0 errno=0 [ 773.032478][T11325] veth1_vlan: entered promiscuous mode [ 774.091670][T11325] veth0_macvtap: entered promiscuous mode [ 774.120754][T11325] veth1_macvtap: entered promiscuous mode [ 774.248328][T11325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.304431][T11325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.440844][T11705] gfs2: error -5 reading superblock [ 774.634392][T11705] loop1: detected capacity change from 0 to 2048 [ 774.748293][T11705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 774.807217][T11660] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 775.498140][ T5944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.503276][ T5944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.503434][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.503537][ T5944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.882614][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 776.144943][T11541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 776.177473][T11541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 776.197126][T11541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 776.220734][T11541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.221805][T11541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 777.875244][T11541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.876354][T11541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 777.919852][T11541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.423181][ T1449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.423205][ T1449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.808913][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.808937][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.118033][T11541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.359159][T11541] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.440261][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.440384][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.573822][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.574010][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.521566][T11541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.913849][T11541] veth0_vlan: entered promiscuous mode [ 781.928154][T11758] Illegal XDP return value 4294967294 on prog (id 63) dev N/A, expect packet loss! [ 781.991616][T11541] veth1_vlan: entered promiscuous mode [ 782.099655][T11763] loop5: detected capacity change from 0 to 164 [ 782.122366][T11763] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 782.187976][T11541] veth0_macvtap: entered promiscuous mode [ 782.195728][T11763] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 782.202822][T11763] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 782.233887][T11541] veth1_macvtap: entered promiscuous mode [ 782.240163][ T31] audit: type=1326 audit(2000000442.997:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.246064][ T31] audit: type=1326 audit(2000000443.006:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.246208][ T31] audit: type=1326 audit(2000000443.006:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd77b55e98e code=0x7ffc0000 [ 782.246258][ T31] audit: type=1326 audit(2000000443.006:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.246309][ T31] audit: type=1326 audit(2000000443.006:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.246360][ T31] audit: type=1326 audit(2000000443.006:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.246409][ T31] audit: type=1326 audit(2000000443.006:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.246459][ T31] audit: type=1326 audit(2000000443.006:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.246509][ T31] audit: type=1326 audit(2000000443.006:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.246725][ T31] audit: type=1326 audit(2000000443.006:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1049" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77b59e159 code=0x7ffc0000 [ 782.306270][T11767] ip_tables: iptables: counters copy to user failed while replacing table [ 782.407426][T11541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.494794][T11541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.567762][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.568134][ T970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.568177][ T970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.568216][ T970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.843276][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.843301][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.110884][T11771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.455439][T11776] gfs2: error -5 reading superblock [ 783.644031][T11776] loop3: detected capacity change from 0 to 2048 [ 783.799973][T11776] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 784.508470][ T5876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.508516][ T5876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.673000][T11780] loop1: detected capacity change from 0 to 1024 [ 786.732752][T11780] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 786.734948][T11780] JBD2: no valid journal superblock found [ 786.856131][T11780] EXT4-fs (loop1): Could not load journal inode [ 790.732910][T11803] loop1: detected capacity change from 0 to 2048 [ 790.789419][T11803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.363799][T11808] Cannot find add_set index 0 as target [ 792.960302][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 794.140329][T11831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.091691][T11854] block device autoloading is deprecated and will be removed. [ 801.536332][T11845] vivid-000: kernel_thread() failed [ 804.013629][T11871] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 804.058591][T11871] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 804.081031][T11871] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 804.089696][T11871] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 804.125579][T11871] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 804.128908][T11871] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 804.130683][T11871] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 804.191324][T11871] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 806.314414][T11882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.422157][ T5754] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 810.570435][ T5754] usb 5-1: device descriptor read/64, error -71 [ 810.853862][ T5754] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 811.059102][ T5754] usb 5-1: device descriptor read/64, error -71 [ 811.213763][ T5754] usb usb5-port1: attempt power cycle [ 811.656590][ T5754] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 811.729021][ T5754] usb 5-1: device descriptor read/8, error -71 [ 812.004543][ T5754] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 812.031647][ T5754] usb 5-1: device descriptor read/8, error -71 [ 812.145088][ T5754] usb usb5-port1: unable to enumerate USB device [ 812.380938][T11899] loop1: detected capacity change from 0 to 128 [ 812.383479][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.383537][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.484870][T11899] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 812.484924][T11899] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 812.500677][T11899] FAT-fs (loop1): Can't find a valid FAT filesystem [ 813.535532][T11903] udc dummy_udc.0: failed to start g1: -19 [ 813.672781][T11903] UDC core: g1: couldn't find an available UDC or it's busy [ 817.350710][T11924] futex_wake_op: syz.3.1093 tries to shift op by 144; fix this program [ 817.350946][T11924] futex_wake_op: syz.3.1093 tries to shift op by 144; fix this program [ 818.238037][T11931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.394522][T11929] fuse: Unknown parameter 'fd0x0000000000000006' [ 819.549221][T11936] loop5: detected capacity change from 0 to 256 [ 819.550323][T11936] exfat: Deprecated parameter 'namecase' [ 819.702561][T11936] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 820.707566][T11947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1101'. [ 820.707593][T11947] openvswitch: netlink: Flow key attr not present in new flow. [ 821.127554][T11952] loop2: detected capacity change from 0 to 32768 [ 821.129304][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 821.196516][T11952] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 821.253293][T11952] XFS (loop2): Ending clean mount [ 821.269039][T11952] XFS (loop2): Quotacheck needed: Please wait. [ 821.289279][ T25] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 821.296920][ T25] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 821.296945][ T25] usb 6-1: Product: syz [ 821.296961][ T25] usb 6-1: SerialNumber: syz [ 821.359303][T11952] XFS (loop2): Quotacheck: Done. [ 821.576779][ T25] usb 6-1: config 0 descriptor?? [ 821.823761][T11941] loop3: detected capacity change from 0 to 40427 [ 821.871263][T11941] F2FS-fs (loop3): invalid crc value [ 821.914983][ T25] hso 6-1:0.0: Failed to find BULK eps [ 821.989218][ T8686] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 822.085161][T11945] loop5: detected capacity change from 0 to 512 [ 822.098726][T11945] EXT4-fs: Ignoring removed orlov option [ 822.098760][T11945] EXT4-fs: Ignoring removed mblk_io_submit option [ 822.140413][T11945] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1100: corrupted in-inode xattr: e_value size too large [ 822.140453][T11945] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 822.144618][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 822.144644][ C0] EXT4-fs (loop5): initial error at time 2000000479: ext4_iget_extra_inode:5210: inode 15 [ 822.144679][ C0] EXT4-fs (loop5): last error at time 2000000479: ext4_iget_extra_inode:5210: inode 15 [ 822.149468][T11945] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1100: couldn't read orphan inode 15 (err -117) [ 822.149500][T11945] loop5: lost filesystem error report for type 5 error -117 [ 822.173577][T11945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.390434][ T5754] usb 6-1: USB disconnect, device number 7 [ 822.674108][T11972] loop1: detected capacity change from 0 to 64 [ 822.681350][T11941] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 822.719821][T11941] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 822.719852][T11941] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 822.719882][T11941] F2FS-fs (loop3): Start checkpoint disabled! [ 822.848953][T11972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1106'. [ 822.862654][T11972] unsupported nlmsg_type 40 [ 823.064623][T11941] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 823.095747][T11941] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 823.141442][ T8222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.700479][T11986] loop1: detected capacity change from 0 to 64 [ 824.440047][T11987] loop0: detected capacity change from 0 to 16 [ 824.473515][T11987] erofs (device loop0): mounted with root inode @ nid 36. [ 827.021956][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 827.197374][ T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 827.199824][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 827.199877][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.730751][ T9] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 827.988876][ T9] wwan wwan0: port wwan0qmi0 attached [ 831.457992][ T5629] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 831.458036][ T5629] Bluetooth: hci6: Injecting HCI hardware error event [ 831.459316][ T5616] Bluetooth: hci6: hardware error 0x00 [ 831.608029][ T9] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 9a:45:95:9c:c5:34 [ 831.782300][ T9] usb 2-1: USB disconnect, device number 4 [ 831.855903][ T9] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 832.023597][ T5629] Bluetooth: Wrong link type (-22) [ 832.230633][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 832.230656][ T31] audit: type=1326 audit(2000000489.123:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12024 comm="syz.4.1120" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d94b9e159 code=0x0 [ 832.593554][T12030] loop2: detected capacity change from 0 to 512 [ 832.630273][T12030] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 832.898412][T12030] __vm_enough_memory: pid: 12030, comm: syz.2.1121, bytes: 4503599627366400 not enough memory for the allocation [ 833.233808][T12037] loop3: detected capacity change from 0 to 128 [ 833.261141][T12037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 833.261223][T12037] System zones: 1-3, 19-19, 35-36 [ 833.268680][T12037] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 833.272417][T12037] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 833.387672][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 833.985975][ T5616] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 834.574510][ T5616] Bluetooth: hci5: Malformed LE Event: 0x1b [ 834.657852][T11325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 836.537051][T12058] input: syz1 as /devices/virtual/input/input15 [ 836.564652][ T5616] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 836.652598][T12060] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 836.664867][T12060] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 838.493862][T12068] loop0: detected capacity change from 0 to 256 [ 838.535134][T12068] vfat: Unknown parameter 'nnonumtail' [ 839.191802][T12078] loop2: detected capacity change from 0 to 256 [ 839.193860][T12078] exfat: Unknown parameter '³MvMÈU%x¥—<(|#Ó[]ÈŠ“ƒ3Q‘/ƒ ›ýhutH3'c”ˆ ' [ 842.690053][ T8206] IPVS: starting estimator thread 0... [ 842.780871][T12091] IPVS: using max 37 ests per chain, 88800 per kthread [ 842.950237][T12092] lo: entered allmulticast mode [ 846.563132][T12108] loop4: detected capacity change from 0 to 1024 [ 846.764504][T12108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 846.764565][T12108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 846.771119][T12108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 846.829257][T12108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.005374][T12105] syz.2.1144 (12105): drop_caches: 2 [ 847.097094][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.635430][ T30] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 847.805269][ T30] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 847.823110][ T30] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 847.842306][ T30] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 847.870924][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.871155][ T30] usb 3-1: Product: syz [ 847.871312][ T30] usb 3-1: Manufacturer: syz [ 847.871475][ T30] usb 3-1: SerialNumber: syz [ 847.965599][ T30] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 848.002085][ T30] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 848.018848][ T30] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 850.203692][T12112] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 850.238381][T12112] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 850.238428][T12112] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 850.271746][T12112] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 850.304144][T12123] loop4: detected capacity change from 0 to 512 [ 852.428327][T12134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1148'. [ 852.467445][T12133] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 852.467494][T12133] CIFS: Attempting to mount //127.0.0.1/share [ 852.618525][T12136] CIFS: VFS: Invalid response size 0 for command 0 [ 852.621497][T12133] CIFS: VFS: cifs_mount failed w/return code = -5 [ 853.334969][T12130] loop1: detected capacity change from 0 to 4096 [ 853.387275][T12130] ext4: Unknown parameter 'noacl' [ 853.656166][ T5754] usb 3-1: USB disconnect, device number 11 [ 853.764868][ T5754] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 853.800232][ T5754] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 853.801238][ T5754] ti_usb_3410_5052 3-1:2.0: device disconnected [ 853.803812][T12130] loop1: detected capacity change from 0 to 512 [ 853.883570][T12130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.883699][T12130] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 854.116412][T12130] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 854.358972][T11226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.736210][T10472] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 855.783230][T12162] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1159'. [ 856.023755][T10472] usb 2-1: Using ep0 maxpacket: 8 [ 856.024470][T10472] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 856.025506][T10472] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 856.025539][T10472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 856.027871][T10472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.027897][T10472] usb 2-1: Product: syz [ 856.027914][T10472] usb 2-1: Manufacturer: syz [ 856.027931][T10472] usb 2-1: SerialNumber: syz [ 856.033626][T10472] usb 2-1: config 0 descriptor?? [ 858.114914][T10472] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 858.247717][T12176] loop3: detected capacity change from 0 to 512 [ 858.251426][T12176] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 858.254570][T12176] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1163: corrupted in-inode xattr: invalid ea_ino [ 858.254603][T12176] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 858.254978][T12176] EXT4-fs (loop3): Remounting filesystem read-only [ 858.304512][T12176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.566560][T12176] TCP: TCP_TX_DELAY enabled [ 859.694991][T11325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.134249][T10472] usb 2-1: USB disconnect, device number 5 [ 860.366561][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 861.717378][T12193] binder: 12189:12193 ioctl 4018620d 0 returned -22 [ 862.626277][T12211] loop2: detected capacity change from 0 to 128 [ 862.632164][T12211] EXT4-fs: Ignoring removed i_version option [ 862.632193][T12211] EXT4-fs: Ignoring removed oldalloc option [ 862.763611][ T31] audit: type=1326 audit(2000000517.293:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.0.1171" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f5399e159 code=0x0 [ 862.825945][T12211] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 862.847166][T12211] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.958750][T12212] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 864.256582][T12216] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 33: comm syz.2.1174: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 864.259933][T12216] EXT4-fs error (device loop2) in do_split:2029: Corrupt filesystem [ 864.320755][ T31] audit: type=1804 audit(2000000518.732:653): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1174" name="/newroot/177/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 864.361373][T12218] loop3: detected capacity change from 0 to 2048 [ 864.362471][T12218] nilfs2: Unknown parameter 'ÿÿ' [ 864.607046][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 864.773329][T12222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 865.013590][T12229] xt_cgroup: path and classid specified [ 865.174759][ T8686] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 867.363360][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 869.025592][T12253] loop5: detected capacity change from 0 to 256 [ 869.641198][T12254] usb usb8: usbfs: process 12254 (syz.4.1162) did not claim interface 0 before use [ 874.736091][T12279] loop5: detected capacity change from 0 to 40427 [ 874.818700][T12279] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 874.818729][T12279] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 874.850005][T12279] F2FS-fs (loop5): invalid crc value [ 875.183341][T12279] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 875.250891][T12279] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 875.250917][T12279] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 878.797912][T12296] IPVS: lc: FWM 3 0x00000003 - no destination available [ 878.917246][T12298] device-mapper: ioctl: Invalid ioctl structure: name t!, dev f800 [ 879.002033][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.002128][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.650438][ T7533] IPVS: starting estimator thread 0... [ 879.828093][T12306] IPVS: using max 28 ests per chain, 67200 per kthread [ 879.884920][ T8206] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.201535][T12309] Bluetooth: MGMT ver 1.23 [ 880.563315][ T8206] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.723388][ T8206] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.697937][ T8206] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.250939][T12336] comedi comedi1: pc212e: a I/O base address must be specified [ 885.163931][T12336] overlayfs: overlapping lowerdir path [ 886.220431][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 886.306231][ T8206] bridge_slave_1: left allmulticast mode [ 886.306281][ T8206] bridge_slave_1: left promiscuous mode [ 886.306508][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.327138][ T8206] bridge_slave_0: left allmulticast mode [ 886.327166][ T8206] bridge_slave_0: left promiscuous mode [ 886.327397][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.537292][T12347] loop2: detected capacity change from 0 to 32768 [ 886.597073][T12353] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 886.597353][T12353] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 886.597377][T12353] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 886.597392][T12353] UDF-fs: Scanning with blocksize 512 failed [ 886.598805][T12353] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 886.598976][T12353] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 886.598997][T12353] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 886.599011][T12353] UDF-fs: Scanning with blocksize 1024 failed [ 886.599806][T12353] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 886.599930][T12353] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 886.599951][T12353] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 886.599966][T12353] UDF-fs: Scanning with blocksize 2048 failed [ 886.600556][T12353] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 886.600663][T12353] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 886.600684][T12353] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 886.600699][T12353] UDF-fs: Scanning with blocksize 4096 failed [ 886.600729][T12353] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 886.863130][T12349] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 886.933196][T12347] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 887.130620][T12347] XFS (loop2): Ending clean mount [ 887.138516][T12347] XFS (loop2): Quotacheck needed: Please wait. [ 887.428121][T12347] XFS (loop2): Quotacheck: Done. [ 887.722629][ T31] audit: type=1800 audit(2000000540.222:654): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1208" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 887.722706][ T31] audit: type=1800 audit(2000000540.222:655): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1208" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 887.805836][T12369] loop0: detected capacity change from 0 to 128 [ 887.828205][ T8686] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 888.377617][ T8206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.506047][T12372] [ 888.508422][T12372] ====================================================== [ 888.515428][T12372] WARNING: possible circular locking dependency detected [ 888.522438][T12372] syzkaller #0 Tainted: G L [ 888.528407][T12372] ------------------------------------------------------ [ 888.535414][T12372] syz.1.1214/12372 is trying to acquire lock: [ 888.541468][T12372] ffffffff8fc13248 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_frame_interval_store+0xce/0xae0 [ 888.552894][T12372] [ 888.552894][T12372] but task is already holding lock: [ 888.560249][T12372] ffff8880291d8770 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 888.562954][ T8273] smbdirect: ib_dev[syz1] removed [ 888.574576][T12372] [ 888.574576][T12372] which lock already depends on the new lock. [ 888.574576][T12372] [ 888.584970][T12372] [ 888.584970][T12372] the existing dependency chain (in reverse order) is: [ 888.593969][T12372] [ 888.593969][T12372] -> #4 (&p->frag_sem){++++}-{4:4}: [ 888.601364][T12372] down_write_killable+0xa6/0x240 [ 888.606929][T12372] configfs_rmdir+0x3b0/0x950 [ 888.612139][T12372] vfs_rmdir+0x3e6/0x6a0 [ 888.616910][T12372] filename_rmdir+0x292/0x520 [ 888.622119][T12372] __se_sys_rmdir+0x2e/0x140 [ 888.627237][T12372] do_syscall_64+0x166/0x520 [ 888.632350][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.638767][T12372] [ 888.638767][T12372] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 888.647464][T12372] down_write+0x96/0x200 [ 888.652230][T12372] configfs_depend_item_unlocked+0x153/0x420 [ 888.658729][T12372] usbg_make_tpg+0x1e0/0x550 [ 888.663837][T12372] target_fabric_make_tpg+0xa8/0x6d0 [ 888.669644][T12372] configfs_mkdir+0x4f6/0x9e0 [ 888.674834][T12372] vfs_mkdir+0x40c/0x620 [ 888.679613][T12372] filename_mkdirat+0x285/0x510 [ 888.684976][T12372] __se_sys_mkdirat+0x35/0x150 [ 888.690253][T12372] do_syscall_64+0x166/0x520 [ 888.695359][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.701758][T12372] [ 888.701758][T12372] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 888.709657][T12372] __mutex_lock+0x19d/0x1550 [ 888.714764][T12372] tcm_alloc_inst+0x65/0x1a0 [ 888.719861][T12372] usb_get_function_instance+0xe3/0x2f0 [ 888.725925][T12372] function_make+0x127/0x360 [ 888.731029][T12372] configfs_mkdir+0x4f6/0x9e0 [ 888.736217][T12372] vfs_mkdir+0x40c/0x620 [ 888.740970][T12372] filename_mkdirat+0x285/0x510 [ 888.746340][T12372] __se_sys_mkdirat+0x35/0x150 [ 888.751615][T12372] do_syscall_64+0x166/0x520 [ 888.756717][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.763120][T12372] [ 888.763120][T12372] -> #1 (func_lock){+.+.}-{4:4}: [ 888.770239][T12372] __mutex_lock+0x19d/0x1550 [ 888.775349][T12372] usb_get_function_instance+0x2e/0x2f0 [ 888.781416][T12372] function_make+0x127/0x360 [ 888.786520][T12372] configfs_mkdir+0x4f6/0x9e0 [ 888.791717][T12372] vfs_mkdir+0x40c/0x620 [ 888.796467][T12372] filename_mkdirat+0x285/0x510 [ 888.801826][T12372] __se_sys_mkdirat+0x35/0x150 [ 888.807103][T12372] do_syscall_64+0x166/0x520 [ 888.812209][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.818612][T12372] [ 888.818612][T12372] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 888.826861][T12372] __lock_acquire+0x164c/0x2de0 [ 888.832222][T12372] lock_acquire+0x115/0x350 [ 888.837233][T12372] __mutex_lock+0x19d/0x1550 [ 888.842340][T12372] uvcg_frame_dw_frame_interval_store+0xce/0xae0 [ 888.849189][T12372] configfs_write_iter+0x337/0x430 [ 888.854812][T12372] vfs_write+0x612/0xba0 [ 888.859577][T12372] ksys_write+0x150/0x270 [ 888.864426][T12372] do_syscall_64+0x166/0x520 [ 888.869532][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.875934][T12372] [ 888.875934][T12372] other info that might help us debug this: [ 888.875934][T12372] [ 888.886143][T12372] Chain exists of: [ 888.886143][T12372] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 888.886143][T12372] [ 888.900661][T12372] Possible unsafe locking scenario: [ 888.900661][T12372] [ 888.908089][T12372] CPU0 CPU1 [ 888.913438][T12372] ---- ---- [ 888.918784][T12372] rlock(&p->frag_sem); [ 888.923014][T12372] lock(&sb->s_type->i_mutex_key#26); [ 888.930996][T12372] lock(&p->frag_sem); [ 888.937666][T12372] lock(gadget_subsys.su_mutex); [ 888.942700][T12372] [ 888.942700][T12372] *** DEADLOCK *** [ 888.942700][T12372] [ 888.950824][T12372] locks held by syz.1.1214/12372: 4, last CPU#0: [ 888.957133][T12372] #0: ffff888079a2beb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 888.966203][T12372] #1: ffff88801d390460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 888.975199][T12372] #2: ffff888032169480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x7e/0x430 [ 888.985039][T12372] #3: ffff8880291d8770 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 888.994791][T12372] [ 888.994791][T12372] stack backtrace: [ 889.000664][T12372] CPU: 0 UID: 0 PID: 12372 Comm: syz.1.1214 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.011590][T12372] Tainted: [L]=SOFTLOCKUP [ 889.015895][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 889.025935][T12372] Call Trace: [ 889.029200][T12372] [ 889.032116][T12372] dump_stack_lvl+0xe8/0x150 [ 889.036707][T12372] print_circular_bug+0x2e2/0x300 [ 889.041729][T12372] check_noncircular+0x12f/0x150 [ 889.046666][T12372] __lock_acquire+0x164c/0x2de0 [ 889.051513][T12372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 889.057138][T12372] ? unwind_get_return_address+0x4d/0x90 [ 889.062801][T12372] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 889.068943][T12372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 889.074570][T12372] ? arch_stack_walk+0xfb/0x150 [ 889.079426][T12372] lock_acquire+0x115/0x350 [ 889.083922][T12372] ? uvcg_frame_dw_frame_interval_store+0xce/0xae0 [ 889.090434][T12372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 889.096066][T12372] __mutex_lock+0x19d/0x1550 [ 889.100650][T12372] ? uvcg_frame_dw_frame_interval_store+0xce/0xae0 [ 889.107151][T12372] ? do_syscall_64+0x166/0x520 [ 889.111917][T12372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 889.117544][T12372] ? uvcg_frame_dw_frame_interval_store+0xce/0xae0 [ 889.124046][T12372] ? __pfx___mutex_lock+0x10/0x10 [ 889.129076][T12372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 889.134700][T12372] ? _copy_from_iter+0x20a/0x1660 [ 889.139721][T12372] uvcg_frame_dw_frame_interval_store+0xce/0xae0 [ 889.146050][T12372] ? lock_acquire+0x115/0x350 [ 889.150718][T12372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 889.156347][T12372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 889.161974][T12372] ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10 [ 889.168926][T12372] ? down_read+0x2be/0x330 [ 889.173344][T12372] ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10 [ 889.180283][T12372] configfs_write_iter+0x337/0x430 [ 889.185389][T12372] vfs_write+0x612/0xba0 [ 889.189639][T12372] ? __pfx_vfs_write+0x10/0x10 [ 889.194409][T12372] ? __fget_files+0x2a/0x420 [ 889.198997][T12372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 889.204625][T12372] ksys_write+0x150/0x270 [ 889.208958][T12372] ? __pfx_ksys_write+0x10/0x10 [ 889.213819][T12372] do_syscall_64+0x166/0x520 [ 889.218406][T12372] ? trace_irq_disable+0x3b/0x140 [ 889.223422][T12372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.229484][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.235367][T12372] RIP: 0033:0x7feb4379e159 [ 889.239772][T12372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.259539][T12372] RSP: 002b:00007feb4457e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 889.267943][T12372] RAX: ffffffffffffffda RBX: 00007feb43a25fa0 RCX: 00007feb4379e159 [ 889.275904][T12372] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 889.283864][T12372] RBP: 00007feb4383506b R08: 0000000000000000 R09: 0000000000000000 [ 889.291820][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.299777][T12372] R13: 00007feb43a26038 R14: 00007feb43a25fa0 R15: 00007fff09d838a8 [ 889.307756][T12372] [ 889.473959][ T8206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.936909][T12375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.664001][ T8206] bond0 (unregistering): Released all slaves [ 891.774334][T12373] syz.0.1212 (12373) used obsolete PPPIOCDETACH ioctl [ 891.808201][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 891.884060][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 892.004708][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 892.110264][ T8206] hsr_slave_0: left promiscuous mode [ 892.112012][ T8206] hsr_slave_1: left promiscuous mode [ 892.112909][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.112929][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.133763][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.133781][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.166209][ T8206] veth1_macvtap: left promiscuous mode [ 892.166252][ T8206] veth0_macvtap: left promiscuous mode [ 892.166321][ T8206] veth1_vlan: left promiscuous mode [ 892.166367][ T8206] veth0_vlan: left promiscuous mode [ 892.337377][ T8206] team0 (unregistering): Port device team_slave_1 removed [ 892.367665][ T8206] team0 (unregistering): Port device team_slave_0 removed