last executing test programs: 24m6.484114901s ago: executing program 32 (id=33): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={0xffffffffffffffff, r4}, 0xc) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x480, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x450, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0x2, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d00000021000000008a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe320fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6420ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6ad62934782cc308e936d7637e07c201282bbbed84a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbefc18f77700372471609e2c443e84ee5e9a5178f90512df04f3a0909c96632ae20c68c62b06e9fdc2977dfef1ced97b70263fc81c30f1354b319fe9d59d3101c4ee7375ff8673de5caff9e6ee73ccae77d1bf8f22330e8840af1ded6d5be627f7f87d5b12a2d6317825d77bef85313f541dcc4ff13f413db34d5da05648590a1685031e6955d4352bf0b7efd0b0a1e636b8aa4963d9f67de5ba91d501418bbeaac09bdd1059f3c3159e5900"/2282], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 22m20.919286901s ago: executing program 0 (id=170): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000000c0), 0x0}, 0x20) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x3f, 0x0, 0x0, @tick, {}, {}, @result={0x2, 0x1}}], 0x1c) 22m19.76361392s ago: executing program 0 (id=172): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000000c0), 0x0}, 0x20) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x3f, 0x0, 0x0, @tick, {}, {}, @result={0x2, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfe, {}, {}, @raw32}], 0xffc8) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc4b13b6eaa22235f, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 22m18.434216782s ago: executing program 0 (id=177): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf250800"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0xffff, 0x4, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r4, 0x1}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 22m14.762999103s ago: executing program 0 (id=179): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) 22m12.244824414s ago: executing program 0 (id=192): open_tree(0xffffffffffffff9c, 0x0, 0x9902) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) 22m4.481797726s ago: executing program 0 (id=189): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 21m55.908283837s ago: executing program 4 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) 21m53.981224115s ago: executing program 4 (id=204): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf250800"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0xffff, 0x4, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r4, 0x1}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 21m48.356041613s ago: executing program 33 (id=189): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 21m46.590990766s ago: executing program 4 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) 21m44.480037498s ago: executing program 4 (id=218): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) clock_nanosleep(0x9, 0x0, &(0x7f0000000000), 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="080015"], 0x24}, 0x1, 0x0, 0x0, 0x4004045}, 0x2a092) 21m42.125794356s ago: executing program 4 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r0, 0x0, 0x0) 21m30.787798386s ago: executing program 4 (id=231): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003100)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40898}, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 21m15.152292581s ago: executing program 34 (id=231): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003100)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40898}, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 19m49.046059862s ago: executing program 5 (id=345): epoll_create1(0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r2, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001200)={{r4, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r8, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 19m45.377111802s ago: executing program 5 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x60, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, r6, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xa, 0x247, &(0x7f0000001300)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 19m43.892321279s ago: executing program 5 (id=357): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x6, 0x232, &(0x7f0000000880)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x288, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x11}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f0000003840)=[{r5, 0x40}], 0x1, 0x0, 0x0, 0x0) truncate(0x0, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) getpid() umount2(0x0, 0x2) 19m42.780857576s ago: executing program 5 (id=360): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000001) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB="bf8170c130887ef9943a3d26"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000140)=0x5) 19m41.030065289s ago: executing program 5 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001200)={{r4, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r8, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 19m38.9872259s ago: executing program 1 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x60, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, r6, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xa, 0x247, &(0x7f0000001300)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 19m37.663429292s ago: executing program 1 (id=371): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0xfffffffd, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) connect$pppl2tp(r2, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast1, @multicast1, 0x4e22, 0x4e21, 0x7}, @ether_spec={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7}, 0x4, 0x1, 0x2, 0x8, 0xfffffffffffffffe}}}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) write(r5, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 19m35.746770779s ago: executing program 1 (id=373): open_tree(0xffffffffffffff9c, 0x0, 0x9902) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) 19m34.49177809s ago: executing program 1 (id=375): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000001) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB="bf8170c130887ef9943a3d26"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000140)=0x5) 19m25.245429858s ago: executing program 35 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001200)={{r4, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r8, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 19m22.129221985s ago: executing program 1 (id=395): open_tree(0xffffffffffffff9c, 0x0, 0x9902) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) 19m20.871959926s ago: executing program 1 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000001200)={{r3, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r7, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 19m5.038479825s ago: executing program 36 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000001200)={{r3, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r7, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 16m27.710901141s ago: executing program 9 (id=600): socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) listen(0xffffffffffffffff, 0x5) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r6, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r6, r7, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r8, 0xb1b, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r10 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0xe0}], 0x1}, 0x3e8) 16m24.749484104s ago: executing program 9 (id=603): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000001) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB="bf8170c130887ef9943a3d26"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000140)=0x5) 16m22.236032115s ago: executing program 9 (id=608): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x1, 0x551d, &(0x7f0000002640)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0xf4d0, 0x80, 0x3, 0x3da}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x810, 0x0, 0x230, 0xf0, 0x230, 0x230, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x800}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000a79000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4c001, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x8012, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffe52, 0xc9100120, 0x0, 0xfffffffffffffd25) write$UHID_INPUT(r4, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) 16m17.398445555s ago: executing program 9 (id=615): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000580)="ca7c77052b4d7f04c21b26522d627c0d5962dfe0bad24ba1a6d83ba9c6f01fa87de52009020ed7a2418470341f899c0752164439bb9600ecfa6b02f50708bdd772b1d190c5df5bfd956f546c2ae8c323c5a61b5ad0b7c262766bb9a577dd2d2b1afd3ebd38e18f4cbada5226754e17e039d9f981cf0a54db3e365614115bcc11e107e5a9efd0b128657e9d9d1027088900392e5ac84e818e571669e6e5f66fd0afe269c1764f2d9353c334e89de0594f81dd9be220eca55e21", 0xb9}, {&(0x7f0000000640)="2017fe246728903ad0d3f8c80ed6c5d2298dddf4d31896486936ac0dbe7b0a0b2e546735059d589b719719c4251ad5b8bd782853eeaf7805a7e8dbd2970d43a7dcaacdbe890b2fd6d1603e32bd43b15c6d39ef1ca9aaa316c47345aaeae9ce6d49553855dc7b5caa", 0x68}], 0x2, 0x15a, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) listen(0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) close(r4) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000004c000000890a010400000000000000000100000008000a40000000000c00104000000000000000020900010073797a3000000000080005400000000a040012800c00098008000140000006a3140000001000010000000000de0000000000"], 0x94}}, 0x0) 16m15.895459382s ago: executing program 9 (id=618): open_tree(0xffffffffffffff9c, 0x0, 0x9902) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) 16m11.860253711s ago: executing program 9 (id=621): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0xfffffffd, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) connect$pppl2tp(r2, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast1, @multicast1, 0x4e22, 0x4e21, 0x7}, @ether_spec={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7}, 0x4, 0x1, 0x2, 0x8, 0xfffffffffffffffe}}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000000c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) write(r5, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 15m55.211662561s ago: executing program 37 (id=621): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0xfffffffd, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) connect$pppl2tp(r2, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast1, @multicast1, 0x4e22, 0x4e21, 0x7}, @ether_spec={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7}, 0x4, 0x1, 0x2, 0x8, 0xfffffffffffffffe}}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000000c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) write(r5, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 7.087851777s ago: executing program 8 (id=2720): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000180)="af838570", &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 6.509060021s ago: executing program 3 (id=2725): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r4, &(0x7f0000001900)='1', 0x1) close(r4) 6.13720504s ago: executing program 3 (id=2727): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x0, 0x0, 0x0, 0x20000000, 0x0) 5.960174535s ago: executing program 8 (id=2728): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000000040)=ANY=[], 0xff, 0x5ec9, &(0x7f00000097c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1094c3, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) 5.891983777s ago: executing program 2 (id=2729): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x200}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x3}]}, 0x4c}}, 0x0) 5.891732386s ago: executing program 7 (id=2730): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000005d00), 0x0, 0x40008000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet(0x2, 0x800, 0x40000000) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r7, 0x0, 0x0) ftruncate(r7, 0x2000009) sendfile(r4, r7, 0x0, 0x7ffff004) 4.877040631s ago: executing program 2 (id=2732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x109881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x400000b6, 0x0, 0x4}]}) 4.813355513s ago: executing program 7 (id=2733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0x8d}]}) 4.332919925s ago: executing program 2 (id=2735): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x20, 0x12, 0x301, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}}, 0x20}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.242579217s ago: executing program 7 (id=2736): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="010000000200489590a0"]) 4.019630422s ago: executing program 2 (id=2738): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x2000, 0x101, 0x13f}}) 3.894179495s ago: executing program 3 (id=2739): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfffffffffffffd1b, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.646644491s ago: executing program 3 (id=2741): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fanotify_init(0x20, 0x0) 3.599961662s ago: executing program 2 (id=2742): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 3.448801086s ago: executing program 6 (id=2743): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000005d00), 0x0, 0x40008000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet(0x2, 0x800, 0x40000000) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r7, 0x0, 0x0) ftruncate(r7, 0x2000009) sendfile(r4, r7, 0x0, 0x7ffff004) 3.140653594s ago: executing program 7 (id=2744): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r1, 0x3ff}, 0x8) 2.292607894s ago: executing program 6 (id=2745): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) 2.099361759s ago: executing program 8 (id=2746): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040)={[{@resgid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 1.913577393s ago: executing program 7 (id=2747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x2000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x10000, 0x0, &(0x7f0000661000/0x4000)=nil}) 1.813096296s ago: executing program 6 (id=2748): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 1.524010663s ago: executing program 8 (id=2749): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600200000fc020000000000000000000000000001ffc5"], 0x0) 1.480891584s ago: executing program 6 (id=2750): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r4, &(0x7f0000001900)='1', 0x1) close(r4) 1.451901395s ago: executing program 7 (id=2751): capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.123560893s ago: executing program 8 (id=2752): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1.078302814s ago: executing program 6 (id=2753): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x4}) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f0000000540)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000000240)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 991.978056ms ago: executing program 3 (id=2754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 870.632859ms ago: executing program 2 (id=2755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x5e9602, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) setxattr$incfs_metadata(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 783.102301ms ago: executing program 8 (id=2756): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @hyper, 0x0, 0x0, 0x1, 0x4}) 708.100963ms ago: executing program 3 (id=2757): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x200) 0s ago: executing program 6 (id=2758): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0xa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x9, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x121002, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x40, 0xe, 0x28, {0x28, 0x24, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): etlink: 8 bytes leftover after parsing attributes in process `syz.8.1356'. [ 1109.310776][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1356'. [ 1109.323913][T11694] 9pnet_virtio: no channels available for device syz [ 1110.110210][T11696] db_root: cannot be changed because it's in use [ 1110.151788][T11696] se_device not configured yet, cannot port link [ 1110.208647][T11691] Process accounting resumed [ 1111.230655][T11712] db_root: cannot be changed because it's in use [ 1113.317814][T11740] loop7: detected capacity change from 0 to 512 [ 1113.586872][T11740] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1113.623750][T11740] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.605075][T11752] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1114.613611][T11752] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1114.622107][T11752] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1115.435321][ T5821] EXT4-fs (loop7): unmounting filesystem. [ 1116.107232][T11766] Process accounting resumed [ 1116.192444][ T7669] Process accounting resumed [ 1117.967519][T11802] loop2: detected capacity change from 0 to 64 [ 1118.607851][T11802] syz.2.1380: attempt to access beyond end of device [ 1118.607851][T11802] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1118.621388][T11802] Buffer I/O error on dev loop2, logical block 512, async page read [ 1118.640009][T11802] syz.2.1380: attempt to access beyond end of device [ 1118.640009][T11802] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1118.691322][T11802] Buffer I/O error on dev loop2, logical block 56576, async page read [ 1121.002432][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.525776][T11821] Process accounting resumed [ 1122.906816][T11837] loop6: detected capacity change from 0 to 4096 [ 1123.591094][ T27] Process accounting resumed [ 1123.750473][T11837] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1123.822210][T11837] batadv0 speed is unknown, defaulting to 1000 [ 1124.263835][T11851] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.456410][ T6020] EXT4-fs (loop6): unmounting filesystem. [ 1126.442159][T11876] raw_sendmsg: syz.2.1393 forgot to set AF_INET. Fix it! [ 1127.425085][ T7669] libceph: connect (1)[c::]:6789 error -101 [ 1127.436705][ T7669] libceph: mon0 (1)[c::]:6789 connect error [ 1127.576788][T11884] loop3: detected capacity change from 0 to 64 [ 1127.702071][ T7669] libceph: connect (1)[c::]:6789 error -101 [ 1127.844129][T11876] ceph: No mds server is up or the cluster is laggy [ 1129.090671][ T7669] libceph: mon0 (1)[c::]:6789 connect error [ 1129.150086][T11884] syz.3.1392: attempt to access beyond end of device [ 1129.150086][T11884] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1129.163768][T11884] Buffer I/O error on dev loop3, logical block 512, async page read [ 1129.172308][T11884] syz.3.1392: attempt to access beyond end of device [ 1129.172308][T11884] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1129.189904][T11884] Buffer I/O error on dev loop3, logical block 56576, async page read [ 1131.618043][T11909] input: syz0 as /devices/virtual/input/input17 [ 1133.202159][T11907] loop6: detected capacity change from 0 to 4096 [ 1133.209566][T11907] EXT4-fs: inline encryption not supported [ 1133.219305][T11907] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1133.228287][T11907] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1133.275901][T11907] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 1133.284238][T11907] System zones: 0-5 [ 1133.311708][T11907] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1133.387859][T11899] Process accounting resumed [ 1133.656714][T11907] overlayfs: failed to resolve './bus': -2 [ 1133.930858][ T6020] EXT4-fs (loop6): unmounting filesystem. [ 1134.269588][ T4586] Process accounting resumed [ 1136.888034][T11961] loop6: detected capacity change from 0 to 16 [ 1136.911187][T11961] erofs: (device loop6): mounted with root inode @ nid 36. [ 1136.963488][ T4284] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1137.170691][T11961] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1137.182699][ T26] audit: type=1800 audit(2000525522.107:187): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1408" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1137.563961][T11963] loop2: detected capacity change from 0 to 64 [ 1138.130199][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 1138.136588][ T4283] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1141.477385][T11977] Process accounting resumed [ 1142.706223][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1143.308635][T12012] PKCS7: Unknown OID: [4] 0.0 [ 1143.314209][T12012] PKCS7: Only support pkcs7_signedData type [ 1143.363262][T12012] xt_policy: output policy not valid in PREROUTING and INPUT [ 1145.629338][T12029] loop2: detected capacity change from 0 to 64 [ 1146.975727][T12043] loop7: detected capacity change from 0 to 128 [ 1147.845878][T12043] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1147.860091][T12043] hpfs: filesystem error: improperly stopped [ 1147.866324][T12043] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1147.874340][T12043] hpfs: You really don't want any checks? You are crazy... [ 1147.881856][T12043] hpfs: Code page index out of array [ 1147.887515][T12043] hpfs: code page support is disabled [ 1148.605633][T12043] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.615961][T12043] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.622137][T12043] hpfs: filesystem error: unable to find root dir [ 1148.704559][T12043] hpfs: hpfs_map_sector(): read error [ 1148.710940][T12043] hpfs: hpfs_map_sector(): read error [ 1149.240816][T12043] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1149.427236][T12051] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1427'. [ 1150.568891][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'. [ 1150.933074][T12062] tipc: Started in network mode [ 1150.938225][T12062] tipc: Node identity 4, cluster identity 4711 [ 1150.944662][T12062] tipc: Node number set to 4 [ 1155.185018][T12074] loop2: detected capacity change from 0 to 4096 [ 1155.567061][T12074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1155.652082][T12072] batadv0 speed is unknown, defaulting to 1000 [ 1156.228388][T12092] loop3: detected capacity change from 0 to 4096 [ 1156.236172][T12092] EXT4-fs: inline encryption not supported [ 1156.255912][T12092] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1156.264786][T12092] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1156.299745][T10007] EXT4-fs (loop2): unmounting filesystem. [ 1156.349233][T12092] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 1156.357623][T12092] System zones: 0-5 [ 1156.575663][T12092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1157.059878][T12093] overlayfs: failed to resolve './bus': -2 [ 1157.387728][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 1157.693565][T12113] (syz.2.1437,12113,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1160.604014][T12131] Bluetooth: MGMT ver 1.22 [ 1162.984116][T12144] loop6: detected capacity change from 0 to 64 [ 1163.250196][ T4284] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1163.250250][ T4283] Bluetooth: hci2: command 0x0401 tx timeout [ 1164.166675][T12158] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1164.642127][T12158] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1164.807097][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1446'. [ 1166.108384][T12166] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1168.313446][T12195] loop8: detected capacity change from 0 to 7 [ 1168.800208][T12195] Dev loop8: unable to read RDB block 7 [ 1168.806125][T12195] loop8: unable to read partition table [ 1168.812245][T12195] loop8: partition table beyond EOD, truncated [ 1168.818690][T12195] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1172.265502][T12226] loop7: detected capacity change from 0 to 4096 [ 1172.275249][T12226] EXT4-fs: inline encryption not supported [ 1172.821925][T12226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1172.832131][T12226] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1172.854450][T12226] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 1172.862937][T12226] System zones: 0-5 [ 1173.431695][T12226] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1173.550625][T12216] ./file0: Can't open blockdev [ 1173.759566][T12226] overlayfs: failed to resolve './bus': -2 [ 1174.054650][T12246] loop2: detected capacity change from 0 to 128 [ 1174.091675][ T5821] EXT4-fs (loop7): unmounting filesystem. [ 1178.921654][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1464'. [ 1178.949755][T12270] device bridge_slave_1 left promiscuous mode [ 1178.956467][T12270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.292370][T12270] device bridge_slave_0 left promiscuous mode [ 1179.298658][T12270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.331756][T12280] loop6: detected capacity change from 0 to 256 [ 1179.339235][T12280] exfat: Deprecated parameter 'utf8' [ 1179.384622][T12280] exFAT-fs (loop6): bogus number of FAT structure [ 1179.739440][T12280] exFAT-fs (loop6): failed to read boot sector [ 1179.823207][T12280] exFAT-fs (loop6): failed to recognize exfat type [ 1181.299495][T12288] loop2: detected capacity change from 0 to 64 [ 1181.674221][T12290] db_root: cannot be changed because it's in use [ 1183.481441][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.820805][T12319] batadv0 speed is unknown, defaulting to 1000 [ 1185.010700][T12326] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1185.795090][T12331] loop6: detected capacity change from 0 to 128 [ 1185.811367][T12331] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1185.823340][T12331] hpfs: filesystem error: improperly stopped [ 1185.829885][T12331] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1185.838087][T12331] hpfs: You really don't want any checks? You are crazy... [ 1185.845529][T12331] hpfs: Code page index out of array [ 1185.851014][T12331] hpfs: code page support is disabled [ 1185.864221][T12331] hpfs: hpfs_map_4sectors(): unaligned read [ 1185.872164][T12331] hpfs: hpfs_map_4sectors(): unaligned read [ 1185.878136][T12331] hpfs: filesystem error: unable to find root dir [ 1185.919189][T12331] hpfs: hpfs_map_sector(): read error [ 1185.924920][T12331] hpfs: hpfs_map_sector(): read error [ 1185.954250][T12331] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1186.516034][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1476'. [ 1187.671012][T12339] loop7: detected capacity change from 0 to 128 [ 1190.962480][T12356] loop8: detected capacity change from 0 to 7 [ 1191.546194][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 1191.569200][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 1191.579823][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 1191.590810][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 1191.603225][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 1191.635095][T12355] 9pnet_virtio: no channels available for device syz [ 1191.867071][T12356] Dev loop8: unable to read RDB block 7 [ 1191.872914][T12356] loop8: unable to read partition table [ 1191.878862][T12356] loop8: partition table beyond EOD, truncated [ 1191.885281][T12356] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1192.128795][T12361] loop3: detected capacity change from 0 to 256 [ 1192.146838][T12361] exfat: Deprecated parameter 'utf8' [ 1192.220580][T12361] exFAT-fs (loop3): bogus number of FAT structure [ 1192.253747][T12361] exFAT-fs (loop3): failed to read boot sector [ 1192.329877][T12361] exFAT-fs (loop3): failed to recognize exfat type [ 1192.366344][T12367] loop7: detected capacity change from 0 to 64 [ 1196.771360][T12392] 9pnet_fd: p9_fd_create_tcp (12392): problem connecting socket to 127.0.0.1 [ 1206.535669][T12450] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1206.662617][T12454] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1502'. [ 1208.689909][ T49] Bluetooth: hci2: command 0x0401 tx timeout [ 1208.696782][ T4284] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1208.824748][T12476] overlayfs: failed to clone upperpath [ 1209.710874][T12485] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1209.970882][T12490] loop6: detected capacity change from 0 to 128 [ 1210.602218][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1510'. [ 1214.438483][T12496] team0: Port device team_slave_0 removed [ 1214.544772][ T8009] Process accounting resumed [ 1215.813393][T12508] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1221.359249][T12541] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.1521'. [ 1223.615550][T12558] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1225.740368][T12575] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1225.751169][T12575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1226.384519][T12580] db_root: cannot be changed because it's in use [ 1229.496256][T12614] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1230.570005][T12627] loop3: detected capacity change from 0 to 2048 [ 1230.626101][T12627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1231.744686][T12645] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1231.755687][T12645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1232.840129][T12660] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1232.934759][T12659] db_root: cannot be changed because it's in use [ 1233.022185][T12659] se_device not configured yet, cannot port link [ 1234.000002][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1544'. [ 1234.519091][T12673] tipc: Started in network mode [ 1234.524298][T12673] tipc: Node identity ac14140f, cluster identity 4711 [ 1234.536289][T12673] tipc: New replicast peer: 172.30.0.8 [ 1234.545972][T12673] tipc: Enabled bearer , priority 10 [ 1234.557448][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1545'. [ 1234.566780][T12673] tipc: Disabling bearer [ 1236.352526][T12693] futex_wake_op: syz.3.1552 tries to shift op by 144; fix this program [ 1236.431480][T12693] loop3: detected capacity change from 0 to 256 [ 1238.353393][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 1238.363133][T12701] device bridge_slave_1 left promiscuous mode [ 1238.370097][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.388295][T12701] device bridge_slave_0 left promiscuous mode [ 1238.395210][T12701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.760497][T12693] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1238.808679][ T26] audit: type=1800 audit(2000525623.727:188): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1552" name="file1" dev="loop3" ino=1048673 res=0 errno=0 [ 1238.832562][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.832562][T12692] loop3: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1238.882520][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.882520][T12692] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1238.899394][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.899394][T12692] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1238.913749][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.913749][T12692] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1238.927614][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.927614][T12692] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1238.941172][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.941172][T12692] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1238.954723][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.954723][T12692] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1238.968294][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.968294][T12692] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1238.982026][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.982026][T12692] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1238.995584][T12692] syz.3.1552: attempt to access beyond end of device [ 1238.995584][T12692] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1239.168791][ T26] audit: type=1326 audit(2000525624.057:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.7.1555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec9bd9de99 code=0x0 [ 1239.577288][T12714] db_root: cannot be changed because it's in use [ 1239.592322][T12714] se_device not configured yet, cannot port link [ 1240.401160][T12699] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1555'. [ 1242.682944][T12729] block device autoloading is deprecated and will be removed. [ 1243.245246][T12725] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1243.818027][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.965613][T12740] netlink: 'syz.2.1562': attribute type 13 has an invalid length. [ 1244.018279][T12739] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1244.095655][T12743] db_root: cannot be changed because it's in use [ 1244.151773][T12745] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1244.171890][T12740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1244.284920][T12740] infiniband syz2: set active [ 1244.332778][T12740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1245.417690][T12740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1247.042870][T10799] batadv0 speed is unknown, defaulting to 1000 [ 1247.709401][T12772] input: syz0 as /devices/virtual/input/input18 [ 1248.043059][T12776] loop6: detected capacity change from 0 to 8192 [ 1249.361734][T12785] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1249.372137][T12785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1250.245798][ T4284] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 1250.416832][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1573'. [ 1250.426063][T12792] device bridge_slave_1 left promiscuous mode [ 1250.432851][T12792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.446082][T12792] device bridge_slave_0 left promiscuous mode [ 1250.453296][T12792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.195353][T12795] db_root: cannot be changed because it's in use [ 1253.436006][T12811] futex_wake_op: syz.7.1578 tries to shift op by 144; fix this program [ 1253.454155][T12811] loop7: detected capacity change from 0 to 256 [ 1254.788669][T12811] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1254.857140][ T26] audit: type=1800 audit(2000525639.777:190): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1578" name="file1" dev="loop7" ino=1048674 res=0 errno=0 [ 1254.891204][T12809] bio_check_eod: 1172 callbacks suppressed [ 1254.891225][T12809] syz.7.1578: attempt to access beyond end of device [ 1254.891225][T12809] loop7: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1254.956607][T12809] syz.7.1578: attempt to access beyond end of device [ 1254.956607][T12809] loop7: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1254.972007][T12809] syz.7.1578: attempt to access beyond end of device [ 1254.972007][T12809] loop7: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1254.986115][T12809] syz.7.1578: attempt to access beyond end of device [ 1254.986115][T12809] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1255.000146][T12809] syz.7.1578: attempt to access beyond end of device [ 1255.000146][T12809] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1255.013908][T12809] syz.7.1578: attempt to access beyond end of device [ 1255.013908][T12809] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1255.027382][T12809] syz.7.1578: attempt to access beyond end of device [ 1255.027382][T12809] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1255.040928][T12809] syz.7.1578: attempt to access beyond end of device [ 1255.040928][T12809] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1255.055065][T12809] syz.7.1578: attempt to access beyond end of device [ 1255.055065][T12809] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1255.068619][T12809] syz.7.1578: attempt to access beyond end of device [ 1255.068619][T12809] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1255.869964][T10808] Process accounting resumed [ 1257.366300][T12830] loop3: detected capacity change from 0 to 8192 [ 1258.800542][T12839] db_root: cannot be changed because it's in use [ 1258.821166][T12835] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1263.592724][T12875] loop7: detected capacity change from 0 to 8192 [ 1264.318845][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1597'. [ 1266.502565][T12896] db_root: cannot be changed because it's in use [ 1266.771400][T12906] futex_wake_op: syz.6.1593 tries to shift op by 144; fix this program [ 1266.811365][T12906] loop6: detected capacity change from 0 to 256 [ 1268.255522][T12906] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1269.206239][ T26] audit: type=1800 audit(2000525653.997:191): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1593" name="file1" dev="loop6" ino=1048675 res=0 errno=0 [ 1269.298148][T12914] bio_check_eod: 1095 callbacks suppressed [ 1269.298172][T12914] syz.6.1593: attempt to access beyond end of device [ 1269.298172][T12914] loop6: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1269.338715][T12915] db_root: cannot be changed because it's in use [ 1269.381504][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.381504][T12903] loop6: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1269.397745][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.397745][T12903] loop6: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1269.411826][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.411826][T12903] loop6: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1269.425632][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.425632][T12903] loop6: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1269.439303][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.439303][T12903] loop6: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1269.452658][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.452658][T12903] loop6: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1269.466213][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.466213][T12903] loop6: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1269.479550][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.479550][T12903] loop6: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1269.493589][T12903] syz.6.1593: attempt to access beyond end of device [ 1269.493589][T12903] loop6: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1269.785287][T12915] se_device not configured yet, cannot port link [ 1271.352272][T12946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1608'. [ 1271.661433][T12946] loop3: detected capacity change from 0 to 8192 [ 1273.581045][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 1273.591033][T12956] device bridge_slave_1 left promiscuous mode [ 1273.598242][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.703858][T12956] device bridge_slave_0 left promiscuous mode [ 1273.710874][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.146151][ T26] audit: type=1326 audit(2000525659.067:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.7.1613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec9bd9de99 code=0x0 [ 1274.505315][T12970] netdevsim netdevsim2 netdevsim0: Caught tx_queue_len zero misconfig [ 1275.554146][T12988] db_root: cannot be changed because it's in use [ 1275.637824][T12988] se_device not configured yet, cannot port link [ 1275.666220][T12970] device batadv_slave_0 entered promiscuous mode [ 1275.738941][T12970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1614'. [ 1275.788733][T12970] device netdevsim0 entered promiscuous mode [ 1280.581987][T12972] device batadv_slave_0 left promiscuous mode [ 1284.708825][T13046] futex_wake_op: syz.2.1626 tries to shift op by 144; fix this program [ 1284.740773][T13047] db_root: cannot be changed because it's in use [ 1284.822659][T13047] se_device not configured yet, cannot port link [ 1284.868496][ T26] audit: type=1326 audit(2000525669.787:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.8.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82bfb9de99 code=0x0 [ 1285.314590][T13062] db_root: cannot be changed because it's in use [ 1285.381142][T13062] se_device not configured yet, cannot port link [ 1291.710651][ T27] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1293.098835][T13115] binfmt_misc: register: failed to install interpreter file ./file0 [ 1294.011078][ T27] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1294.214182][ T27] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1294.456100][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.695709][ T27] usb 3-1: Product: syz [ 1294.794898][ T27] usb 3-1: Manufacturer: syz [ 1294.916647][ T27] usb 3-1: SerialNumber: syz [ 1295.281959][ T27] usb 3-1: config 0 descriptor?? [ 1296.093414][ T27] usb 3-1: can't set config #0, error -71 [ 1296.127034][ T27] usb 3-1: USB disconnect, device number 3 [ 1296.218013][T13120] db_root: cannot be changed because it's in use [ 1296.233256][T13120] se_device not configured yet, cannot port link [ 1304.739807][T13183] db_root: cannot be changed because it's in use [ 1304.782747][T13183] se_device not configured yet, cannot port link [ 1305.256751][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.351178][T13208] capability: warning: `syz.3.1661' uses 32-bit capabilities (legacy support in use) [ 1306.412622][T13206] affs: No valid root block on device nullb0 [ 1307.479861][T13221] Invalid ELF header type: 3 != 1 [ 1307.673439][ T4328] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1308.342858][T13217] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1663'. [ 1309.166205][ T4328] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1309.216191][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.244476][ T4328] usb 4-1: config 0 descriptor?? [ 1309.464620][ T4328] usb 4-1: can't set config #0, error -71 [ 1309.475096][ T4328] usb 4-1: USB disconnect, device number 2 [ 1310.189492][T13242] db_root: cannot be changed because it's in use [ 1310.248292][T13242] se_device not configured yet, cannot port link [ 1311.649891][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 1313.546627][ T26] audit: type=1326 audit(2000525698.227:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1313.643354][ T26] audit: type=1326 audit(2000525698.227:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1313.667677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.073593][ T26] audit: type=1326 audit(2000525698.227:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1314.097934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.299901][ T26] audit: type=1326 audit(2000525698.227:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1314.359156][ T26] audit: type=1326 audit(2000525698.227:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1314.383501][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.435338][ T26] audit: type=1326 audit(2000525698.227:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1314.575540][ T26] audit: type=1326 audit(2000525698.227:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1314.799805][T13280] input: syz1 as /devices/virtual/input/input19 [ 1314.877511][T13292] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1687'. [ 1315.805853][ T4284] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 1317.315110][ T26] audit: type=1326 audit(2000525698.227:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1317.384818][ T26] audit: type=1326 audit(2000525698.227:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1317.434597][ T26] audit: type=1326 audit(2000525698.227:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec1b9de99 code=0x7ffc0000 [ 1318.301959][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1679'. [ 1318.313030][T13305] device syz_tun left promiscuous mode [ 1318.318775][T13305] bridge0: port 3(syz_tun) entered disabled state [ 1318.357004][T13305] device bridge_slave_1 left promiscuous mode [ 1318.363675][T13305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.372666][T13305] device bridge_slave_0 left promiscuous mode [ 1318.378937][T13305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.492646][T13312] db_root: cannot be changed because it's in use [ 1318.593326][T13312] se_device not configured yet, cannot port link [ 1318.776022][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 1320.055708][ T3933] device veth1_vlan left promiscuous mode [ 1321.072303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1327.926103][T13379] input: syz1 as /devices/virtual/input/input21 [ 1328.063057][ T4284] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 1333.908580][T13415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1705'. [ 1336.487835][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 1336.513306][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1336.523141][ T4284] CPU: 1 PID: 4284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1336.530747][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1336.541069][ T4284] Workqueue: hci2 hci_rx_work [ 1336.545910][ T4284] Call Trace: [ 1336.549237][ T4284] [ 1336.552213][ T4284] dump_stack_lvl+0x188/0x24e [ 1336.556986][ T4284] ? show_regs_print_info+0x12/0x12 [ 1336.562251][ T4284] ? load_image+0x410/0x410 [ 1336.567126][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 1336.572347][ T4284] ? __lock_acquire+0x7c40/0x7c40 [ 1336.577445][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 1336.582198][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 1336.587458][ T4284] kobject_add_internal+0x617/0xca0 [ 1336.592894][ T4284] kobject_add+0x160/0x230 [ 1336.597361][ T4284] ? kobject_init+0x1c0/0x1c0 [ 1336.602084][ T4284] ? __raw_spin_lock_init+0x41/0x100 [ 1336.607413][ T4284] ? klist_children_get+0x50/0x50 [ 1336.612486][ T4284] ? get_device_parent+0x121/0x3e0 [ 1336.617734][ T4284] device_add+0x470/0x1050 [ 1336.622176][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 1336.627141][ T4284] le_conn_complete_evt+0xfac/0x15c0 [ 1336.633947][ T4284] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1336.640388][ T4284] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1336.646101][ T4284] ? mutex_unlock+0x10/0x10 [ 1336.650724][ T4284] ? skb_pull_data+0xec/0x1f0 [ 1336.655649][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 1336.662936][ T4284] ? hci_remote_host_features_evt+0x230/0x230 [ 1336.669086][ T4284] hci_event_packet+0x7b3/0x1290 [ 1336.674097][ T4284] ? __lock_acquire+0x7c40/0x7c40 [ 1336.679183][ T4284] ? bis_list+0x280/0x280 [ 1336.683561][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1336.689580][ T4284] ? kcov_remote_start+0x4b0/0x7e0 [ 1336.694811][ T4284] ? do_machine_check+0x380/0x750 [ 1336.699960][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 1336.705234][ T4284] hci_rx_work+0x3eb/0xd40 [ 1336.709773][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 1336.714668][ T4284] ? process_one_work+0x7b4/0x1160 [ 1336.719819][ T4284] process_one_work+0x8ab/0x1160 [ 1336.724825][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 1336.730503][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1336.735575][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1336.741239][ T4284] ? wq_worker_running+0x97/0x190 [ 1336.746315][ T4284] worker_thread+0xaf5/0x12a0 [ 1336.751036][ T4284] kthread+0x29d/0x330 [ 1336.755120][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 1336.760196][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 1336.764829][ T4284] ret_from_fork+0x1f/0x30 [ 1336.769307][ T4284] [ 1336.780159][ T4284] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1336.793745][ T4284] Bluetooth: hci2: failed to register connection device [ 1336.914264][ T53] block nbd3: Attempted send on invalid socket [ 1336.920706][ T53] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1336.953603][T13422] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 1338.554007][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1713'. [ 1339.822327][T13465] db_root: cannot be changed because it's in use [ 1339.860655][T13465] se_device not configured yet, cannot port link [ 1346.168492][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1728'. [ 1347.017944][T13525] input: syz0 as /devices/virtual/input/input22 [ 1348.292211][ T4454] nci: nci_rsp_packet: unknown rsp opcode 0xc06 [ 1349.115033][T13528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1357.265792][T13584] loop6: detected capacity change from 0 to 2048 [ 1357.438771][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1743'. [ 1359.493367][T13584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1360.485318][T13594] Process accounting resumed [ 1360.541998][T13598] db_root: cannot be changed because it's in use [ 1360.552291][T13598] se_device not configured yet, cannot port link [ 1363.499777][T10801] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1364.248374][T10801] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.284856][T10801] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1366.707313][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.787934][T10801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.137911][T13119] Process accounting resumed [ 1368.206056][T10801] usb 7-1: Product: syz [ 1368.210384][T10801] usb 7-1: Manufacturer: syz [ 1368.215039][T10801] usb 7-1: SerialNumber: syz [ 1368.221729][T10801] usb 7-1: config 0 descriptor?? [ 1368.236851][T10801] usb 7-1: can't set config #0, error -71 [ 1368.243937][T10801] usb 7-1: USB disconnect, device number 2 [ 1368.392833][T13644] db_root: cannot be changed because it's in use [ 1368.516766][T13644] se_device not configured yet, cannot port link [ 1369.325100][T13645] Process accounting resumed [ 1370.091478][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1370.102434][ T4284] CPU: 1 PID: 4284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1370.110035][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1370.120145][ T4284] Workqueue: hci0 hci_rx_work [ 1370.124895][ T4284] Call Trace: [ 1370.128222][ T4284] [ 1370.131211][ T4284] dump_stack_lvl+0x188/0x24e [ 1370.135972][ T4284] ? show_regs_print_info+0x12/0x12 [ 1370.141223][ T4284] ? load_image+0x410/0x410 [ 1370.146510][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 1370.151725][ T4284] ? __lock_acquire+0x7c40/0x7c40 [ 1370.156958][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 1370.161800][ T4284] ? mark_lock+0x94/0x320 [ 1370.166220][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 1370.171561][ T4284] kobject_add_internal+0x617/0xca0 [ 1370.176880][ T4284] kobject_add+0x160/0x230 [ 1370.181398][ T4284] ? kobject_init+0x1c0/0x1c0 [ 1370.186218][ T4284] ? get_device_parent+0x121/0x3e0 [ 1370.191425][ T4284] device_add+0x470/0x1050 [ 1370.195919][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 1370.200925][ T4284] le_conn_complete_evt+0xfac/0x15c0 [ 1370.206285][ T4284] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1370.212624][ T4284] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1370.218366][ T4284] ? lockdep_hardirqs_on+0x94/0x140 [ 1370.223634][ T4284] ? skb_pull_data+0xec/0x1f0 [ 1370.228381][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 1370.234009][ T4284] ? hci_remote_host_features_evt+0x230/0x230 [ 1370.240152][ T4284] hci_event_packet+0x7b3/0x1290 [ 1370.245176][ T4284] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1370.250877][ T4284] ? bis_list+0x280/0x280 [ 1370.255285][ T4284] ? kcov_remote_start+0x1b1/0x7e0 [ 1370.260488][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 1370.265803][ T4284] hci_rx_work+0x3eb/0xd40 [ 1370.270324][ T4284] ? process_one_work+0x7b4/0x1160 [ 1370.275516][ T4284] process_one_work+0x8ab/0x1160 [ 1370.280536][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 1370.286247][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1370.291331][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1370.296940][ T4284] ? wq_worker_running+0x97/0x190 [ 1370.302068][ T4284] worker_thread+0xaf5/0x12a0 [ 1370.306842][ T4284] kthread+0x29d/0x330 [ 1370.310988][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 1370.316063][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 1370.320763][ T4284] ret_from_fork+0x1f/0x30 [ 1370.325253][ T4284] [ 1370.346407][ T4284] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1370.361434][ T4284] Bluetooth: hci0: failed to register connection device [ 1372.330958][T13681] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1373.278488][T13685] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1374.806294][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 1374.806315][ T26] audit: type=1800 audit(2000525759.727:252): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1779" name="bus" dev="ramfs" ino=67197 res=0 errno=0 [ 1375.617280][T13707] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1770'. [ 1376.230758][T13713] db_root: cannot be changed because it's in use [ 1376.284198][T13713] se_device not configured yet, cannot port link [ 1376.800748][T13717] program syz.3.1772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1376.849743][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 1376.921997][T13717] netlink: 'syz.3.1772': attribute type 4 has an invalid length. [ 1376.935802][T13717] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1772'. [ 1382.292415][T13744] loop7: detected capacity change from 0 to 1024 [ 1382.350828][T13744] EXT4-fs: Ignoring removed oldalloc option [ 1382.356833][T13744] EXT4-fs: Ignoring removed oldalloc option [ 1382.496684][T13744] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1383.282048][ T49] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 1383.599864][T13766] db_root: cannot be changed because it's in use [ 1383.611247][T13766] se_device not configured yet, cannot port link [ 1383.622961][T13772] loop6: detected capacity change from 0 to 128 [ 1383.968340][ T5821] EXT4-fs (loop7): unmounting filesystem. [ 1383.976672][T13777] loop6: detected capacity change from 0 to 256 [ 1384.060301][T13777] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1384.135044][T13777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1384.190883][ T49] Bluetooth: hci5: unexpected cc 0x204b length: 9 > 3 [ 1384.482870][T13119] Process accounting resumed [ 1384.598847][T13794] loop6: detected capacity change from 0 to 512 [ 1384.666973][T13794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1384.675365][ T49] Bluetooth: min 8 > max 2 [ 1384.690432][T13794] System zones: 1-12 [ 1384.755926][T13794] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1794: missing EA_INODE flag [ 1384.841755][T13794] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1794: error while reading EA inode 12 err=-117 [ 1384.895318][T13794] EXT4-fs (loop6): 1 orphan inode deleted [ 1384.939862][T13794] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1386.507624][ T6020] EXT4-fs (loop6): unmounting filesystem. [ 1386.689809][ T49] Bluetooth: hci2: command 0x2021 tx timeout [ 1386.825062][T10807] Process accounting resumed [ 1386.909822][T13119] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1386.948073][ T7669] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1387.112187][T13119] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1387.128666][T13119] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 1387.151482][ T7669] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1387.172656][T13119] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1387.196274][ T7669] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1387.216737][T13119] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1387.242289][ T7669] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1387.273953][T13119] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1387.284348][ T7669] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.299955][T13119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.313260][ T7669] usb 7-1: Product: syz [ 1387.317596][ T7669] usb 7-1: Manufacturer: syz [ 1387.327711][T13119] usb 4-1: Product: syz [ 1387.336960][ T7669] usb 7-1: SerialNumber: syz [ 1387.343012][T13119] usb 4-1: Manufacturer: syz [ 1387.351271][T13843] db_root: cannot be changed because it's in use [ 1387.362073][T13119] usb 4-1: SerialNumber: syz [ 1387.384407][ T7669] rtl8150 7-1:1.0: couldn't find required endpoints [ 1387.414918][T13829] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1387.456215][ T7669] rtl8150: probe of 7-1:1.0 failed with error -5 [ 1387.463931][T13843] se_device not configured yet, cannot port link [ 1387.627659][ T7669] usb 7-1: USB disconnect, device number 3 [ 1387.682339][T13119] usb 4-1: USB disconnect, device number 3 [ 1387.839693][T10801] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1388.039913][T10801] usb 3-1: Using ep0 maxpacket: 32 [ 1388.047768][T10801] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1388.066290][T10801] usb 3-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 1388.089745][T10801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.097853][T10801] usb 3-1: Product: syz [ 1388.119700][T10801] usb 3-1: Manufacturer: syz [ 1388.124385][T10801] usb 3-1: SerialNumber: syz [ 1388.148989][T10801] usb 3-1: config 0 descriptor?? [ 1388.398932][T10801] usb 3-1: USB disconnect, device number 4 [ 1388.586260][T13119] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1388.781698][T13119] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.809962][T13119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1388.841654][T13119] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1388.880608][T13119] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1388.900251][T13119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.958246][T13119] usb 4-1: config 0 descriptor?? [ 1389.000932][T10801] Process accounting resumed [ 1389.186064][T13119] ath6kl: Failed to submit usb control message: -71 [ 1389.200350][T13119] ath6kl: unable to send the bmi data to the device: -71 [ 1389.207740][T13119] ath6kl: Unable to send get target info: -71 [ 1389.218374][T13119] ath6kl: Failed to init ath6kl core: -71 [ 1389.282248][T13119] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 1389.309179][T13119] usb 4-1: USB disconnect, device number 4 [ 1389.574320][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1389.584664][ T4284] CPU: 1 PID: 4284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1389.592302][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1389.602394][ T4284] Workqueue: hci1 hci_rx_work [ 1389.607152][ T4284] Call Trace: [ 1389.610503][ T4284] [ 1389.613493][ T4284] dump_stack_lvl+0x188/0x24e [ 1389.618213][ T4284] ? show_regs_print_info+0x12/0x12 [ 1389.623501][ T4284] ? load_image+0x410/0x410 [ 1389.628105][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 1389.633262][ T4284] ? __lock_acquire+0x7c40/0x7c40 [ 1389.638318][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 1389.643032][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 1389.648270][ T4284] kobject_add_internal+0x617/0xca0 [ 1389.653509][ T4284] kobject_add+0x160/0x230 [ 1389.657958][ T4284] ? kobject_init+0x1c0/0x1c0 [ 1389.662690][ T4284] ? __raw_spin_lock_init+0x41/0x100 [ 1389.668000][ T4284] ? klist_children_get+0x50/0x50 [ 1389.673063][ T4284] ? get_device_parent+0x121/0x3e0 [ 1389.678213][ T4284] device_add+0x470/0x1050 [ 1389.682679][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 1389.687656][ T4284] le_conn_complete_evt+0xfac/0x15c0 [ 1389.692981][ T4284] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1389.699260][ T4284] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1389.704952][ T4284] ? mutex_unlock+0x10/0x10 [ 1389.709507][ T4284] ? skb_pull_data+0xec/0x1f0 [ 1389.714270][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 1389.719898][ T4284] ? hci_remote_host_features_evt+0x230/0x230 [ 1389.725997][ T4284] hci_event_packet+0x7b3/0x1290 [ 1389.731012][ T4284] ? __lock_acquire+0x7c40/0x7c40 [ 1389.736136][ T4284] ? bis_list+0x280/0x280 [ 1389.740608][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1389.746885][ T4284] ? kcov_remote_start+0x4b0/0x7e0 [ 1389.752082][ T4284] ? do_machine_check+0x380/0x750 [ 1389.757181][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 1389.762426][ T4284] hci_rx_work+0x3eb/0xd40 [ 1389.766876][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 1389.771783][ T4284] ? process_one_work+0x7b4/0x1160 [ 1389.776964][ T4284] process_one_work+0x8ab/0x1160 [ 1389.781961][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 1389.787635][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1389.792711][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1389.798289][ T4284] ? wq_worker_running+0x97/0x190 [ 1389.803354][ T4284] worker_thread+0xaf5/0x12a0 [ 1389.808346][ T4284] kthread+0x29d/0x330 [ 1389.812443][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 1389.817500][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 1389.822120][ T4284] ret_from_fork+0x1f/0x30 [ 1389.826594][ T4284] [ 1389.879788][ T4284] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1389.893768][ T4284] Bluetooth: hci1: failed to register connection device [ 1390.592942][T13900] batman_adv: batadv0: Adding interface: dummy0 [ 1390.600285][T13900] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.627089][T13900] batman_adv: batadv0: Interface activated: dummy0 [ 1390.665607][T13900] batadv0: mtu less than device minimum [ 1390.692163][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.705863][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.718669][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.731761][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.744473][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.757149][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.770022][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.782677][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.795370][T13900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1391.403894][ T4284] Bluetooth: hci5: Unexpected cc 0x0000 with no status [ 1391.421229][T13922] loop6: detected capacity change from 0 to 8 [ 1391.504973][T13922] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1391.529707][T13922] SQUASHFS error: Failed to read block 0x91: -5 [ 1391.546430][T13922] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1391.579734][T13922] SQUASHFS error: Unable to read inode 0x11f [ 1392.297402][ T4284] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 1392.628501][T13924] loop7: detected capacity change from 0 to 32768 [ 1392.676360][T13924] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1834 (13924) [ 1392.912029][T13950] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1393.054945][T13924] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1393.420492][T13924] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1393.429447][T13924] BTRFS info (device loop7): force clearing of disk cache [ 1393.584171][T13924] BTRFS info (device loop7): setting nodatacow, compression disabled [ 1393.592844][T13924] BTRFS info (device loop7): turning off barriers [ 1393.600619][T13924] BTRFS info (device loop7): disabling free space tree [ 1393.608040][T13924] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1393.665575][T13924] BTRFS info (device loop7): trying to use backup root at mount time [ 1393.913078][T13980] db_root: cannot be changed because it's in use [ 1393.926080][T13980] se_device not configured yet, cannot port link [ 1393.948297][T12655] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 1394.021248][T13924] BTRFS warning (device loop7): couldn't read tree root [ 1394.039853][T13924] BTRFS warning (device loop7): try to load backup roots slot 1 [ 1394.058666][T12655] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 1394.093041][T13924] BTRFS warning (device loop7): couldn't read tree root [ 1394.119673][T13924] BTRFS warning (device loop7): try to load backup roots slot 2 [ 1394.150125][T13924] BTRFS error (device loop7): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 1394.210935][T13924] BTRFS warning (device loop7): couldn't read tree root [ 1394.247711][T13924] BTRFS warning (device loop7): try to load backup roots slot 3 [ 1394.407636][T13924] BTRFS info (device loop7): enabling ssd optimizations [ 1394.675807][T13924] BTRFS info (device loop7): rebuilding free space tree [ 1395.129814][T10808] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1395.317116][T13924] BTRFS info (device loop7): disabling free space tree [ 1395.330254][T13924] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1395.359099][T13924] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1395.387343][T10808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1395.410926][T10808] usb 4-1: not running at top speed; connect to a high speed hub [ 1395.435837][T10808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.449853][T10808] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4 [ 1395.463380][T10808] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1395.489481][T10808] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1395.519827][T10808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.544559][T10808] usb 4-1: Product: syz [ 1395.563349][T10808] usb 4-1: Manufacturer: syz [ 1395.568040][T10808] usb 4-1: SerialNumber: syz [ 1395.572933][ T4284] Bluetooth: hci0: command 0x201b tx timeout [ 1395.672368][ T5821] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1395.787928][ T49] Bluetooth: hci0: unexpected event for opcode 0x201c [ 1395.867509][T10808] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1395.882046][T10808] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1396.056568][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1396.315742][ T49] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 1396.695103][T14028] db_root: cannot be changed because it's in use [ 1396.755394][T14028] se_device not configured yet, cannot port link [ 1397.298377][T10808] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 1397.384525][T10808] usb 4-1: USB disconnect, device number 5 [ 1397.543143][T13576] udevd[13576]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1398.569852][T10801] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1398.661543][T14024] Process accounting resumed [ 1398.930817][T10801] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.456229][T10801] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1399.467309][T10801] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1399.485837][T10801] usb 7-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 1399.495328][T10801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.503688][T10801] usb 7-1: Product: syz [ 1399.507939][T10801] usb 7-1: Manufacturer: syz [ 1399.512693][T10801] usb 7-1: SerialNumber: syz [ 1399.525729][T14051] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1401.494174][T14079] loop7: detected capacity change from 0 to 8 [ 1401.505906][T14079] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1401.524622][T14079] SQUASHFS error: Failed to read block 0x9b: -5 [ 1401.534117][T14079] SQUASHFS error: Unable to read metadata cache entry [99] [ 1401.620710][T10801] usb 7-1: MIDIStreaming interface descriptor not found [ 1401.621012][T14079] SQUASHFS error: Unable to read inode 0x127 [ 1401.807823][ T49] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 1401.947876][T10801] usb 7-1: USB disconnect, device number 4 [ 1402.019767][ T7669] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1402.229982][ T7669] usb 4-1: Using ep0 maxpacket: 16 [ 1402.320920][ T7669] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1402.346987][ T7669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.395263][ T7669] usb 4-1: Product: syz [ 1402.423250][ T7669] usb 4-1: Manufacturer: syz [ 1402.447250][ T7669] usb 4-1: SerialNumber: syz [ 1402.496456][ T7669] usb 4-1: config 0 descriptor?? [ 1402.559396][ T7669] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1402.672167][ T7669] usb 4-1: Detected FT-X [ 1402.774369][ T7669] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1402.784729][ T7669] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1402.797465][ T7669] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1402.829363][ T7669] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1402.881023][ T7669] usb 4-1: USB disconnect, device number 6 [ 1402.899282][ T7669] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1402.913745][ T7669] ftdi_sio 4-1:0.0: device disconnected [ 1403.065497][T13868] udevd[13868]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.120193][ T49] Bluetooth: hci2: unexpected event for opcode 0x200a [ 1403.349034][T10801] Process accounting resumed [ 1404.748687][ T49] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 1404.825445][ T49] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 1404.928280][ T49] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1405.809926][ T49] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1405.826608][ T49] Bluetooth: hci0: Injecting HCI hardware error event [ 1405.840454][ T4284] Bluetooth: hci0: hardware error 0x00 [ 1406.484539][T14163] net_ratelimit: 10 callbacks suppressed [ 1406.484666][T14163] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1406.634247][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 1407.843699][ T49] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 1407.972018][ T4284] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1409.075032][T10806] Process accounting resumed [ 1410.169637][T14208] Process accounting resumed [ 1410.365625][T14226] loop6: detected capacity change from 0 to 128 [ 1410.449368][T14226] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1410.545760][T14226] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.706455][T14238] overlayfs: failed to clone lowerpath [ 1410.845159][ T6020] EXT4-fs (loop6): unmounting filesystem. [ 1411.572058][T14254] Process accounting resumed [ 1411.869968][ T4284] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 1413.069811][T10801] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1413.265360][T10801] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1413.303207][T10801] usb 7-1: config 3 has an invalid interface number: 106 but max is 0 [ 1413.367283][T10801] usb 7-1: config 3 has no interface number 0 [ 1413.401523][T10801] usb 7-1: config 3 interface 106 has no altsetting 0 [ 1413.432465][T10801] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=91.2c [ 1413.495117][T10801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.533207][T10801] usb 7-1: Product: syz [ 1413.552365][T10801] usb 7-1: Manufacturer: syz [ 1413.557388][T10801] usb 7-1: SerialNumber: syz [ 1414.053623][T10801] adutux 7-1:3.106: interrupt endpoints not found [ 1414.087138][T10801] usbhid 7-1:3.106: couldn't find an input interrupt endpoint [ 1414.146630][T10801] usb 7-1: USB disconnect, device number 5 [ 1414.347015][T14298] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1415.762474][T14326] db_root: cannot be changed because it's in use [ 1415.788593][T14326] se_device not configured yet, cannot port link [ 1415.979852][ T7669] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1416.190177][ T7669] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1416.306960][ T7669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.461680][ T7669] usb 3-1: Product: syz [ 1416.520234][ T7669] usb 3-1: Manufacturer: syz [ 1416.598433][ T7669] usb 3-1: SerialNumber: syz [ 1417.086936][ T7669] usb 3-1: unit 8 not found! [ 1417.135759][ T7669] usb 3-1: unit 6 not found! [ 1417.195584][ T7669] usb 3-1: unit 199 not found! [ 1417.219702][ T7669] usb 3-1: unit 208 not found! [ 1417.305191][ T7669] usb 3-1: USB disconnect, device number 5 [ 1417.912347][T14361] overlayfs: failed to clone lowerpath [ 1418.226413][ T4284] Bluetooth: hci5: unknown advertising packet type: 0xff [ 1418.655925][T14378] db_root: cannot be changed because it's in use [ 1418.762719][T14378] se_device not configured yet, cannot port link [ 1420.456116][T14409] Process accounting resumed [ 1422.754362][T14431] loop7: detected capacity change from 0 to 32768 [ 1422.837663][T14431] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1422.874966][T14431] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1422.892263][T14431] BTRFS info (device loop7): using free space tree [ 1423.179796][T14431] BTRFS info (device loop7): enabling ssd optimizations [ 1423.237816][T14482] db_root: cannot be changed because it's in use [ 1423.259053][T14482] se_device not configured yet, cannot port link [ 1423.453588][T14485] db_root: cannot be changed because it's in use [ 1423.502541][ T5821] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1423.514583][T14485] se_device not configured yet, cannot port link [ 1425.611691][T14525] db_root: cannot be changed because it's in use [ 1425.643970][T14525] se_device not configured yet, cannot port link [ 1425.723245][T14529] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1426.448894][T14548] loop7: detected capacity change from 0 to 8192 [ 1426.512948][T14548] loop7: p1 < > p2 < p5 > p3 p4 [ 1426.590222][T14548] loop7: p3 start 83890176 is beyond EOD, truncated [ 1426.753824][T14548] loop7: p4 size 16776960 extends beyond EOD, truncated [ 1427.135079][T14548] loop7: p5 size 16776960 extends beyond EOD, truncated [ 1428.135430][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.853717][T14009] udevd[14009]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 1428.866662][T13624] udevd[13624]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1428.879453][T14090] udevd[14090]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1428.918708][T13848] udevd[13848]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1429.563679][T14601] x_tables: duplicate entry at hook 2 [ 1430.209098][T14625] netlink: 'syz.7.2028': attribute type 15 has an invalid length. [ 1430.276562][T14625] netlink: 'syz.7.2028': attribute type 7 has an invalid length. [ 1430.304418][T14625] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2028'. [ 1430.488922][T14636] comedi comedi0: s526: I/O port conflict (0x2,64) [ 1431.577976][T14643] Process accounting resumed [ 1434.033451][T14685] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 1434.205203][T14682] Process accounting resumed [ 1434.280609][T14691] db_root: cannot be changed because it's in use [ 1434.311507][T14691] se_device not configured yet, cannot port link [ 1435.241113][T14729] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2062'. [ 1435.329676][T14729] loop7: detected capacity change from 0 to 8192 [ 1436.200409][T14744] db_root: cannot be changed because it's in use [ 1436.274134][T14744] se_device not configured yet, cannot port link [ 1436.743901][T14503] Process accounting resumed [ 1437.955486][T14774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2078'. [ 1438.032623][T14774] loop6: detected capacity change from 0 to 8192 [ 1439.157061][T14750] loop7: detected capacity change from 0 to 32768 [ 1439.195861][T14750] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2072 (14750) [ 1439.456292][T14750] BTRFS error (device loop7): open_ctree failed: -4 [ 1439.825252][T14799] db_root: cannot be changed because it's in use [ 1439.844592][T14090] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by udevd (14090) [ 1439.863403][T14799] se_device not configured yet, cannot port link [ 1439.881269][T14803] IPv6: NLM_F_CREATE should be specified when creating new route [ 1439.919322][T14804] device team0 entered promiscuous mode [ 1439.940705][T14804] device team_slave_0 entered promiscuous mode [ 1439.970133][T14804] device team_slave_1 entered promiscuous mode [ 1440.340225][T14815] device wg1 entered promiscuous mode [ 1440.447299][T14817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2090'. [ 1441.589729][T14503] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1441.864329][T14503] usb 7-1: Using ep0 maxpacket: 16 [ 1441.902025][T14503] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 1442.147829][T14503] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1442.379417][T14503] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.585112][T14503] usb 7-1: Product: syz [ 1442.698303][T14503] usb 7-1: Manufacturer: syz [ 1442.808835][T14503] usb 7-1: SerialNumber: syz [ 1443.109154][T14503] r8152-cfgselector 7-1: config 0 descriptor?? [ 1444.242569][T14503] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1444.295134][T14503] r8152-cfgselector 7-1: USB disconnect, device number 6 [ 1445.132412][T14851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1445.140766][T14851] IPv6: NLM_F_CREATE should be set when creating new route [ 1445.218096][T14857] db_root: cannot be changed because it's in use [ 1445.327599][T14857] se_device not configured yet, cannot port link [ 1445.734277][T14877] device vlan0 entered promiscuous mode [ 1445.755045][T14878] loop7: detected capacity change from 0 to 164 [ 1445.869493][T14878] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1445.932980][T14878] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1445.976113][T14878] bio_check_eod: 3344 callbacks suppressed [ 1445.976144][T14878] syz.7.2109: attempt to access beyond end of device [ 1445.976144][T14878] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1446.072070][T14878] syz.7.2109: attempt to access beyond end of device [ 1446.072070][T14878] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1446.120652][ T26] audit: type=1800 audit(2000525831.047:253): pid=14878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2109" name="file0" dev="loop7" ino=1862 res=0 errno=0 [ 1446.349668][ T5522] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1446.413678][T14895] db_root: cannot be changed because it's in use [ 1446.444510][T14895] se_device not configured yet, cannot port link [ 1446.509728][T10808] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1446.540640][ T5522] usb 3-1: Using ep0 maxpacket: 16 [ 1446.548154][ T5522] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1446.582201][ T5522] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1446.599509][ T5522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.649980][ T5522] usb 3-1: Product: syz [ 1446.656265][ T5522] usb 3-1: Manufacturer: syz [ 1446.669900][ T5522] usb 3-1: SerialNumber: syz [ 1446.696683][ T5522] r8152-cfgselector 3-1: config 0 descriptor?? [ 1446.710663][T10808] usb 7-1: Using ep0 maxpacket: 32 [ 1446.726792][T10808] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1446.772764][T10808] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1446.809234][T10808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.828034][T10808] usb 7-1: Product: syz [ 1446.839832][T10808] usb 7-1: Manufacturer: syz [ 1446.844522][T10808] usb 7-1: SerialNumber: syz [ 1447.129817][ T5522] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1447.153743][ T5522] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 1447.312274][T10808] usb 7-1: config 0 descriptor?? [ 1447.317991][T14893] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1447.347219][T14907] loop7: detected capacity change from 0 to 64 [ 1447.370600][T14907] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1447.413155][T10808] hub 7-1:0.0: bad descriptor, ignoring hub [ 1447.419189][T10808] hub: probe of 7-1:0.0 failed with error -5 [ 1447.506332][T10808] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24 [ 1447.727034][ T4703] usb 7-1: USB disconnect, device number 7 [ 1447.733026][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1449.031263][T14932] db_root: cannot be changed because it's in use [ 1449.060789][T14932] se_device not configured yet, cannot port link [ 1450.517735][ T4703] Process accounting resumed [ 1452.393243][T14976] loop6: detected capacity change from 0 to 512 [ 1452.498368][T14979] se_device not configured yet, cannot port link [ 1452.509957][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2146'. [ 1452.555300][T14976] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1452.593313][T14976] ext4 filesystem being mounted at /395/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1453.553189][T14996] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2149'. [ 1453.661617][ T6020] EXT4-fs (loop6): unmounting filesystem. [ 1453.852464][T15003] loop6: detected capacity change from 0 to 1024 [ 1454.063415][T14027] Process accounting resumed [ 1458.479822][T15064] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1458.540429][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1458.977421][T15074] loop6: detected capacity change from 0 to 2048 [ 1459.096146][T15074] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1459.210624][ T26] audit: type=1800 audit(2000525844.137:254): pid=15074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2174" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1459.317034][T15074] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1459.430714][T15074] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 1459.469810][T15074] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1459.469810][T15074] [ 1459.569259][T15074] EXT4-fs (loop6): Total free blocks count 0 [ 1459.609081][T15074] EXT4-fs (loop6): Free/Dirty block details [ 1459.629868][T15074] EXT4-fs (loop6): free_blocks=4096 [ 1459.646384][T15074] EXT4-fs (loop6): dirty_blocks=256 [ 1459.674273][T15074] EXT4-fs (loop6): Block reservation details [ 1459.719837][T15074] EXT4-fs (loop6): i_reserved_data_blocks=16 [ 1459.871386][ T9] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1460.524532][T10806] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1460.722756][ T4284] Bluetooth: hci2: ACL packet too small [ 1460.729637][T10806] usb 3-1: Using ep0 maxpacket: 16 [ 1460.736944][T10806] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1460.764290][T10806] usb 3-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 1460.794444][T10806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.823450][T10806] usb 3-1: config 0 descriptor?? [ 1460.967706][T15109] loop6: detected capacity change from 0 to 32768 [ 1461.139958][ T4703] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1461.250274][T15109] JBD2: Ignoring recovery information on journal [ 1461.295047][T10806] wacom 0003:056A:00BB.0002: unknown main item tag 0x6 [ 1461.322891][T10806] wacom 0003:056A:00BB.0002: ignoring exceeding usage max [ 1461.341589][T10806] wacom 0003:056A:00BB.0002: unbalanced collection at end of report description [ 1461.355746][ T4703] usb 4-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 1461.367705][T10806] wacom 0003:056A:00BB.0002: parse failed [ 1461.373937][ T4703] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1461.381686][T10806] wacom: probe of 0003:056A:00BB.0002 failed with error -22 [ 1461.397951][ T4703] usb 4-1: New USB device found, idVendor=056a, idProduct=0716, bcdDevice= 0.00 [ 1461.434354][ T4703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.482064][ T4703] usb 4-1: config 0 descriptor?? [ 1461.547726][T15109] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1461.563933][T14503] usb 3-1: USB disconnect, device number 7 [ 1461.906716][ T6020] ocfs2: Unmounting device (7,6) on (node local) [ 1461.933102][ T4703] wacom 0003:056A:0716.0003: unknown main item tag 0x1 [ 1461.949659][ T4703] wacom 0003:056A:0716.0003: unknown main item tag 0x5 [ 1461.967041][ T4703] wacom 0003:056A:0716.0003: unknown main item tag 0x6 [ 1462.011114][ T4703] wacom 0003:056A:0716.0003: Unknown device_type for 'HID 056a:0716'. Ignoring. [ 1462.129335][ T4703] usb 4-1: USB disconnect, device number 7 [ 1462.882952][T14027] Process accounting resumed [ 1465.382720][T15170] loop7: detected capacity change from 0 to 40427 [ 1465.467437][T15170] F2FS-fs (loop7): invalid crc value [ 1465.528913][T15170] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1465.799733][T15170] F2FS-fs (loop7): Start checkpoint disabled! [ 1465.902132][T15170] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1466.689185][ T6662] kworker/u4:10: attempt to access beyond end of device [ 1466.689185][ T6662] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1467.158734][T15229] se_device not configured yet, cannot port link [ 1467.805060][T15241] db_root: cannot be changed because it's in use [ 1469.515449][T15270] Process accounting resumed [ 1469.615380][T15278] db_root: cannot be changed because it's in use [ 1470.126095][T10807] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1470.146189][T15292] db_root: cannot be changed because it's in use [ 1470.195862][T15292] se_device not configured yet, cannot port link [ 1470.351705][T10807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.392283][T10807] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.443988][T10807] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1470.497185][T10807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1470.540783][T10807] usb 3-1: SerialNumber: syz [ 1470.932272][T10807] usb 3-1: 0:2 : does not exist [ 1471.503828][T10807] usb 3-1: USB disconnect, device number 8 [ 1471.605570][T15306] Process accounting resumed [ 1471.749082][T13848] udevd[13848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1471.952723][T15321] db_root: cannot be changed because it's in use [ 1472.066499][T15323] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2253'. [ 1472.093962][T15323] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2253'. [ 1472.122880][T15325] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1472.150264][ T4703] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1472.180100][T15326] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2253'. [ 1472.261461][T15332] db_root: cannot be changed because it's in use [ 1472.283017][T15332] se_device not configured yet, cannot port link [ 1472.784672][T15347] overlayfs: failed to clone lowerpath [ 1472.812164][T15347] overlayfs: failed to clone lowerpath [ 1472.849754][T10807] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1472.957725][T15354] db_root: cannot be changed because it's in use [ 1473.051769][T10807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.083549][T10807] usb 7-1: config 0 has no interfaces? [ 1473.102317][T10807] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1473.115184][T10807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.146845][T10807] usb 7-1: config 0 descriptor?? [ 1473.163495][ T4703] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1473.399799][T14503] usb 7-1: USB disconnect, device number 8 [ 1473.545320][ T4703] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1473.739730][ T4703] usb 4-1: Using ep0 maxpacket: 16 [ 1473.747097][ T4703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.765628][ T4703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.776070][ T4703] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1473.797420][ T4703] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1473.820950][ T4703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.853611][ T4703] usb 4-1: config 0 descriptor?? [ 1474.116165][T15373] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2271'. [ 1474.172355][T15379] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2272'. [ 1474.270945][ T4703] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1474.297414][ T4703] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1474.349812][T14503] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1474.474800][ T4703] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 1474.559617][T14503] usb 3-1: Using ep0 maxpacket: 16 [ 1474.786244][ T4703] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1474.926665][ T4703] microsoft 0003:045E:07DA.0004: no inputs found [ 1475.032494][ T4703] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 1475.308502][T14503] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1475.318185][T14503] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.329238][T14503] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1475.341219][T14503] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1475.359588][T14503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.369879][T14503] usb 3-1: Product: syz [ 1475.370439][ T4703] usb 4-1: USB disconnect, device number 8 [ 1475.380106][T14503] usb 3-1: Manufacturer: syz [ 1475.380129][T14503] usb 3-1: SerialNumber: syz [ 1475.629459][T14503] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 1475.676869][T14503] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1475.769669][T14027] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1475.778817][T14503] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1475.846210][T14503] usb 3-1: USB disconnect, device number 9 [ 1475.870807][T14090] udevd[14090]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1475.909448][T15397] fido_id[15397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1475.982188][T14027] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1476.010687][T14027] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.029166][T14027] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1476.050321][T14027] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 1476.069770][ T4703] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1476.071912][T14027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.109273][T14027] usb 7-1: config 0 descriptor?? [ 1476.120558][T15396] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1476.265332][ T4703] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1476.279376][ T4703] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1476.300345][ T4703] usb 4-1: Product: syz [ 1476.304600][ T4703] usb 4-1: Manufacturer: syz [ 1476.309245][ T4703] usb 4-1: SerialNumber: syz [ 1476.350436][ T4703] usb 4-1: config 0 descriptor?? [ 1476.545627][T14027] appleir 0003:05AC:8243.0005: unknown main item tag 0x2 [ 1476.562089][ T4703] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1476.570291][T14027] appleir 0003:05AC:8243.0005: unknown main item tag 0x5 [ 1476.600626][T14027] appleir 0003:05AC:8243.0005: unknown main item tag 0x3 [ 1476.618667][T14027] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 1476.646611][T14027] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 1476.669671][T14027] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 1476.687539][T14027] appleir 0003:05AC:8243.0005: invalid report_count 885399381 [ 1476.695874][T14027] appleir 0003:05AC:8243.0005: item 0 4 1 9 parsing failed [ 1476.718166][T14027] appleir 0003:05AC:8243.0005: parse failed [ 1476.732726][T14027] appleir: probe of 0003:05AC:8243.0005 failed with error -22 [ 1476.765878][ T4703] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1476.767109][T14027] usb 7-1: USB disconnect, device number 9 [ 1476.793228][ T4703] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1476.810794][ T4703] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1476.906772][ T4703] peak_usb: probe of 4-1:0.0 failed with error -8 [ 1477.004969][ T5522] usb 4-1: USB disconnect, device number 9 [ 1477.426553][T10808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1477.611733][T10808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.677038][T10808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.729836][T10808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1477.775206][T10808] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1477.821796][T10808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.874816][T10808] usb 3-1: config 0 descriptor?? [ 1478.002469][T15445] overlayfs: failed to clone lowerpath [ 1478.179725][T14027] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1478.309330][T10808] plantronics 0003:047F:FFFF.0006: unbalanced delimiter at end of report description [ 1478.340457][T10808] plantronics 0003:047F:FFFF.0006: parse failed [ 1478.347126][T10808] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 1478.389896][T14027] usb 7-1: Using ep0 maxpacket: 8 [ 1478.400657][T14027] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.432798][T14027] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1478.472395][T14027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.505819][T14027] usb 7-1: config 0 descriptor?? [ 1478.513309][T10808] usb 3-1: USB disconnect, device number 10 [ 1478.554584][T14027] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1479.216505][T14027] gspca_vc032x: reg_r err -71 [ 1479.275836][T14027] vc032x: probe of 7-1:0.0 failed with error -71 [ 1479.530624][T14027] usb 7-1: USB disconnect, device number 10 [ 1480.757140][T15485] netlink: 'syz.6.2299': attribute type 46 has an invalid length. [ 1481.068080][T15492] netlink: 'syz.6.2305': attribute type 10 has an invalid length. [ 1481.110254][T15492] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2305'. [ 1481.126784][T15492] batman_adv: batadv0: Interface deactivated: dummy0 [ 1481.137393][T15492] batman_adv: batadv0: Removing interface: dummy0 [ 1481.158283][T15492] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1481.170050][T15492] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1481.630381][T15513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2312'. [ 1483.286379][T10808] Process accounting resumed [ 1484.270355][T10808] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1484.462092][T10808] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1484.479641][T10808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.524011][T10808] usb 4-1: config 0 descriptor?? [ 1484.551797][T10808] cp210x 4-1:0.0: cp210x converter detected [ 1484.669669][T10806] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1484.859766][T10806] usb 7-1: Using ep0 maxpacket: 8 [ 1484.872281][T10806] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1484.917570][T10806] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1484.954724][T10808] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1484.974194][T10806] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1485.001982][T10806] usb 7-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00 [ 1485.025658][T10806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.067680][T10806] usb 7-1: config 0 descriptor?? [ 1485.151051][T10808] usb 4-1: USB disconnect, device number 10 [ 1485.195860][T10808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1485.290111][T10808] cp210x 4-1:0.0: device disconnected [ 1485.509065][T10806] hid-generic 0003:FFFF:FFFF.0007: unknown main item tag 0x0 [ 1485.531795][T10806] hid-generic 0003:FFFF:FFFF.0007: unknown main item tag 0x0 [ 1485.559919][T10806] hid-generic 0003:FFFF:FFFF.0007: unknown main item tag 0x0 [ 1485.567435][T10806] hid-generic 0003:FFFF:FFFF.0007: unknown main item tag 0x0 [ 1485.591366][T10806] hid-generic 0003:FFFF:FFFF.0007: unknown main item tag 0x0 [ 1485.599259][T10806] hid-generic 0003:FFFF:FFFF.0007: unknown main item tag 0x0 [ 1485.620406][T10806] hid-generic 0003:FFFF:FFFF.0007: unbalanced collection at end of report description [ 1485.646872][T10806] hid-generic: probe of 0003:FFFF:FFFF.0007 failed with error -22 [ 1485.720235][T10806] usb 7-1: USB disconnect, device number 11 [ 1486.847834][T15579] sp0: Synchronizing with TNC [ 1488.299969][T14502] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1488.500939][T14502] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1488.510339][T14502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.520246][T14502] usb 4-1: Product: syz [ 1488.525225][T14502] usb 4-1: Manufacturer: syz [ 1488.531275][T14502] usb 4-1: SerialNumber: syz [ 1488.549690][T14502] usb 4-1: config 0 descriptor?? [ 1488.569628][T14502] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1489.182851][T14502] gspca_sunplus: reg_w_riv err -71 [ 1489.188497][T14502] sunplus: probe of 4-1:0.0 failed with error -71 [ 1489.228655][T14502] usb 4-1: USB disconnect, device number 11 [ 1489.587808][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.309674][ T5522] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1490.522408][ T5522] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1490.550681][ T5522] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 1490.607500][ T5522] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1490.627419][ T5522] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1490.659211][ T5522] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.691978][T15658] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2355'. [ 1490.708936][ T5522] usb 7-1: config 0 descriptor?? [ 1490.716908][T15644] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1490.926340][T10801] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1490.959889][T14502] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1491.155057][ T5522] logitech-djreceiver 0003:046D:C513.0008: item 0 1 0 8 parsing failed [ 1491.167536][T14502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.180419][T10801] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1491.181438][ T5522] logitech-djreceiver 0003:046D:C513.0008: logi_dj_probe: parse failed [ 1491.199111][T14502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.218892][ T5522] logitech-djreceiver: probe of 0003:046D:C513.0008 failed with error -22 [ 1491.229843][T10801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.238126][T10801] usb 4-1: Product: syz [ 1491.243058][T14502] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1491.277479][T14502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.288447][T10801] usb 4-1: Manufacturer: syz [ 1491.307687][T14502] usb 3-1: config 0 descriptor?? [ 1491.317795][T10801] usb 4-1: SerialNumber: syz [ 1491.348327][T10801] usb 4-1: config 0 descriptor?? [ 1491.388272][T10808] usb 7-1: USB disconnect, device number 12 [ 1491.401898][T10801] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1491.497843][T10801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1491.551046][T10801] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1491.614744][T10801] usb 4-1: media controller created [ 1491.729819][T14502] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 1491.738259][T14502] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1491.784445][T10801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1491.808364][T14502] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 1491.960451][T14502] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1492.152262][T14502] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 1492.206418][T14502] hid-steam 0003:28DE:1142.0009: No HID_FEATURE_REPORT submitted - nothing to read [ 1492.241853][T10801] DVB: Unable to find symbol mt352_attach() [ 1492.324345][T14502] usb 3-1: USB disconnect, device number 11 [ 1492.429996][T15692] fido_id[15692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1492.456007][T14502] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 1492.503752][T10801] DVB: Unable to find symbol nxt6000_attach() [ 1492.516169][T10801] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1492.542947][T10801] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 1492.572345][T10801] dvb-usb: schedule remote query interval to 1000 msecs. [ 1492.586605][T10801] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1492.613520][T10801] dvb-usb: bulk message failed: -22 (7/0) [ 1492.622096][T10801] dvb-usb: bulk message failed: -22 (7/0) [ 1492.642947][T10801] usb 4-1: USB disconnect, device number 12 [ 1492.858811][T10801] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1493.279721][T10801] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1493.325916][T15717] loop6: detected capacity change from 0 to 512 [ 1493.437138][T15717] EXT4-fs: Ignoring removed bh option [ 1493.475017][T15717] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1493.480864][T10801] usb 4-1: Using ep0 maxpacket: 32 [ 1493.494774][T10801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1493.536645][T10801] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1493.616515][T10801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.626450][T15717] EXT4-fs (loop6): 1 truncate cleaned up [ 1493.689781][T15717] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1493.713392][T10801] usb 4-1: config 0 descriptor?? [ 1494.185405][T10801] logitech 0003:046D:C295.000B: unknown main item tag 0x6 [ 1494.204899][T10801] logitech 0003:046D:C295.000B: ignoring exceeding usage max [ 1494.241285][ T6020] EXT4-fs (loop6): unmounting filesystem. [ 1494.263398][T10801] logitech 0003:046D:C295.000B: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 1494.288071][T10801] logitech 0003:046D:C295.000B: no inputs found [ 1494.391720][T10801] usb 4-1: USB disconnect, device number 13 [ 1494.508899][T15743] fido_id[15743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1494.616939][T15747] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2375'. [ 1495.528203][T15754] tipc: Enabling of bearer rejected, failed to enable media [ 1495.741399][T15768] loop6: detected capacity change from 0 to 512 [ 1495.980794][T15768] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1496.172085][ T6020] EXT4-fs (loop6): unmounting filesystem. [ 1496.626242][T14027] Process accounting resumed [ 1497.593703][T15786] Process accounting resumed [ 1497.691372][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2387'. [ 1497.723302][T15794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1498.819658][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2399'. [ 1498.962419][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2399'. [ 1499.779146][T15824] Process accounting resumed [ 1503.054411][T14027] Process accounting resumed [ 1503.482915][T15882] Process accounting resumed [ 1503.509774][T14027] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1503.709813][T14027] usb 7-1: Using ep0 maxpacket: 32 [ 1503.717962][T14027] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.760574][T14027] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.811517][T14027] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1504.019569][T14027] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1504.189329][T14027] usb 7-1: Product: syz [ 1504.243810][T15908] loop7: detected capacity change from 0 to 128 [ 1504.272365][T14027] usb 7-1: Manufacturer: syz [ 1504.688695][T14027] hub 7-1:4.0: USB hub found [ 1504.704858][T15908] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1504.768693][T14027] hub 7-1:4.0: 5 ports detected [ 1504.778175][T15908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1504.821440][T14027] hub 7-1:4.0: insufficient power available to use all downstream ports [ 1505.025850][T14027] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 1505.067934][T14027] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 1505.208196][T14027] usb 7-1: USB disconnect, device number 13 [ 1505.599875][T15917] ip6tnl0: Caught tx_queue_len zero misconfig [ 1507.598227][T15936] Process accounting resumed [ 1508.405828][T15951] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1508.835391][T15961] loop6: detected capacity change from 0 to 128 [ 1508.914673][T15961] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1508.962269][T15961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1509.094914][T15964] db_root: cannot be changed because it's in use [ 1509.148332][T15964] se_device not configured yet, cannot port link [ 1511.637835][T16010] se_device not configured yet, cannot port link [ 1512.094328][T16027] loop6: detected capacity change from 0 to 16 [ 1512.172326][T16027] erofs: (device loop6): mounted with root inode @ nid 36. [ 1512.429685][T10801] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1513.114026][T10801] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1513.143821][T10801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.171759][T10801] usb 4-1: Product: syz [ 1513.186554][T10801] usb 4-1: Manufacturer: syz [ 1513.196587][T10801] usb 4-1: SerialNumber: syz [ 1513.217683][T10801] usb 4-1: config 0 descriptor?? [ 1513.250774][T10801] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1513.838826][T10801] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1513.882062][T10801] sq905c: probe of 4-1:0.0 failed with error -71 [ 1513.913049][T10801] usb 4-1: USB disconnect, device number 14 [ 1515.659853][T14027] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1515.921483][T14027] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1516.017153][T14027] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1516.053287][T14027] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1516.103433][T14027] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1516.150453][T14027] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1516.225916][T14027] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1516.250980][T14027] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1516.292672][T14027] usb 4-1: Product: syz [ 1516.297128][T14027] usb 4-1: Manufacturer: syz [ 1516.364099][T14027] cdc_wdm 4-1:1.0: skipping garbage [ 1516.380015][T14027] cdc_wdm 4-1:1.0: skipping garbage [ 1516.490496][T14027] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1516.517275][T14027] cdc_wdm 4-1:1.0: Unknown control protocol [ 1516.840520][ C1] cdc_wdm 4-1:1.0: unknown notification 229 received: index 52084 len 0 [ 1516.870947][T10801] usb 4-1: USB disconnect, device number 15 [ 1517.598043][T16097] loop6: detected capacity change from 0 to 32768 [ 1517.652869][T16097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2484 (16097) [ 1517.740412][T16097] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1517.782029][T16097] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1517.854435][T16097] BTRFS info (device loop6): setting nodatasum [ 1517.888996][T16097] BTRFS info (device loop6): force zlib compression, level 3 [ 1517.939966][T16097] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1517.979991][T16097] BTRFS info (device loop6): use lzo compression, level 0 [ 1518.020030][T16097] BTRFS info (device loop6): turning on flush-on-commit [ 1518.027685][T16097] BTRFS info (device loop6): enabling auto defrag [ 1518.069350][T16097] BTRFS info (device loop6): max_inline at 4096 [ 1518.100360][T16097] BTRFS info (device loop6): using free space tree [ 1518.187279][T16135] netlink: 'syz.8.2493': attribute type 5 has an invalid length. [ 1518.556153][T16097] BTRFS info (device loop6): enabling ssd optimizations [ 1519.007293][ T4284] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1519.245838][ T6020] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1519.517523][T13848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop6 scanned by udevd (13848) [ 1519.623093][T16173] sch_fq: defrate 4 ignored. [ 1521.113344][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2510'. [ 1521.159026][T16216] loop6: detected capacity change from 0 to 8 [ 1521.189478][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2510'. [ 1521.243840][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2510'. [ 1521.277205][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2510'. [ 1521.494205][T14034] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1521.572969][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2515'. [ 1521.719884][T16230] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2515'. [ 1521.747180][T16233] se_device not configured yet, cannot port link [ 1521.829537][T14034] usb 4-1: Using ep0 maxpacket: 32 [ 1521.847881][T14034] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1521.858088][T14034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.877701][T14034] usb 4-1: config 0 descriptor?? [ 1522.120705][T14034] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1522.496006][T14034] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1522.609236][T14034] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1522.644380][T14034] usb 4-1: media controller created [ 1522.743368][T14034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1522.762282][T16246] loop7: detected capacity change from 0 to 764 [ 1522.883598][T14034] az6027: usb out operation failed. (-71) [ 1522.948531][T14034] az6027: usb out operation failed. (-71) [ 1522.968184][T14034] stb0899_attach: Driver disabled by Kconfig [ 1522.988194][T14034] az6027: no front-end attached [ 1522.988194][T14034] [ 1523.089637][T14034] az6027: usb out operation failed. (-71) [ 1523.091353][T16256] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1523.119687][T14034] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1523.149822][T14034] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 1523.205597][T14034] dvb-usb: schedule remote query interval to 400 msecs. [ 1523.233213][T14034] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1523.305494][T14034] usb 4-1: USB disconnect, device number 16 [ 1523.419925][T14034] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1523.509721][T10801] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1523.704225][T10801] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1523.723995][T10801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.754389][T10801] usb 7-1: Product: syz [ 1523.758658][T10801] usb 7-1: Manufacturer: syz [ 1523.789607][T10801] usb 7-1: SerialNumber: syz [ 1523.826910][T10801] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1523.950512][T10808] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1524.811640][T10801] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1524.869665][T10808] usb 3-1: Using ep0 maxpacket: 32 [ 1524.878717][T10808] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1524.907442][T10808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.943288][T16288] db_root: cannot be changed because it's in use [ 1524.957237][T10808] usb 3-1: config 0 descriptor?? [ 1524.983849][T16288] se_device not configured yet, cannot port link [ 1525.157140][ T4703] Process accounting resumed [ 1525.334467][ T4703] usb 7-1: USB disconnect, device number 14 [ 1525.359565][T10808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1525.774617][T10808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1525.889734][T10801] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1525.910947][T10801] ath9k_htc: Failed to initialize the device [ 1525.931458][T10808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1525.952002][ T4703] usb 7-1: ath9k_htc: USB layer deinitialized [ 1525.990118][T10808] usb 3-1: media controller created [ 1526.031419][T16298] loop6: detected capacity change from 0 to 2048 [ 1526.066859][T16298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1526.106415][T10808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1526.182111][T10808] az6027: usb out operation failed. (-71) [ 1526.232308][T10808] az6027: usb out operation failed. (-71) [ 1526.279618][T10808] stb0899_attach: Driver disabled by Kconfig [ 1526.285699][T10808] az6027: no front-end attached [ 1526.285699][T10808] [ 1526.323779][T10808] az6027: usb out operation failed. (-71) [ 1526.333795][T10808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1527.134097][T16303] Process accounting resumed [ 1527.158300][T10808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 1527.170948][T10808] dvb-usb: schedule remote query interval to 400 msecs. [ 1527.181219][T10808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1527.192343][T10808] usb 3-1: USB disconnect, device number 12 [ 1527.420477][T10808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1527.827230][T16323] loop6: detected capacity change from 0 to 512 [ 1527.850341][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2546'. [ 1527.872833][T16323] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1528.009872][T10808] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1528.186988][T16343] loop7: detected capacity change from 0 to 7 [ 1528.219832][T10808] usb 3-1: Using ep0 maxpacket: 8 [ 1528.234859][T10808] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1528.245481][T16344] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1528.299768][T10808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.307856][T10808] usb 3-1: Product: syz [ 1528.313383][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.322939][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.340472][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.349769][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.369572][T10808] usb 3-1: Manufacturer: syz [ 1528.374350][T10808] usb 3-1: SerialNumber: syz [ 1528.388399][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.397676][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.422555][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.431854][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.440433][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.450494][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.488180][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.497790][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.539865][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.549262][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.559912][T16343] ldm_validate_partition_table(): Disk read failed. [ 1528.579778][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.589154][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.618927][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1528.628222][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.662808][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1528.673040][T16343] Dev loop7: unable to read RDB block 0 [ 1528.680233][T16343] loop7: unable to read partition table [ 1528.695504][T16343] loop7: partition table beyond EOD, truncated [ 1528.739846][T16343] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1529.127435][T16361] loop6: detected capacity change from 0 to 2048 [ 1529.202021][T16361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1529.315012][T10808] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1529.344051][T10808] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1529.404883][T10808] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1529.439683][T10808] usb 3-1: clock source 0 is not valid, cannot use [ 1529.469658][T10808] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 1529.517586][T10808] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1529.620368][T10808] usb 3-1: USB disconnect, device number 13 [ 1530.073189][T13868] udevd[13868]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1530.954333][T16403] loop6: detected capacity change from 0 to 512 [ 1530.968296][T16404] loop7: detected capacity change from 0 to 256 [ 1531.040148][T16404] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1531.113472][T16403] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1531.160050][T16403] ext4 filesystem being mounted at /483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1531.379220][T16403] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 1531.451893][T16403] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.2567: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1532.430741][ T6020] EXT4-fs (loop6): unmounting filesystem. [ 1532.588386][T10808] Process accounting resumed [ 1533.680640][T16431] se_device not configured yet, cannot port link [ 1533.891237][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1533.976071][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1533.987464][T16441] loop7: detected capacity change from 0 to 4096 [ 1534.004717][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1534.024999][T16441] EXT4-fs: inline encryption not supported [ 1534.043013][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1534.069626][T14502] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1534.088748][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1534.105735][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1534.122839][T16441] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1534.155214][T16441] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1534.184018][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1534.184559][T16441] System zones: 0-5 [ 1534.209866][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1534.222319][T16446] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 1534.239025][T16441] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1534.269595][T14502] usb 3-1: Using ep0 maxpacket: 16 [ 1534.276837][T14502] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1534.308648][T14502] usb 3-1: config 1 has no interface number 0 [ 1534.315922][T14502] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1534.377933][T14502] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1534.429585][T14502] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1534.461191][T14502] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1534.504627][T14502] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1534.559217][T14502] usb 3-1: Product: syz [ 1534.577479][T14502] usb 3-1: Manufacturer: syz [ 1534.587622][T14502] usb 3-1: SerialNumber: syz [ 1534.601063][T16438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1534.679035][T16438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1534.704250][ T5821] EXT4-fs (loop7): unmounting filesystem. [ 1535.742640][T16438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1535.778620][T16438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1536.172170][T10808] Process accounting resumed [ 1536.246779][T14502] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1536.332046][T14502] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1536.379210][T14502] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1536.512185][T14502] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7a:e2:cb:0b:7f:15 [ 1536.566498][T14502] usb 3-1: USB disconnect, device number 14 [ 1536.604330][T14502] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1536.751041][T14502] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1536.809661][T14502] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1536.819337][T14502] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1537.318599][T16516] loop6: detected capacity change from 0 to 2048 [ 1537.363874][T16516] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1537.418449][T16516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1539.678041][T16546] Process accounting resumed [ 1540.200414][T16568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.219742][T16568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.246034][T16568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.277300][T16568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.298020][T16568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.319059][T16568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.343305][T16568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.368195][T16568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.378590][T16568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.396728][T16568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.419043][T16568] device batadv_slave_1 entered promiscuous mode [ 1540.439116][T16568] device batadv_slave_1 left promiscuous mode [ 1541.625579][T16592] netlink: 'syz.8.2623': attribute type 16 has an invalid length. [ 1541.643268][T16592] netlink: 'syz.8.2623': attribute type 17 has an invalid length. [ 1541.692840][T16592] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1541.725039][T16592] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1541.786171][T16592] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1541.827286][T16592] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1541.864846][T16592] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1541.888257][T16592] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1542.219653][T14027] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1542.230330][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1542.379980][T14027] usb 3-1: device descriptor read/64, error -32 [ 1543.009762][T14027] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1543.211486][T14027] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1543.249633][T14027] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1543.281742][T14027] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1543.312482][T14027] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1543.345155][T14027] usb 3-1: Product: syz [ 1543.354762][T14027] usb 3-1: Manufacturer: syz [ 1543.380486][T14027] usb 3-1: SerialNumber: syz [ 1543.421655][T14027] usb 3-1: config 0 descriptor?? [ 1543.463507][T14027] usb 3-1: selecting invalid altsetting 0 [ 1543.658931][T10808] usb 3-1: USB disconnect, device number 16 [ 1543.998972][T16622] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2631'. [ 1544.963541][T16632] loop6: detected capacity change from 0 to 256 [ 1545.038468][T16632] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1545.294387][T16637] loop7: detected capacity change from 0 to 2048 [ 1546.020049][T16637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1547.559094][T14027] Process accounting resumed [ 1549.267915][T16657] loop7: detected capacity change from 0 to 32768 [ 1550.111949][T10808] Process accounting resumed [ 1551.015010][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.802083][T16746] loop7: detected capacity change from 0 to 2048 [ 1551.907902][T16746] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1552.058482][T16746] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1552.109911][T16746] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 1552.152446][T16746] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1552.152446][T16746] [ 1552.189894][T16746] EXT4-fs (loop7): Total free blocks count 0 [ 1552.209914][T16746] EXT4-fs (loop7): Free/Dirty block details [ 1552.239797][T16746] EXT4-fs (loop7): free_blocks=66060288 [ 1552.259184][T16746] EXT4-fs (loop7): dirty_blocks=48 [ 1552.288154][T16746] EXT4-fs (loop7): Block reservation details [ 1552.329788][T16746] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 1552.584038][ T5821] EXT4-fs (loop7): unmounting filesystem. [ 1552.732538][T10801] Process accounting resumed [ 1553.108697][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2677'. [ 1553.957547][T11894] Process accounting resumed [ 1555.419261][T16836] Process accounting resumed [ 1555.513426][T16811] loop6: detected capacity change from 0 to 40427 [ 1555.573478][T16811] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1555.587500][T10808] Process accounting resumed [ 1555.638066][T16811] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1555.812752][T16811] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x3ffff [ 1555.930009][T10808] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1555.984180][T16811] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8 [ 1556.164112][T10808] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1556.176078][T16811] F2FS-fs (loop6): invalid crc value [ 1556.212803][T10808] usb 3-1: config 0 has no interface number 0 [ 1556.303268][T10808] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1556.335267][T16811] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1556.505584][T10808] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1556.575592][T10808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.619597][T10808] usb 3-1: Product: syz [ 1556.639808][T10808] usb 3-1: Manufacturer: syz [ 1556.644520][T10808] usb 3-1: SerialNumber: syz [ 1556.704440][T10808] usb 3-1: config 0 descriptor?? [ 1556.760116][T16811] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1556.785099][T10808] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1556.799754][T16811] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1557.288009][ T6020] syz-executor: attempt to access beyond end of device [ 1557.288009][ T6020] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1557.450627][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 1557.460418][T16873] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2706'. [ 1557.486457][T14502] usb 3-1: USB disconnect, device number 17 [ 1557.507213][T14502] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1559.091623][T16907] netlink: 'syz.8.2720': attribute type 39 has an invalid length. [ 1559.312883][T16912] db_root: cannot be changed because it's in use [ 1559.727275][T16919] db_root: cannot be changed because it's in use [ 1559.773676][T16919] se_device not configured yet, cannot port link [ 1561.727753][T16949] db_root: cannot be changed because it's in use [ 1562.140400][T16957] db_root: cannot be changed because it's in use [ 1562.165203][T16957] se_device not configured yet, cannot port link [ 1563.915610][ T26] audit: type=1326 audit(2000525948.837:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1563.970571][ T26] audit: type=1326 audit(2000525948.897:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.037668][ T26] audit: type=1326 audit(2000525948.957:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.123176][ T26] audit: type=1326 audit(2000525948.957:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.229918][ T26] audit: type=1326 audit(2000525948.957:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.349751][ T26] audit: type=1326 audit(2000525948.987:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.415273][ T26] audit: type=1326 audit(2000525948.987:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.460759][T16984] db_root: cannot be changed because it's in use [ 1564.524263][ T26] audit: type=1326 audit(2000525948.987:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.630392][ T26] audit: type=1326 audit(2000525949.027:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.763219][ T26] audit: type=1326 audit(2000525949.027:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16976 comm="syz.6.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef859de99 code=0x7ffc0000 [ 1564.840162][T16993] db_root: cannot be changed because it's in use [ 1564.888000][T16993] se_device not configured yet, cannot port link [ 1566.110711][T17008] [ 1566.113146][T17008] ====================================================== [ 1566.120472][T17008] WARNING: possible circular locking dependency detected [ 1566.127639][T17008] syzkaller #0 Not tainted [ 1566.132124][T17008] ------------------------------------------------------ [ 1566.139267][T17008] syz.3.2757/17008 is trying to acquire lock: [ 1566.145375][T17008] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 1566.155330][T17008] [ 1566.155330][T17008] but task is already holding lock: [ 1566.162737][T17008] ffff88803a8d1fb0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 1566.172855][T17008] [ 1566.172855][T17008] which lock already depends on the new lock. [ 1566.172855][T17008] [ 1566.184014][T17008] [ 1566.184014][T17008] the existing dependency chain (in reverse order) is: [ 1566.193099][T17008] [ 1566.193099][T17008] -> #2 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 1566.202291][T17008] down_write+0x36/0x60 [ 1566.207031][T17008] configfs_depend_item_unlocked+0x14f/0x430 [ 1566.213760][T17008] usbg_make_tpg+0x1f3/0x580 [ 1566.218997][T17008] target_fabric_make_tpg+0xa0/0x6d0 [ 1566.224930][T17008] configfs_mkdir+0x511/0x9e0 [ 1566.230259][T17008] vfs_mkdir+0x386/0x570 [ 1566.235237][T17008] do_mkdirat+0x1d8/0x440 [ 1566.240219][T17008] __x64_sys_mkdir+0x6a/0x80 [ 1566.245387][T17008] do_syscall_64+0x4c/0xa0 [ 1566.250414][T17008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1566.256873][T17008] [ 1566.256873][T17008] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 1566.264550][T17008] __mutex_lock+0x12d/0xae0 [ 1566.269636][T17008] tcm_set_name+0x26/0x90 [ 1566.274546][T17008] function_make+0x195/0x350 [ 1566.279790][T17008] configfs_mkdir+0x511/0x9e0 [ 1566.285063][T17008] vfs_mkdir+0x386/0x570 [ 1566.290009][T17008] do_mkdirat+0x1d8/0x440 [ 1566.294920][T17008] __x64_sys_mkdir+0x6a/0x80 [ 1566.300063][T17008] do_syscall_64+0x4c/0xa0 [ 1566.305064][T17008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1566.311542][T17008] [ 1566.311542][T17008] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1566.319934][T17008] __lock_acquire+0x2d18/0x7c40 [ 1566.325373][T17008] lock_acquire+0x1bb/0x4a0 [ 1566.330552][T17008] __mutex_lock+0x12d/0xae0 [ 1566.335635][T17008] configfs_rmdir+0x638/0x980 [ 1566.341141][T17008] vfs_rmdir+0x34e/0x4a0 [ 1566.345950][T17008] do_rmdir+0x29a/0x5c0 [ 1566.350757][T17008] __x64_sys_unlinkat+0xc0/0xe0 [ 1566.356166][T17008] do_syscall_64+0x4c/0xa0 [ 1566.361143][T17008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1566.367606][T17008] [ 1566.367606][T17008] other info that might help us debug this: [ 1566.367606][T17008] [ 1566.377868][T17008] Chain exists of: [ 1566.377868][T17008] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#22 [ 1566.377868][T17008] [ 1566.392631][T17008] Possible unsafe locking scenario: [ 1566.392631][T17008] [ 1566.400126][T17008] CPU0 CPU1 [ 1566.405547][T17008] ---- ---- [ 1566.410958][T17008] lock(&sb->s_type->i_mutex_key#22); [ 1566.416468][T17008] lock(&opts->dep_lock); [ 1566.423445][T17008] lock(&sb->s_type->i_mutex_key#22); [ 1566.431467][T17008] lock(gadget_subsys.su_mutex); [ 1566.436544][T17008] [ 1566.436544][T17008] *** DEADLOCK *** [ 1566.436544][T17008] [ 1566.444731][T17008] 3 locks held by syz.3.2757/17008: [ 1566.449950][T17008] #0: ffff88801a3b2460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1566.459900][T17008] #1: ffff88804e509fb0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 1566.471284][T17008] #2: ffff88803a8d1fb0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 1566.481583][T17008] [ 1566.481583][T17008] stack backtrace: [ 1566.487519][T17008] CPU: 1 PID: 17008 Comm: syz.3.2757 Not tainted syzkaller #0 [ 1566.495208][T17008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1566.505312][T17008] Call Trace: [ 1566.508620][T17008] [ 1566.511575][T17008] dump_stack_lvl+0x188/0x24e [ 1566.516291][T17008] ? load_image+0x410/0x410 [ 1566.520816][T17008] ? show_regs_print_info+0x12/0x12 [ 1566.526048][T17008] ? print_circular_bug+0x12b/0x1a0 [ 1566.531279][T17008] check_noncircular+0x296/0x330 [ 1566.536278][T17008] ? add_chain_block+0x9b0/0x9b0 [ 1566.541266][T17008] ? lockdep_lock+0xf1/0x1f0 [ 1566.545916][T17008] ? _find_first_zero_bit+0xd2/0x100 [ 1566.551701][T17008] __lock_acquire+0x2d18/0x7c40 [ 1566.556597][T17008] ? mark_lock+0x94/0x320 [ 1566.560956][T17008] ? verify_lock_unused+0x140/0x140 [ 1566.566189][T17008] ? __lock_acquire+0x138a/0x7c40 [ 1566.571252][T17008] ? verify_lock_unused+0x140/0x140 [ 1566.576491][T17008] lock_acquire+0x1bb/0x4a0 [ 1566.581033][T17008] ? configfs_rmdir+0x638/0x980 [ 1566.585919][T17008] ? __might_sleep+0xd0/0xd0 [ 1566.590626][T17008] ? read_lock_is_recursive+0x10/0x10 [ 1566.596121][T17008] __mutex_lock+0x12d/0xae0 [ 1566.600659][T17008] ? configfs_rmdir+0x638/0x980 [ 1566.605545][T17008] ? configfs_rmdir+0x638/0x980 [ 1566.610429][T17008] ? dput+0x37/0x1d0 [ 1566.614368][T17008] ? mutex_lock_nested+0x10/0x10 [ 1566.619344][T17008] ? __lock_acquire+0x7c40/0x7c40 [ 1566.624506][T17008] ? lockref_put_or_lock+0x6e/0xb0 [ 1566.629659][T17008] ? dput+0x37/0x1d0 [ 1566.633604][T17008] ? dput+0x37/0x1d0 [ 1566.637660][T17008] configfs_rmdir+0x638/0x980 [ 1566.642527][T17008] vfs_rmdir+0x34e/0x4a0 [ 1566.646814][T17008] do_rmdir+0x29a/0x5c0 [ 1566.651004][T17008] ? d_delete_notify+0x150/0x150 [ 1566.655980][T17008] ? getname_flags+0x206/0x500 [ 1566.660790][T17008] __x64_sys_unlinkat+0xc0/0xe0 [ 1566.665674][T17008] do_syscall_64+0x4c/0xa0 [ 1566.670135][T17008] ? clear_bhb_loop+0x60/0xb0 [ 1566.674864][T17008] ? clear_bhb_loop+0x60/0xb0 [ 1566.679595][T17008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1566.685534][T17008] RIP: 0033:0x7f2ec1b9de99 [ 1566.689995][T17008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1566.709988][T17008] RSP: 002b:00007f2ec2b22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1566.718529][T17008] RAX: ffffffffffffffda RBX: 00007f2ec1e25fa0 RCX: 00007f2ec1b9de99 [ 1566.726546][T17008] RDX: 0000000000000200 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 1566.734587][T17008] RBP: 00007f2ec1c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1566.742685][T17008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1566.751043][T17008] R13: 00007f2ec1e26038 R14: 00007f2ec1e25fa0 R15: 00007ffcc66d02f8 [ 1566.759273][T17008] [ 1567.109544][T10808] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1567.299522][T10808] usb 7-1: Using ep0 maxpacket: 8 [ 1567.306355][T10808] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1567.329520][T10808] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1567.359515][T10808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1567.366229][T10808] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1567.390900][T10808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.416153][T10808] usb 7-1: config 0 descriptor?? [ 1567.836750][T10808] elecom 0003:056E:00FE.000C: unexpected long global item [ 1567.849938][T10808] elecom: probe of 0003:056E:00FE.000C failed with error -22 [ 1568.037836][T10808] usb 7-1: USB disconnect, device number 15