last executing test programs: 17m5.212018381s ago: executing program 4 (id=62): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) 17m4.038291471s ago: executing program 4 (id=66): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 17m0.295510426s ago: executing program 4 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x3, {0x0, 0xff, 0x3}, 0xfd}, 0x18) write$P9_RSTATu(r4, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004055}, 0x2000c044) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) 16m54.868114094s ago: executing program 4 (id=76): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fanotify_init(0xef0, 0x2) fanotify_mark(r5, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xb1, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaa3eaaaaaaaaaaaa88a8380081001e0086dd66dd76f9007306fffe8800000000000000000000000001010000000000000000000000000000000100000db06700000033080404012502002001000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000aafe8800000000000000000000000001010000000000000000000000000000000000004e2100004e22000000030000000400000001c9"], &(0x7f0000000580)={0x0, 0x4, [0xf18, 0xaf9, 0xda2, 0xba6]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x5cd3f9da, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, 0x0, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(0x0, 0x167842, 0x19) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 16m49.067521202s ago: executing program 4 (id=83): lseek(0xffffffffffffffff, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf5000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c03000000"], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) read$msr(r3, &(0x7f0000019a80)=""/102392, 0x18ff8) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r4, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg(r4, &(0x7f00000005c0)={0x1, {&(0x7f0000000400)=""/140, 0x8c, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000080) 16m37.252049023s ago: executing program 4 (id=98): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$nl_xfrm(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) 16m20.740642903s ago: executing program 32 (id=98): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$nl_xfrm(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) 5m11.917099329s ago: executing program 5 (id=1355): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r5 = socket(0x1000000000000010, 0x4, 0x0) sendmsg$kcm(r5, 0x0, 0x8000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f00000001c0)) ptrace(0x10, 0x0) 5m9.302386297s ago: executing program 5 (id=1358): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001200)={{r4, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r8, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 4m59.399692761s ago: executing program 5 (id=1376): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x2, 0x2, 0x257}) mkdirat(0xffffffffffffff9c, 0x0, 0x17f) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x9, 0x3, 0x101, 0x800, 0x401}}, 0x118) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) 4m57.284323696s ago: executing program 5 (id=1381): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x23, 0x554f, &(0x7f00000081c0)="$eJzs3L1vG2UYAPDn8tFvSoQY2HpShZRItanTD8FWoBUfolVV6MAEju1abm1fFLtu6MTAiBjY2VkRSExs8DcwMLMhhEBsSCDfnUtDAaXEiVP6+0nn597Xr597XiuK8vgiB/DYWkp//TmJ43E4IuYj4lhEfp6Ux9jchSI+ExEnxuP7jqScvzdxICKORMTxcfIiZ1I+9fGp0clzP77+y1ffHlw4+tmX381w28CMPRsRvfXi/E6viFm7iDfL+fqok8fe2VEZiyd6t8pxVsQ7rbU8w536ZF09j2faxfps/fZgHG90641xbHdu5PPr/eKCg1F7kid/wc36Rj5uttby2BlkeWzfLeravFv8brs7GBZ5mmW+9/L0MRxOYjHf2mwV+1m/lcdGf1jOF3mzZmtzHEdlLC8XjazbzOtY28k7vb+90enf3kxHrY1BJ+un56q156u185XaRtZsDVtnK/Ve8/zZdLndHS+rDFv13oV2lrW7rWoj662ky+1Go1KrpcsXW2udej+t1apnqqcr51bKs1PpK1cWyitdT1/q9G8PO91BeiPbSItXrKSr1TMvrKQna+mbl6+mV69dunT56lvvXHz7youXX3u5XPRAWeny6unV1UrtdGW1trLf93897TbT5XHc8f4/KIue4v5hR5KHW35wt+oAeIRsp/8P/T8wZVPo/+/9Kbe1/9+4FrH7/X/89/5/flK3/v8R638f9/5/F/YPO7KN/v+nvagDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA99/3i56/mJ0vF+Gg5/0Q59VQ5TiK+nouI3//GfBzYknO+zLP4D+sX/1LDN0nkGZKIOFgeRyLiQnn89uRuvwsAAADw/9X59JPnim69eFiadUHspeJDm7lj704pXxIRi0s/TCnb3Pjh6Skly3++F2JzStnyD7AOTSlZ8ZHbwnZXb3vhv5nfEg7dF5IizE3jKgAAwP6ytROYSnMBAADAvvThrAtgNpKY3Mqc3AvO//P+zxuCh7eMAAAAgH3vwVv7yUzqAAAAAPZS3v8/xPf/he//AwAAgEfPF++f+GjWNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAHO/eTkzoQwAF4KPQBT43EuPcq7uAYHsGlS8IBvARHwCuYuOYMuPMIBkynVYHgn6QDxOb7kjKdSfl1SmAx0zIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDTPeez0cP46r5uznJVT5HRSnJFAAAAwLZFPhvFnUFZP6naz6qmi6pejM2zEMKusXs7/NvIbFc5+RfH51t9eAwhJhTn6Fbb/xDCdbW9nu/7UwAAAIDmmk+mw3K0Xr4Mjt0hkhn/fEg5aZOd3iQ6ZSuEkA9eEqVlRd5lorD4/e6Eu0RpcQKrlyisnHLrpEr7lfhz/5i1660VrbLIvn9/smsHAAAOqL1RHHYUAgAAwCHdHrsD7Fl/d3P8u331LH68FdiNT95/3t7rb9QAAACAP8hyewAAANBYT+87cfxv/T8AAABotnL9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPZpkc9G88l0WDdnuapnPSur2xkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDM3qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAV7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uc2BUAQCMPgVvb1L7z/YeMFPUMEMyA87KIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzIPWMZp9YZW+KpqpZpYs+4V9WRVeLMKnHlQh8Ptv7hjwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GXnfl7jqOIAgH9nN7tNq+IaJYeIWPBgLzbZKvUoHpTgwT9BCOm2xm790eZgS1Fy8SY59yJ6FBGUeOv/0HMLvdRbDzlU8KzM7Ezy0i5kU9qZTfL5wJv3nekw7/tmoeS77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwx/aHu3E7P/RGcau8dvfRzdW8v/dYn7u9eX8hb3mc1Zn04fBGepLNJyez9ScDAADA8dCu6vuIeNDZWs77Vq+o/zvVPXnN//NLo7iq5x+v+6u+qv3z9tefD1/bGag3Gid/6MW14WDpyVS6z2+W0+3lfe+YKd588d1Lu/hAWp9svLrdKd5n9uOdOx91i/BEHdkCAE/jbNWXQfXzUN73m0wMgGNjpmyR1P/tXrM5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANRheyNeqOIsIhZmduPcvUc3V8f1tzfvL1Tt/K1bm+kz80d0IuLi2nCwFLM1zma6Xbt+4/LKcDi4um/w/QT3HCh4MyKe6QMPEHxQTv/yZxPcHPGc0jjdyNyfXZDFVKSxX9AqP+xpyedwBA3+pwQAwJHUKVte1z/obC3n17K5iP9+2Vv/v53EMWH9//Dz83fTsdL6v1/bDKff4vqVrxevXb/xztqVlUuDS4Mv3zvXf/9M+Y9rw8HS4ugbEwAAAHha3bKl9X9r7sn1/1NJHBPW/9/81P8uHaut/h9rd9Gv6UwAAACOt1dO//tPNuZ61u3Gtyvr61f7o+PO+bnRsYFUD+xE2dL6vz3XdFYAAABAHbY3sj3r/xeSOCZc/3/x19d/T5/ZjoiT5fr/2dWvhhfqm85Uq+PXiZueIwAAAM06WbZ0/b9T7P9v7Wx5aEXEmbdGcflnACeq/9sf//BbOla6///d5Pq4vRVHXWt+9D6Kfj5iZr7pjAAAADjKZovWK2rwvztby1/8cerTrv3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHX7PwAA//8f2TpI") 4m54.296796332s ago: executing program 5 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = shmget(0x1, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb010000000000000000070200", r6, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000280)=0xfffffffc) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000240)=0xffff) ioctl$SYNC_IOC_FILE_INFO(r7, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace(0x10, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 4m53.349803397s ago: executing program 5 (id=1386): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001200)={{r4, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r8, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 4m37.778618937s ago: executing program 33 (id=1386): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001200)={{r4, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r8, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 13.193485971s ago: executing program 1 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) fsopen(&(0x7f0000000100)='erofs\x00', 0x1) 11.425466796s ago: executing program 1 (id=1969): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000000140)=0xfffffffd, 0xc6fffffd) io_setup(0x1, &(0x7f0000000b80)) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) dup(0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x180000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) 11.235372491s ago: executing program 0 (id=1972): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)="5e72d8", 0x3}], 0x2}}], 0x1, 0x4000) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, &(0x7f0000000180)={0xa}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @loopback, 0xfff}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vlan1\x00'}}, 0x1e) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/19, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc142e00004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000480)={r6, 0x2, 0x2, 0x2, &(0x7f0000000440)=[{0x9, 0xb, 0x9, 0x9}, {0x8, 0x101, 0x700, 0x6}]}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10, 0x8000000, 0x0}) 9.899708116s ago: executing program 1 (id=1975): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f023}) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200)=0x104) readv(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x1006, 0x2, 0xcf7, 0x70}, 0x5, 0x2, 0x0, 0x2, 0x0, 0xc3}}) ioprio_set$uid(0x3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0xffffff1f, 0x10000000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x7a55}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 7.218874114s ago: executing program 0 (id=1977): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x140) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x6060) r2 = syz_ublk_setup_io_uring(0x791b, &(0x7f00000003c0)={0x0, 0xef18, 0x1, 0x3, 0x30f}, &(0x7f0000000440), &(0x7f0000000780), &(0x7f00000007c0)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r2}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) creat(0x0, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x118, 0xffffb453) ptrace$pokeuser(0x6, r9, 0x104, 0x7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) 5.747018142s ago: executing program 1 (id=1978): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b60300000000000085007b27fca9cbb2e89b00000085000000a00000209500000000000000000000000000010000000884bda25591b228268961d682a3f79e505f590d3beb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000080)) 5.746817052s ago: executing program 6 (id=1979): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x3ec0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8000f, 0xfffffbff) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000702, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fsopen(0x0, 0x0) 5.737005963s ago: executing program 3 (id=1980): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x840) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) add_key$keyring(&(0x7f0000001080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x283}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 4.691900679s ago: executing program 6 (id=1981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) fsopen(&(0x7f0000000100)='erofs\x00', 0x1) 4.440902636s ago: executing program 0 (id=1982): socket(0x11, 0x80a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f023}) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)=0x104) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x1006, 0x2, 0xcf7, 0x70}, 0x5, 0x2, 0x0, 0x2, 0x0, 0xc3}}) ioprio_set$uid(0x3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0xffffff1f, 0x10000000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x7a55}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 4.365461028s ago: executing program 3 (id=1983): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000700), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='0', 0x1) write(0xffffffffffffffff, &(0x7f0000000d00)='0\n', 0x2) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0) 4.166152773s ago: executing program 2 (id=1984): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000700), 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000900)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='0\n', 0x2) close(r3) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0) 3.372797353s ago: executing program 6 (id=1985): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r4, r5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 3.272951386s ago: executing program 3 (id=1987): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) syz_init_net_socket$rose(0xb, 0x5, 0x0) utimes(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) 3.057054151s ago: executing program 0 (id=1988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 2.294524091s ago: executing program 3 (id=1990): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0x0, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3, 0x60}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x4e22, 0x4e04, 0x4e24, 0xe22, 0x0, 0x0, 0x7, 0x52a3, 0x1cf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.294157741s ago: executing program 6 (id=1991): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700"/16], &(0x7f0000000440)='syzkaller\x00', 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x8) r6 = io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240)=[{0x0}], 0x1) r7 = io_uring_setup(0x110, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xb, 0x798, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xc, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x0, 0x1, 0x8001, 0x1]}) shutdown(0xffffffffffffffff, 0x1) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, 0x0) 2.249159112s ago: executing program 1 (id=1992): socket$packet(0x11, 0xa, 0x300) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(0x0, 0x42000, 0x18) ftruncate(r0, 0x2007ffb) bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271d, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, 0x0, 0x0) socket(0x1d, 0x80802, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2.244684972s ago: executing program 2 (id=1993): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001", 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x200000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000080)=0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e88004004380"], 0x24}}, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r7, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000180)=0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.729201506s ago: executing program 2 (id=1994): removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sync_file_range(r0, 0xb9, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0x4048aec9, &(0x7f0000000100)="03000000000000000100000002000000000000000100000000000000ffffffff") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [], {0xffffffffffffffd8, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$MEMGETREGIONINFO(0xffffffffffffffff, 0xc0104d08, &(0x7f0000000080)={0x4, 0x81, 0x1, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) write$cgroup_freezer_state(r5, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000340)={r4, &(0x7f0000000180)='\x00', 0x2106c0, &(0x7f00000001c0)={@align=0x8, {0x61c, 0x10, 0x5, 0x3}}, 0x9, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x4}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setpriority(0x0, 0x0, 0x3) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) 1.131160151s ago: executing program 3 (id=1995): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sync_file_range(r0, 0xb9, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 656.942133ms ago: executing program 0 (id=1996): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f023}) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200)=0x104) readv(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x1006, 0x2, 0xcf7, 0x70}, 0x5, 0x2, 0x0, 0x2, 0x0, 0xc3}}) ioprio_set$uid(0x3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0xffffff1f, 0x10000000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x7a55}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 656.689163ms ago: executing program 3 (id=1997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) fsopen(&(0x7f0000000100)='erofs\x00', 0x1) 617.152444ms ago: executing program 6 (id=1998): r0 = socket(0x11, 0x80a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x4) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f023}) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200)=0x104) readv(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x1006, 0x2, 0xcf7, 0x70}, 0x5, 0x2, 0x0, 0x2, 0x0, 0xc3}}) ioprio_set$uid(0x3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0xffffff1f, 0x10000000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x7a55}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 553.496545ms ago: executing program 1 (id=1999): socket(0x11, 0x80a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f023}) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)=0x104) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x1006, 0x2, 0xcf7, 0x70}, 0x5, 0x2, 0x0, 0x2, 0x0, 0xc3}}) ioprio_set$uid(0x3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0xffffff1f, 0x10000000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x7a55}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 327.416332ms ago: executing program 2 (id=2000): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 164.713476ms ago: executing program 2 (id=2001): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) 60.100829ms ago: executing program 6 (id=2002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x142, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) r5 = fsopen(&(0x7f0000000100)='erofs\x00', 0x1) close(r5) 27.560879ms ago: executing program 2 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000700), 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000900)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='0\n', 0x2) close(r3) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 0 (id=2004): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x140) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) pause() read(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) syz_ublk_setup_queues(r2, 0x0, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10080003, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x0, 0x3, 0x125, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4d3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) close(0xffffffffffffffff) r3 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r3, &(0x7f00000006c0)='1843', 0x4) close(r3) write(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.563021][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 378.594806][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 378.629236][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 378.657853][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 378.674210][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.681297][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.700573][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 378.714448][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 378.728085][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 378.887786][ T6539] overlayfs: missing 'lowerdir' [ 379.031321][ T6535] loop0: detected capacity change from 0 to 512 [ 379.105742][ T5369] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.598525][ T6535] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.412: inode has both inline data and extents flags [ 379.633455][ T6535] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.412: couldn't read orphan inode 15 (err -117) [ 379.658908][ T6535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 380.242519][ T6557] 0x000000000006-0x000000020000 : "" [ 380.698144][ T6557] ftl_cs: FTL header corrupt! [ 381.285359][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 381.491276][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 381.491293][ T26] audit: type=1800 audit(1787766389.121:455): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="addr_trtype" dev="configfs" ino=43287 res=0 errno=0 [ 381.925583][ T6566] nvmet: Invalid value 'ip' for adrfam [ 381.954269][ T26] audit: type=1800 audit(1787766389.551:456): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="addr_adrfam" dev="configfs" ino=42795 res=0 errno=0 [ 382.020636][ T26] audit: type=1800 audit(1787766389.651:457): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="addr_traddr" dev="configfs" ino=42796 res=0 errno=0 [ 382.093013][ T26] audit: type=1800 audit(1787766389.651:458): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="addr_trsvcid" dev="configfs" ino=42797 res=0 errno=0 [ 382.937074][ T6566] nvmet: transport type 0 not supported [ 383.547863][ T6598] device hsr0 entered promiscuous mode [ 383.567652][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 384.398334][ T6625] loop5: detected capacity change from 0 to 8192 [ 384.774757][ T6625] Dev loop5: unable to read RDB block 8 [ 384.780703][ T6625] loop5: unable to read partition table [ 384.786561][ T6625] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 385.619618][ T6636] loop3: detected capacity change from 0 to 8192 [ 385.960557][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 385.978343][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 385.999778][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 386.024287][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 386.042680][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 386.056069][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 386.107302][ T6639] overlayfs: missing 'lowerdir' [ 386.114470][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 387.121632][ T26] audit: type=1800 audit(1787766394.751:459): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.432" name="addr_trtype" dev="configfs" ino=43388 res=0 errno=0 [ 387.211582][ T26] audit: type=1800 audit(1787766394.781:460): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.432" name="addr_traddr" dev="configfs" ino=43389 res=0 errno=0 [ 388.510738][ T6647] nvmet: transport type 0 not supported [ 388.578300][ T26] audit: type=1800 audit(1787766394.781:461): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.432" name="addr_trsvcid" dev="configfs" ino=43390 res=0 errno=0 [ 391.232049][ T6687] loop3: detected capacity change from 0 to 8192 [ 392.057081][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.440'. [ 394.763769][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 394.803666][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 395.319298][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 395.360817][ T6736] overlayfs: missing 'lowerdir' [ 395.375246][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 395.443438][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 395.485237][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 395.542915][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 395.645738][ T26] audit: type=1800 audit(1787766403.271:462): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.446" name="addr_trtype" dev="configfs" ino=42955 res=0 errno=0 [ 395.689034][ T26] audit: type=1800 audit(1787766403.311:463): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.446" name="addr_traddr" dev="configfs" ino=42956 res=0 errno=0 [ 395.748341][ T26] audit: type=1800 audit(1787766403.311:464): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.446" name="addr_trsvcid" dev="configfs" ino=42957 res=0 errno=0 [ 395.814251][ T6741] nvmet: transport type 0 not supported [ 396.654811][ T6752] loop0: detected capacity change from 0 to 40427 [ 397.023113][ T6752] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 397.064450][ T6749] loop3: detected capacity change from 0 to 512 [ 397.161213][ T6749] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.448: inode has both inline data and extents flags [ 397.200152][ T6749] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.448: couldn't read orphan inode 15 (err -117) [ 397.291459][ T6749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 397.880677][ T6770] loop5: detected capacity change from 0 to 1024 [ 398.559662][ T6770] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 398.569194][ T6770] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (40000) [ 398.664287][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 399.165921][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'. [ 399.227855][ T6785] loop0: detected capacity change from 0 to 164 [ 400.614777][ T6806] loop0: detected capacity change from 0 to 4096 [ 402.251881][ T6806] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 404.365297][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 404.394948][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 404.415577][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 404.432153][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 404.605319][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 404.649239][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 404.916703][ T46] Bluetooth: Error in BCSP hdr checksum [ 405.308495][ T6831] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 405.358519][ T6831] overlayfs: missing 'lowerdir' [ 406.820590][ T4285] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 408.546032][ T26] audit: type=1800 audit(1787766416.171:465): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.480" name="idProduct" dev="configfs" ino=44138 res=0 errno=0 [ 409.558820][ T26] audit: type=1800 audit(1787766416.201:466): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.480" name="UDC" dev="configfs" ino=44139 res=0 errno=0 [ 410.522654][ T6920] UBIFS error (pid: 6920): cannot open "ubifs", error -22 [ 410.884484][ T26] audit: type=1800 audit(1787766418.511:467): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.485" name="addr_trtype" dev="configfs" ino=43732 res=0 errno=0 [ 410.928161][ T26] audit: type=1800 audit(1787766418.551:468): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.485" name="addr_adrfam" dev="configfs" ino=43733 res=0 errno=0 [ 410.982212][ T26] audit: type=1800 audit(1787766418.551:469): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.485" name="addr_traddr" dev="configfs" ino=43734 res=0 errno=0 [ 411.066744][ T26] audit: type=1800 audit(1787766418.551:470): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.485" name="addr_trsvcid" dev="configfs" ino=43735 res=0 errno=0 [ 411.301164][ T6928] nvmet: transport type 0 not supported [ 417.349651][ T26] audit: type=1800 audit(1787766424.941:471): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.498" name="addr_trtype" dev="configfs" ino=44273 res=0 errno=0 [ 418.527390][ T6981] nvmet: transport type 0 not supported [ 418.535942][ T26] audit: type=1800 audit(1787766424.941:472): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.498" name="addr_adrfam" dev="configfs" ino=44274 res=0 errno=0 [ 418.784866][ T26] audit: type=1800 audit(1787766424.961:473): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.498" name="addr_traddr" dev="configfs" ino=44275 res=0 errno=0 [ 418.884314][ T26] audit: type=1800 audit(1787766424.961:474): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.498" name="addr_trsvcid" dev="configfs" ino=44276 res=0 errno=0 [ 427.225140][ T7042] ip_tables: iptables: counters copy to user failed while replacing table [ 427.462760][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 427.489454][ T26] audit: type=1800 audit(1787766435.121:475): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="addr_trtype" dev="configfs" ino=43879 res=0 errno=0 [ 427.894522][ T26] audit: type=1800 audit(1787766435.181:476): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="addr_adrfam" dev="configfs" ino=43880 res=0 errno=0 [ 428.103727][ T26] audit: type=1800 audit(1787766435.211:477): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="addr_traddr" dev="configfs" ino=43881 res=0 errno=0 [ 428.125136][ T26] audit: type=1800 audit(1787766435.341:478): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="addr_trsvcid" dev="configfs" ino=44354 res=0 errno=0 [ 428.249286][ T7042] netlink: 'syz.5.509': attribute type 10 has an invalid length. [ 428.278527][ T7042] team0: Port device dummy0 added [ 428.313753][ T7050] nvmet: transport type 0 not supported [ 428.633856][ T7060] loop3: detected capacity change from 0 to 512 [ 428.869745][ T4285] Bluetooth: hci1: Malformed LE Event: 0x0d [ 429.538875][ T7060] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.514: inode has both inline data and extents flags [ 429.562063][ T7060] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.514: couldn't read orphan inode 15 (err -117) [ 429.591375][ T7060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 430.574626][ T7076] usb usb1: usbfs: process 7076 (syz.0.518) did not claim interface 2 before use [ 430.734474][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 431.827980][ T7097] loop3: detected capacity change from 0 to 128 [ 433.241821][ T7097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 433.250761][ T7097] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 433.299274][ T7108] loop5: detected capacity change from 0 to 16 [ 433.434527][ T7108] erofs: (device loop5): mounted with root inode @ nid 36. [ 433.579984][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 435.693325][ T7139] loop5: detected capacity change from 0 to 8192 [ 436.808467][ T7152] loop5: detected capacity change from 0 to 512 [ 436.897244][ T7152] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.530: inode has both inline data and extents flags [ 437.557099][ T7156] program syz.3.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.571624][ T7156] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 438.479264][ T7152] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.530: couldn't read orphan inode 15 (err -117) [ 438.649548][ T7152] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 438.812168][ T7162] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 440.790288][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.796771][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.678561][ T5834] EXT4-fs (loop5): unmounting filesystem. [ 442.271132][ T26] audit: type=1800 audit(1787766449.901:479): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.537" name="addr_trtype" dev="configfs" ino=45123 res=0 errno=0 [ 442.294552][ T26] audit: type=1800 audit(1787766449.921:480): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.537" name="addr_adrfam" dev="configfs" ino=44480 res=0 errno=0 [ 442.373770][ T26] audit: type=1800 audit(1787766449.921:481): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.537" name="addr_traddr" dev="configfs" ino=44481 res=0 errno=0 [ 442.456813][ T26] audit: type=1800 audit(1787766449.921:482): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.537" name="addr_trsvcid" dev="configfs" ino=44482 res=0 errno=0 [ 442.456995][ T7183] nvmet: transport type 0 not supported [ 443.578136][ T7207] loop5: detected capacity change from 0 to 8192 [ 444.968936][ T7209] trusted_key: encrypted_key: keylen parameter is missing [ 445.108910][ T7209] trusted_key: encrypted_key: keylen parameter is missing [ 445.803455][ T7219] loop3: detected capacity change from 0 to 1024 [ 446.047813][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'. [ 448.341043][ T4842] hfsplus: b-tree write err: -5, ino 25 [ 448.346897][ T4842] hfsplus: b-tree write err: -5, ino 4 [ 448.584375][ T7242] loop0: detected capacity change from 0 to 40427 [ 448.617255][ T7242] F2FS-fs (loop0): invalid crc_offset: 4177530876 [ 448.679617][ T4842] hfsplus: b-tree write err: -5, ino 2 [ 448.731151][ T7242] F2FS-fs (loop0): Wrong journal entry on segno 65538 [ 448.738080][ T7242] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 449.045804][ T7242] xt_connbytes: Forcing CT accounting to be enabled [ 449.366641][ T7259] loop3: detected capacity change from 0 to 512 [ 449.525146][ T7259] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.549: inode has both inline data and extents flags [ 449.696784][ T7259] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.549: couldn't read orphan inode 15 (err -117) [ 449.755802][ T7259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 450.959060][ T7277] loop0: detected capacity change from 0 to 40427 [ 451.012210][ T7277] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 451.265747][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 453.507912][ T7300] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 453.507912][ T7300] [ 453.871053][ C1] sd 0:0:1:0: [sda] tag#9001 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 453.881693][ C1] sd 0:0:1:0: [sda] tag#9001 CDB: Write(6) 0a 00 00 00 08 00 00 00 42 00 00 00 [ 455.089520][ T7313] loop5: detected capacity change from 0 to 128 [ 455.394223][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.403311][ T7317] FAT-fs (loop5): Filesystem has been set read-only [ 455.411043][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.419679][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.437747][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.446465][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.455189][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.466006][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.474682][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.484075][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.493666][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.502394][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.511042][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.519716][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.528365][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.537009][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.545705][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.554410][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.563153][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.572620][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.581325][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.590023][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.598667][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.607351][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.616073][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.624813][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.633515][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.642274][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.651740][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.660434][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.669143][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.678047][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.686889][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.695575][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.704208][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.712842][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.826042][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.835036][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.843704][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.852373][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.861181][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.869961][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.878586][ T7317] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 455.894849][ T26] audit: type=1800 audit(1787766463.511:483): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.561" name="file1" dev="loop5" ino=1048637 res=0 errno=0 [ 456.918237][ T7328] loop3: detected capacity change from 0 to 512 [ 457.058066][ T7332] futex_wake_op: syz.1.566 tries to shift op by 144; fix this program [ 457.780092][ T7328] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.564: inode has both inline data and extents flags [ 457.801797][ T7328] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.564: couldn't read orphan inode 15 (err -117) [ 457.836049][ T7328] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 458.476127][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 463.804043][ T7391] loop3: detected capacity change from 0 to 256 [ 463.811645][ T7391] exfat: Deprecated parameter 'utf8' [ 463.860933][ T7391] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 464.701488][ T26] audit: type=1800 audit(1787766472.331:484): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="addr_trtype" dev="configfs" ino=45385 res=0 errno=0 [ 464.801565][ T7396] nvmet: Invalid value 'i' for adrfam [ 464.807185][ T26] audit: type=1800 audit(1787766472.431:485): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="addr_adrfam" dev="configfs" ino=45390 res=0 errno=0 [ 464.964775][ T26] audit: type=1800 audit(1787766472.501:486): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="addr_traddr" dev="configfs" ino=44683 res=0 errno=0 [ 465.710356][ T26] audit: type=1800 audit(1787766472.501:487): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="addr_trsvcid" dev="configfs" ino=44684 res=0 errno=0 [ 465.745809][ T7396] nvmet: transport type 0 not supported [ 467.558639][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.238456][ T26] audit: type=1800 audit(1787766476.861:488): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.590" name="addr_trtype" dev="configfs" ino=44743 res=0 errno=0 [ 469.320657][ T7467] nvmet: Invalid value 'i' for adrfam [ 469.979275][ T26] audit: type=1800 audit(1787766476.951:489): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.590" name="addr_adrfam" dev="configfs" ino=45469 res=0 errno=0 [ 470.232166][ T7474] nvmet: transport type 0 not supported [ 470.344220][ T26] audit: type=1800 audit(1787766477.071:490): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.590" name="addr_traddr" dev="configfs" ino=45470 res=0 errno=0 [ 470.399311][ T26] audit: type=1800 audit(1787766477.071:491): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.590" name="addr_trsvcid" dev="configfs" ino=45471 res=0 errno=0 [ 471.201999][ T7494] loop0: detected capacity change from 0 to 8192 [ 475.153505][ T7536] loop5: detected capacity change from 0 to 512 [ 475.250738][ T7536] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.602: inode has both inline data and extents flags [ 475.285811][ T7536] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.602: couldn't read orphan inode 15 (err -117) [ 475.355249][ T7536] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 476.330157][ T26] audit: type=1800 audit(1787766483.961:492): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.604" name="addr_trtype" dev="configfs" ino=45563 res=0 errno=0 [ 476.382874][ T7545] nvmet: Invalid value 'ip' for adrfam [ 476.428826][ T26] audit: type=1800 audit(1787766484.011:493): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.604" name="addr_adrfam" dev="configfs" ino=45564 res=0 errno=0 [ 476.548080][ T26] audit: type=1800 audit(1787766484.081:494): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.604" name="addr_traddr" dev="configfs" ino=45565 res=0 errno=0 [ 476.606613][ T7545] nvmet: transport type 0 not supported [ 476.664377][ T26] audit: type=1800 audit(1787766484.081:495): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.604" name="addr_trsvcid" dev="configfs" ino=45566 res=0 errno=0 [ 476.975115][ T5834] EXT4-fs (loop5): unmounting filesystem. [ 479.574853][ T7583] loop5: detected capacity change from 0 to 40427 [ 479.608266][ T7583] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 483.039791][ T26] audit: type=1800 audit(1787766490.671:496): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.618" name="addr_trtype" dev="configfs" ino=44873 res=0 errno=0 [ 483.830517][ T7608] nvmet: Invalid value 'ip' for adrfam [ 483.949370][ T26] audit: type=1800 audit(1787766491.461:497): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.618" name="addr_adrfam" dev="configfs" ino=44885 res=0 errno=0 [ 484.074863][ T7608] nvmet: transport type 0 not supported [ 484.137674][ T26] audit: type=1800 audit(1787766491.541:498): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.618" name="addr_traddr" dev="configfs" ino=45646 res=0 errno=0 [ 484.305818][ T26] audit: type=1800 audit(1787766491.541:499): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.618" name="addr_trsvcid" dev="configfs" ino=45647 res=0 errno=0 [ 484.552194][ T7628] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 489.110706][ T7655] random: crng reseeded on system resumption [ 490.574170][ T26] audit: type=1326 audit(1787766497.571:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.5.629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88e079e0d9 code=0x0 [ 490.668527][ T7668] nvmet: Invalid value 'ip' for adrfam [ 490.775192][ T26] audit: type=1800 audit(1787766498.291:501): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.631" name="addr_trtype" dev="configfs" ino=44936 res=0 errno=0 [ 490.845369][ T7662] mmap: syz.2.628 (7662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 490.899720][ T7668] nvmet: transport type 0 not supported [ 490.961162][ T26] audit: type=1800 audit(1787766498.291:502): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.631" name="addr_adrfam" dev="configfs" ino=44937 res=0 errno=0 [ 491.166207][ T26] audit: type=1800 audit(1787766498.301:503): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.631" name="addr_traddr" dev="configfs" ino=44938 res=0 errno=0 [ 491.423706][ T26] audit: type=1800 audit(1787766498.311:504): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.631" name="addr_trsvcid" dev="configfs" ino=44939 res=0 errno=0 [ 492.206007][ T7689] loop3: detected capacity change from 0 to 512 [ 492.276457][ T7689] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.634: inode has both inline data and extents flags [ 492.402945][ T7689] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.634: couldn't read orphan inode 15 (err -117) [ 493.242416][ T7689] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 495.209000][ T7717] siw: device registration error -23 [ 496.812577][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 498.966810][ T26] audit: type=1800 audit(1787766506.591:505): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.643" name="addr_trtype" dev="configfs" ino=45800 res=0 errno=0 [ 499.003075][ T7737] nvmet: Invalid value 'ip' for adrfam [ 499.069204][ T26] audit: type=1800 audit(1787766506.631:506): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.643" name="addr_adrfam" dev="configfs" ino=45801 res=0 errno=0 [ 499.177887][ T26] audit: type=1800 audit(1787766506.671:507): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.643" name="addr_traddr" dev="configfs" ino=45802 res=0 errno=0 [ 499.606907][ T26] audit: type=1800 audit(1787766506.671:508): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.643" name="addr_trsvcid" dev="configfs" ino=45803 res=0 errno=0 [ 499.731988][ T7737] nvmet: transport type 0 not supported [ 501.545730][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.553213][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.661731][ T7800] netlink: 348 bytes leftover after parsing attributes in process `syz.5.654'. [ 505.670898][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.654'. [ 506.097196][ T7807] lo speed is unknown, defaulting to 1000 [ 506.103657][ T7807] lo speed is unknown, defaulting to 1000 [ 506.111629][ T7807] lo speed is unknown, defaulting to 1000 [ 506.677426][ T7807] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 506.753321][ T7805] nvmet: Invalid value 'ip' for adrfam [ 506.778906][ T26] audit: type=1800 audit(1787766514.371:509): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.657" name="addr_trtype" dev="configfs" ino=46174 res=0 errno=0 [ 506.830205][ T7793] loop5: detected capacity change from 0 to 4096 [ 506.930321][ T26] audit: type=1800 audit(1787766514.371:510): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.657" name="addr_adrfam" dev="configfs" ino=46175 res=0 errno=0 [ 507.010151][ T7805] nvmet: transport type 0 not supported [ 507.012076][ T26] audit: type=1800 audit(1787766514.431:511): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.657" name="addr_traddr" dev="configfs" ino=46176 res=0 errno=0 [ 507.036981][ T26] audit: type=1800 audit(1787766514.431:512): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.657" name="addr_trsvcid" dev="configfs" ino=46177 res=0 errno=0 [ 507.114345][ T7793] ntfs3: loop5: Failed to load $AttrDef -> 0 [ 507.262277][ T7807] lo speed is unknown, defaulting to 1000 [ 507.303556][ T7807] lo speed is unknown, defaulting to 1000 [ 508.871134][ T7807] lo speed is unknown, defaulting to 1000 [ 509.085128][ T7807] lo speed is unknown, defaulting to 1000 [ 510.121786][ T7807] lo speed is unknown, defaulting to 1000 [ 512.725370][ T7858] overlayfs: failed to clone lowerpath [ 512.743449][ T7857] libceph: secret too big 79 [ 512.776783][ T7860] overlayfs: failed to clone lowerpath [ 513.152469][ T7861] loop0: detected capacity change from 0 to 8192 [ 514.754640][ T7872] loop5: detected capacity change from 0 to 8192 [ 516.237174][ T26] audit: type=1800 audit(1787766523.861:513): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.677" name="addr_trtype" dev="configfs" ino=47207 res=0 errno=0 [ 516.276133][ T7880] nvmet: Invalid value 'ip' for adrfam [ 516.355144][ T26] audit: type=1800 audit(1787766523.891:514): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.677" name="addr_adrfam" dev="configfs" ino=47208 res=0 errno=0 [ 516.385160][ T26] audit: type=1800 audit(1787766523.941:515): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.677" name="addr_traddr" dev="configfs" ino=47209 res=0 errno=0 [ 516.619608][ T7880] nvmet: transport type 0 not supported [ 517.668389][ T26] audit: type=1800 audit(1787766523.941:516): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.677" name="addr_trsvcid" dev="configfs" ino=47210 res=0 errno=0 [ 523.511079][ T7935] loop5: detected capacity change from 0 to 8192 [ 525.530413][ T7947] siw: device registration error -23 [ 525.934040][ T7956] loop0: detected capacity change from 0 to 8192 [ 526.414358][ T7235] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 526.463736][ T7963] loop5: detected capacity change from 0 to 128 [ 529.078968][ T7987] usb usb1: usbfs: process 7987 (syz.5.702) did not claim interface 2 before use [ 532.276697][ T8019] loop3: detected capacity change from 0 to 8192 [ 533.593497][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.712'. [ 533.660867][ T8032] loop5: detected capacity change from 0 to 164 [ 539.225067][ T8081] loop3: detected capacity change from 0 to 8192 [ 540.884791][ T8100] fuse: Unknown parameter '0x0000000000000009' [ 541.736512][ T8103] nvmet: Invalid value 'ip' for adrfam [ 541.742261][ T26] audit: type=1800 audit(1787766549.361:517): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.730" name="addr_trtype" dev="configfs" ino=46751 res=0 errno=0 [ 541.802837][ T8107] fuse: Bad value for 'fd' [ 541.889420][ T8112] syz.0.732 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 541.905270][ T8112] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 542.352393][ T26] audit: type=1800 audit(1787766549.361:518): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.730" name="addr_adrfam" dev="configfs" ino=46752 res=0 errno=0 [ 542.532333][ T8103] nvmet: transport type 0 not supported [ 542.719027][ T26] audit: type=1800 audit(1787766549.391:519): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.730" name="addr_traddr" dev="configfs" ino=46753 res=0 errno=0 [ 543.597203][ T8121] fuse: Unknown parameter '0xffffffffffffffff' [ 544.323999][ T8126] 0x000000000006-0x000000020000 : "" [ 544.331685][ T8126] ftl_cs: FTL header corrupt! [ 544.418862][ T4285] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 544.427967][ T4285] Bluetooth: hci1: Injecting HCI hardware error event [ 544.560354][ T4287] Bluetooth: hci1: hardware error 0x00 [ 545.313743][ T8148] loop3: detected capacity change from 0 to 8192 [ 546.238863][ T8155] loop5: detected capacity change from 0 to 8192 [ 546.674999][ T4287] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 547.335249][ T4287] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 547.343996][ T4287] Bluetooth: hci0: Injecting HCI hardware error event [ 547.353595][ T4285] Bluetooth: hci0: hardware error 0x00 [ 547.823114][ T26] audit: type=1800 audit(1787766555.451:520): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.745" name="addr_trtype" dev="configfs" ino=47721 res=0 errno=0 [ 548.815675][ T8166] nvmet: Invalid value 'ip' for adrfam [ 549.078093][ T8162] nvmet: transport type 0 not supported [ 549.094189][ T26] audit: type=1800 audit(1787766556.441:521): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.745" name="addr_adrfam" dev="configfs" ino=47724 res=0 errno=0 [ 549.331835][ T8174] xt_connbytes: Forcing CT accounting to be enabled [ 549.678793][ T4285] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 549.918870][ T26] audit: type=1800 audit(1787766556.551:522): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.745" name="addr_traddr" dev="configfs" ino=46892 res=0 errno=0 [ 550.106070][ T8179] loop5: detected capacity change from 0 to 128 [ 550.214785][ T8179] FAT-fs (loop5): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 553.436599][ T4338] rpcbind: server 127.0.0.1 not responding, timed out [ 555.895095][ T8211] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 555.895095][ T8211] [ 556.237752][ T8213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.758'. [ 556.259621][ T8213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.758'. [ 558.710849][ T8236] loop3: detected capacity change from 0 to 128 [ 558.718280][ T8236] FAT-fs (loop3): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 561.140327][ T8254] loop5: detected capacity change from 0 to 8192 [ 563.518549][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.525000][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.580725][ T8290] loop3: detected capacity change from 0 to 128 [ 572.590278][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 572.596402][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 572.606428][ T8337] ceph: No mds server is up or the cluster is laggy [ 573.669011][ T4700] libceph: connect (1)[c::]:6789 error -101 [ 573.685348][ T4700] libceph: mon0 (1)[c::]:6789 connect error [ 576.166598][ T8361] comedi comedi0: comedi_config --init_data is deprecated [ 577.202317][ T26] audit: type=1800 audit(1787766584.831:523): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.801" name="idProduct" dev="configfs" ino=48197 res=0 errno=0 [ 578.041191][ T26] audit: type=1800 audit(1787766584.861:524): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.801" name="UDC" dev="configfs" ino=48198 res=0 errno=0 [ 580.526870][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.5.805'. [ 580.723671][ T8384] loop3: detected capacity change from 0 to 40427 [ 581.356818][ T8389] loop0: detected capacity change from 0 to 512 [ 581.368298][ T8389] ext4: Unknown parameter 'fsname' [ 581.428847][ T8384] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 581.515535][ T7051] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 581.899710][ T8392] loop0: detected capacity change from 0 to 128 [ 581.901355][ T7051] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.255959][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.264554][ T8391] FAT-fs (loop0): Filesystem has been set read-only [ 582.271452][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.280028][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.288512][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.297027][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.314775][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.323627][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.332267][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.341161][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.349958][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.358516][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.367096][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.375710][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.384294][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.393247][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.401849][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.410464][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.419068][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.427838][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.436448][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.445330][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.453942][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.462561][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.471183][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.479821][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.488367][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.496965][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.506275][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.514878][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.523454][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.532023][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.540586][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.549262][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.557831][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.566448][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.585721][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.594431][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.603140][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.611740][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.620347][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.628971][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.693182][ T8391] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 582.748711][ T26] audit: type=1800 audit(1787766590.331:525): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.806" name="file1" dev="loop0" ino=1048691 res=0 errno=0 [ 585.387938][ T26] audit: type=1800 audit(1787766593.011:526): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.809" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 585.628157][ T8412] loop0: detected capacity change from 0 to 128 [ 586.216199][ T8415] IPVS: rr: FWM 3 0x00000003 - no destination available [ 587.299110][ T8421] siw: device registration error -23 [ 587.434915][ T8425] loop3: detected capacity change from 0 to 512 [ 587.455837][ T8425] EXT4-fs: Ignoring removed mblk_io_submit option [ 587.511081][ T8425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 587.529405][ T8425] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.429078][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 592.931321][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 593.447525][ T8472] loop5: detected capacity change from 0 to 128 [ 594.709340][ T8480] siw: device registration error -23 [ 596.917775][ T26] audit: type=1800 audit(1787766604.541:527): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.828" name="SYSV798dd820" dev="hugetlbfs" ino=0 res=0 errno=0 [ 597.035553][ T8501] loop0: detected capacity change from 0 to 128 [ 597.192705][ T8501] FAT-fs (loop0): invalid media value (0x07) [ 597.215136][ T8501] FAT-fs (loop0): Can't find a valid FAT filesystem [ 597.660897][ T8508] loop0: detected capacity change from 0 to 2048 [ 597.670507][ T8508] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 599.604473][ T8514] loop5: detected capacity change from 0 to 8192 [ 600.058820][ T7235] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 600.350265][ T8518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 600.611031][ T8520] loop0: detected capacity change from 0 to 2048 [ 600.819061][ T8529] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 602.328857][ T8530] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 602.920994][ T8539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 602.936068][ T8539] device syzkaller1 entered promiscuous mode [ 603.515694][ T8542] netlink: 72 bytes leftover after parsing attributes in process `syz.5.840'. [ 604.109515][ T8530] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 604.215766][ T8551] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 604.223012][ T8551] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 604.231066][ T8551] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 604.237961][ T8551] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 604.247399][ T8551] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 604.255588][ T8551] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 604.274262][ T8551] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 604.281283][ T8551] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 604.289506][ T8551] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 604.296636][ T8551] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 604.303936][ T8551] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 604.310786][ T8551] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 604.317876][ T8551] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 604.325136][ T8551] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 604.332810][ T8551] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 604.339797][ T8551] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 604.347617][ T8551] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 604.354657][ T8551] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 604.361469][ T8551] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 604.368286][ T8551] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 604.375337][ T8551] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 604.382467][ T8551] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 604.389879][ T8551] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 604.398216][ T8551] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 604.405468][ T8551] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 604.412562][ T8551] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 604.456956][ T8530] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 605.248743][ T8530] Remounting filesystem read-only [ 605.290199][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 605.598175][ T26] audit: type=1800 audit(1787766613.221:528): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.845" name="addr_trtype" dev="configfs" ino=49290 res=0 errno=0 [ 605.617010][ T8561] nvmet: Invalid value 'ip' for adrfam [ 605.713099][ T26] audit: type=1800 audit(1787766613.221:529): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.845" name="addr_adrfam" dev="configfs" ino=49291 res=0 errno=0 [ 605.791905][ T26] audit: type=1800 audit(1787766613.311:530): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.845" name="addr_traddr" dev="configfs" ino=49292 res=0 errno=0 [ 605.862814][ T26] audit: type=1800 audit(1787766613.311:531): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.845" name="addr_trsvcid" dev="configfs" ino=49293 res=0 errno=0 [ 606.211960][ T8561] nvmet: transport type 0 not supported [ 607.477453][ T8577] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 607.485460][ T8577] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 609.298828][ T4285] Bluetooth: hci5: command 0x0405 tx timeout [ 610.945470][ T8615] random: crng reseeded on system resumption [ 612.603939][ T26] audit: type=1800 audit(1787766620.231:532): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.863" name="addr_trtype" dev="configfs" ino=49401 res=0 errno=0 [ 612.623565][ T8625] nvmet: Invalid value 'ip' for adrfam [ 612.704135][ T26] audit: type=1800 audit(1787766620.231:533): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.863" name="addr_adrfam" dev="configfs" ino=49402 res=0 errno=0 [ 612.775058][ T26] audit: type=1800 audit(1787766620.281:534): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.863" name="addr_traddr" dev="configfs" ino=49403 res=0 errno=0 [ 612.892621][ T26] audit: type=1800 audit(1787766620.301:535): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.863" name="addr_trsvcid" dev="configfs" ino=49404 res=0 errno=0 [ 614.170006][ T8625] nvmet: transport type 0 not supported [ 620.012236][ T8681] loop0: detected capacity change from 0 to 8192 [ 620.807981][ T1046] block nbd0: Attempted send on invalid socket [ 620.815111][ T1046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.834660][ T8687] befs: (nbd0): unable to read superblock [ 620.989761][ T8690] can0: slcan on ttyS3. [ 621.222333][ T8686] can0 (unregistered): slcan off ttyS3. [ 624.315911][ T8720] loop3: detected capacity change from 0 to 8192 [ 624.479464][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.492386][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.273500][ T8775] loop0: detected capacity change from 0 to 8192 [ 631.937885][ T26] audit: type=1800 audit(1787766639.561:536): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.923" name="addr_trtype" dev="configfs" ino=48914 res=0 errno=0 [ 631.970928][ T8801] nvmet: Invalid value 'ip' for adrfam [ 631.992378][ T26] audit: type=1800 audit(1787766639.601:537): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.923" name="addr_adrfam" dev="configfs" ino=49651 res=0 errno=0 [ 632.085941][ T26] audit: type=1800 audit(1787766639.711:538): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.923" name="addr_traddr" dev="configfs" ino=48916 res=0 errno=0 [ 632.645654][ T26] audit: type=1800 audit(1787766639.711:539): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.923" name="addr_trsvcid" dev="configfs" ino=48917 res=0 errno=0 [ 634.000603][ T8828] loop0: detected capacity change from 0 to 8192 [ 634.600045][ T8831] loop5: detected capacity change from 0 to 8192 [ 635.902134][ T8843] loop0: detected capacity change from 0 to 8192 [ 636.371776][ T8844] siw: device registration error -23 [ 637.871944][ T8855] loop5: detected capacity change from 0 to 128 [ 637.999466][ T26] audit: type=1800 audit(1787766645.621:540): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.927" name="addr_trtype" dev="configfs" ino=49720 res=0 errno=0 [ 638.513801][ T8857] nvmet: Invalid value 'ip' for adrfam [ 638.519558][ T26] audit: type=1800 audit(1787766646.141:541): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.927" name="addr_adrfam" dev="configfs" ino=49001 res=0 errno=0 [ 638.735723][ T26] audit: type=1800 audit(1787766646.361:542): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.927" name="addr_traddr" dev="configfs" ino=49725 res=0 errno=0 [ 639.617457][ T26] audit: type=1800 audit(1787766646.401:543): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.927" name="addr_trsvcid" dev="configfs" ino=49726 res=0 errno=0 [ 643.442900][ T26] audit: type=1800 audit(1787766651.071:544): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.943" name="addr_trtype" dev="configfs" ino=49097 res=0 errno=0 [ 643.452343][ T8913] nvmet: Invalid value 'ip' for adrfam [ 643.482283][ T26] audit: type=1800 audit(1787766651.071:545): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.943" name="addr_adrfam" dev="configfs" ino=49098 res=0 errno=0 [ 643.518912][ T26] audit: type=1800 audit(1787766651.111:546): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.943" name="addr_traddr" dev="configfs" ino=49099 res=0 errno=0 [ 643.597643][ T26] audit: type=1800 audit(1787766651.111:547): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.943" name="addr_trsvcid" dev="configfs" ino=49100 res=0 errno=0 [ 644.134838][ T8921] loop3: detected capacity change from 0 to 8192 [ 647.754654][ T8956] loop0: detected capacity change from 0 to 8192 [ 648.075156][ T26] audit: type=1800 audit(1787766655.701:548): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.955" name="addr_trtype" dev="configfs" ino=50195 res=0 errno=0 [ 648.761365][ T8959] nvmet: Invalid value 'ip' for adrfam [ 648.784060][ T26] audit: type=1800 audit(1787766656.391:549): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.955" name="addr_adrfam" dev="configfs" ino=50199 res=0 errno=0 [ 648.944249][ T26] audit: type=1800 audit(1787766656.491:550): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.955" name="addr_traddr" dev="configfs" ino=50201 res=0 errno=0 [ 648.979584][ T26] audit: type=1800 audit(1787766656.491:551): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.955" name="addr_trsvcid" dev="configfs" ino=50202 res=0 errno=0 [ 649.025518][ T8965] nvmet: transport type 0 not supported [ 650.422001][ T8982] loop0: detected capacity change from 0 to 2048 [ 650.700961][ T8989] netlink: 14 bytes leftover after parsing attributes in process `syz.2.963'. [ 650.921948][ T8982] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 651.233809][ T8982] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.110117][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 655.036039][ T9015] futex_wake_op: syz.3.969 tries to shift op by -1; fix this program [ 655.053371][ T9015] usb usb7: check_ctrlrecip: process 9015 (syz.3.969) requesting ep 01 but needs 81 [ 655.887811][ T26] audit: type=1800 audit(1787766663.511:552): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_trtype" dev="configfs" ino=49979 res=0 errno=0 [ 656.039860][ T26] audit: type=1800 audit(1787766663.671:553): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_adrfam" dev="configfs" ino=49984 res=0 errno=0 [ 656.069567][ T9016] nvmet: Invalid value 'ip' for adrfam [ 656.103231][ T26] audit: type=1800 audit(1787766663.721:554): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_traddr" dev="configfs" ino=49985 res=0 errno=0 [ 656.125703][ T26] audit: type=1800 audit(1787766663.731:555): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_trsvcid" dev="configfs" ino=49986 res=0 errno=0 [ 656.327461][ T9016] nvmet: transport type 0 not supported [ 657.238978][ T9031] loop5: detected capacity change from 0 to 40427 [ 657.488023][ T9031] F2FS-fs (loop5): invalid crc_offset: 4177530876 [ 657.608830][ T9031] F2FS-fs (loop5): Wrong journal entry on segno 65538 [ 657.615737][ T9031] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 658.173161][ T9045] xt_connbytes: Forcing CT accounting to be enabled [ 658.475492][ T9048] autofs4:pid:9048:autofs_fill_super: called with bogus options [ 659.020612][ T9051] tipc: Started in network mode [ 659.025639][ T9051] tipc: Node identity 4, cluster identity 4711 [ 659.047237][ T9051] tipc: Node number set to 4 [ 661.493240][ T9080] jffs2: notice: (9080) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 664.851691][ T9117] loop5: detected capacity change from 0 to 40427 [ 665.057116][ T9117] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 667.809895][ T9153] futex_wake_op: syz.2.1007 tries to shift op by -1; fix this program [ 668.662580][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 669.922134][ T26] audit: type=1800 audit(1787766677.551:556): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1014" name="addr_trtype" dev="configfs" ino=50656 res=0 errno=0 [ 669.957271][ T9178] nvmet: Invalid value 'ip' for adrfam [ 669.983469][ T26] audit: type=1800 audit(1787766677.581:557): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1014" name="addr_adrfam" dev="configfs" ino=50657 res=0 errno=0 [ 670.050368][ T26] audit: type=1800 audit(1787766677.591:558): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1014" name="addr_traddr" dev="configfs" ino=50658 res=0 errno=0 [ 670.149400][ T26] audit: type=1800 audit(1787766677.601:559): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1014" name="addr_trsvcid" dev="configfs" ino=50659 res=0 errno=0 [ 671.075591][ T9178] nvmet: transport type 0 not supported [ 675.319058][ T4373] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 675.481981][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 675.531808][ T4373] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.576256][ T4373] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 675.693010][ T4373] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.761470][ T4373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 675.829218][ T4373] usb 6-1: SerialNumber: syz [ 676.210159][ T4373] hub 6-1:1.0: bad descriptor, ignoring hub [ 676.271619][ T4373] hub: probe of 6-1:1.0 failed with error -5 [ 676.341603][ T4373] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 676.403893][ T4373] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 676.461170][ T4373] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 678.749002][ T4356] usb 6-1: USB disconnect, device number 2 [ 679.163218][ T9261] loop5: detected capacity change from 0 to 64 [ 679.443153][ T9261] hfs: bad catalog namelength [ 679.448570][ T9261] hfs: get root inode failed [ 680.584748][ T9269] Invalid ELF header type: 2 != 1 [ 685.860956][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.867486][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.493905][ T9312] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 686.522006][ T9312] CIFS: Attempting to mount \\127.0.0.1\share [ 686.530474][ T9312] CIFS: VFS: No username specified [ 686.632899][ T9317] fuse: Unknown parameter 'user_id00000000000000000000' [ 688.093169][ T9332] loop0: detected capacity change from 0 to 40427 [ 688.120987][ T9332] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 689.572186][ T9364] loop3: detected capacity change from 0 to 512 [ 689.581087][ T9364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 689.635433][ T9364] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 689.799906][ T9364] System zones: 0-2, 18-18, 34-35 [ 689.870785][ T9364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 690.087547][ T9364] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.348837][ T26] audit: type=1800 audit(1787766698.971:560): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1056" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 691.470692][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 693.051740][ T9400] loop3: detected capacity change from 0 to 8 [ 693.721856][ T9400] SQUASHFS error: lzo decompression failed, data probably corrupt [ 693.730505][ T9400] SQUASHFS error: Failed to read block 0x91: -5 [ 693.736850][ T9400] SQUASHFS error: Unable to read metadata cache entry [8f] [ 693.744345][ T9400] SQUASHFS error: Unable to read inode 0x11f [ 693.853136][ T9398] loop5: detected capacity change from 0 to 40427 [ 693.863177][ T9398] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 694.040829][ T7051] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 694.324628][ T9408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.783789][ T9416] loop5: detected capacity change from 0 to 8192 [ 695.046800][ T9421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.095485][ T9473] loop3: detected capacity change from 0 to 764 [ 703.058818][ T4287] Bluetooth: hci5: command 0x0405 tx timeout [ 704.569402][ T9492] loop0: detected capacity change from 0 to 64 [ 705.339443][ T26] audit: type=1800 audit(1787766712.311:561): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1088" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 708.142605][ T4842] rpcbind: server 127.0.0.1 not responding, timed out [ 710.382913][ T9528] loop3: detected capacity change from 0 to 8192 [ 713.345172][ T9557] loop0: detected capacity change from 0 to 8192 [ 714.858502][ T9572] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 719.085318][ T9599] loop5: detected capacity change from 0 to 1024 [ 719.432136][ T9599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 719.737791][ T9607] loop3: detected capacity change from 0 to 8192 [ 719.927102][ T9599] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 719.968902][ T9599] System zones: 0-1, 3-12 [ 719.975624][ T9599] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 720.461083][ T9617] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý00000000000000000003' with parent 'ieee80211' already present! [ 722.273621][ T5834] EXT4-fs (loop5): unmounting filesystem. [ 726.474507][ T9673] loop5: detected capacity change from 0 to 40427 [ 726.496090][ T9673] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 726.571238][ T7235] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 727.200984][ T9677] loop3: detected capacity change from 0 to 8192 [ 729.281434][ T9694] loop5: detected capacity change from 0 to 128 [ 729.338972][ T9694] FAT-fs (loop5): invalid media value (0x07) [ 729.345105][ T9694] FAT-fs (loop5): Can't find a valid FAT filesystem [ 729.856152][ T9698] loop5: detected capacity change from 0 to 2048 [ 729.867832][ T9698] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 731.243997][ T9707] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 734.330585][ T9720] loop5: detected capacity change from 0 to 8192 [ 735.715632][ T9730] loop3: detected capacity change from 0 to 8 [ 735.745704][ T9730] SQUASHFS error: lzo decompression failed, data probably corrupt [ 735.753960][ T9730] SQUASHFS error: Failed to read block 0x91: -5 [ 735.760434][ T9730] SQUASHFS error: Unable to read metadata cache entry [8f] [ 735.767816][ T9730] SQUASHFS error: Unable to read inode 0x7 [ 735.796066][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 742.092883][ T9768] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 743.724041][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 743.785996][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 743.838283][ T9791] Attempt to restore checkpoint with obsolete wellknown handles [ 743.941399][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 744.044154][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 744.142864][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 744.232484][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 744.329993][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 747.301206][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.307590][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.798707][ T9839] loop0: detected capacity change from 0 to 8192 [ 748.490982][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1172'. [ 749.718865][ T9865] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý00000000000000000003' with parent 'ieee80211' already present! [ 755.103166][ T9906] loop0: detected capacity change from 0 to 8192 [ 758.178918][ T4285] Bluetooth: hci5: command 0x0405 tx timeout [ 759.208201][ T9939] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý00000000000000000003' with parent 'ieee80211' already present! [ 762.378458][ T9962] trusted_key: encrypted_key: insufficient parameters specified [ 768.013198][ T9983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1204'. [ 768.722953][ T9993] fuse: Bad value for 'fd' [ 769.081334][T10000] loop5: detected capacity change from 0 to 128 [ 769.104434][ T9998] loop3: detected capacity change from 0 to 8192 [ 769.115340][T10000] EXT4-fs (loop5): Test dummy encryption mode enabled [ 769.189999][T10000] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 769.199259][T10000] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 771.845101][ T5834] EXT4-fs (loop5): unmounting filesystem. [ 774.695909][T10035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.024763][T10043] loop0: detected capacity change from 0 to 8192 [ 778.155301][ T26] audit: type=1326 audit(1787766785.781:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.1.1221" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8faf9e0d9 code=0x0 [ 778.606391][T10077] autofs4:pid:10077:autofs_fill_super: called with bogus options [ 781.897775][T10099] FAULT_INJECTION: forcing a failure. [ 781.897775][T10099] name failslab, interval 1, probability 0, space 0, times 1 [ 781.910696][T10099] CPU: 0 PID: 10099 Comm: syz.5.1225 Not tainted syzkaller #0 [ 781.918207][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.928318][T10099] Call Trace: [ 781.931715][T10099] [ 781.934742][T10099] dump_stack_lvl+0x188/0x24e [ 781.939641][T10099] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 781.945587][T10099] ? show_regs_print_info+0x12/0x12 [ 781.950852][T10099] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 781.956565][T10099] should_fail_ex+0x390/0x4c0 [ 781.961407][T10099] should_failslab+0x5/0x20 [ 781.965993][T10099] slab_pre_alloc_hook+0x59/0x300 [ 781.971106][T10099] kmem_cache_alloc+0x56/0x2f0 [ 781.976012][T10099] ? getname_flags+0xb7/0x500 [ 781.980799][T10099] getname_flags+0xb7/0x500 [ 781.985348][T10099] __x64_sys_unlinkat+0xaa/0xe0 [ 781.990248][T10099] do_syscall_64+0x4c/0xa0 [ 781.994724][T10099] ? clear_bhb_loop+0x60/0xb0 [ 781.999456][T10099] ? clear_bhb_loop+0x60/0xb0 [ 782.004209][T10099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.010170][T10099] RIP: 0033:0x7f88e079e0d9 [ 782.014741][T10099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.034633][T10099] RSP: 002b:00007f88e16de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 782.043165][T10099] RAX: ffffffffffffffda RBX: 00007f88e0a26180 RCX: 00007f88e079e0d9 [ 782.051185][T10099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 782.059197][T10099] RBP: 00007f88e0835024 R08: 0000000000000000 R09: 0000000000000000 [ 782.067251][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.075268][T10099] R13: 00007f88e0a26218 R14: 00007f88e0a26180 R15: 00007ffed7281ac8 [ 782.083301][T10099] [ 789.641520][T10146] tipc: Started in network mode [ 789.654332][T10146] tipc: Node identity 4, cluster identity 4711 [ 789.661975][T10146] tipc: Node number set to 4 [ 792.957173][T10176] FAULT_INJECTION: forcing a failure. [ 792.957173][T10176] name fail_futex, interval 1, probability 0, space 0, times 1 [ 792.970107][T10176] CPU: 0 PID: 10176 Comm: syz.0.1250 Not tainted syzkaller #0 [ 792.977604][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.987677][T10176] Call Trace: [ 792.990991][T10176] [ 792.993975][T10176] dump_stack_lvl+0x188/0x24e [ 792.998699][T10176] ? show_regs_print_info+0x12/0x12 [ 793.003959][T10176] ? load_image+0x410/0x410 [ 793.008573][T10176] ? psi_task_change+0xdc/0x240 [ 793.013486][T10176] should_fail_ex+0x390/0x4c0 [ 793.018184][T10176] get_futex_key+0x1b1/0x1000 [ 793.023400][T10176] ? futex_setup_timer+0xc0/0xc0 [ 793.028451][T10176] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 793.034801][T10176] ? __lock_acquire+0x7c40/0x7c40 [ 793.039870][T10176] ? lock_chain_count+0x20/0x20 [ 793.044745][T10176] futex_wait_setup+0xb8/0x270 [ 793.049534][T10176] ? futex_wait_multiple+0x920/0x920 [ 793.054865][T10176] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 793.060911][T10176] ? _raw_spin_unlock+0x40/0x40 [ 793.066071][T10176] ? task_woken_rt+0x6a/0x1e0 [ 793.070842][T10176] futex_wait+0x1b8/0x5c0 [ 793.075203][T10176] ? futex_wait_setup+0x270/0x270 [ 793.080263][T10176] ? file_end_write+0x156/0x250 [ 793.085231][T10176] ? vfs_write+0x777/0x9a0 [ 793.089710][T10176] do_futex+0x310/0x320 [ 793.093893][T10176] ? __ia32_sys_get_robust_list+0x100/0x100 [ 793.099819][T10176] __se_sys_futex+0x381/0x410 [ 793.104558][T10176] ? __x64_sys_futex+0xf0/0xf0 [ 793.109368][T10176] ? __x64_sys_futex+0x1d/0xf0 [ 793.114152][T10176] do_syscall_64+0x4c/0xa0 [ 793.118665][T10176] ? clear_bhb_loop+0x60/0xb0 [ 793.123383][T10176] ? clear_bhb_loop+0x60/0xb0 [ 793.128090][T10176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 793.134097][T10176] RIP: 0033:0x7f320fb9e0d9 [ 793.138543][T10176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.158196][T10176] RSP: 002b:00007f3210b180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 793.166653][T10176] RAX: ffffffffffffffda RBX: 00007f320fe25fa8 RCX: 00007f320fb9e0d9 [ 793.174683][T10176] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f320fe25fa8 [ 793.182714][T10176] RBP: 00007f320fe25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 793.190829][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.198845][T10176] R13: 00007f320fe26038 R14: 00007ffc048046d0 R15: 00007ffc048047b8 [ 793.206841][T10176] [ 793.372574][T10187] fuse: Unknown parameter 'user_id00000000000000000000' [ 795.621341][T10199] overlayfs: failed to clone upperpath [ 795.679866][T10200] autofs4:pid:10200:autofs_fill_super: called with bogus options [ 796.652453][T10211] jffs2: notice: (10211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 797.231664][T10211] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 800.073615][T10238] loop0: detected capacity change from 0 to 8192 [ 800.408909][T10244] loop5: detected capacity change from 0 to 8192 [ 801.796833][T10258] loop3: detected capacity change from 0 to 40427 [ 801.830320][T10258] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 802.814541][T10263] FAULT_INJECTION: forcing a failure. [ 802.814541][T10263] name fail_futex, interval 1, probability 0, space 0, times 0 [ 802.827577][T10263] CPU: 1 PID: 10263 Comm: syz.3.1259 Not tainted syzkaller #0 [ 802.835125][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.845240][T10263] Call Trace: [ 802.848574][T10263] [ 802.851572][T10263] dump_stack_lvl+0x188/0x24e [ 802.856329][T10263] ? show_regs_print_info+0x12/0x12 [ 802.861606][T10263] ? load_image+0x410/0x410 [ 802.866175][T10263] ? psi_task_change+0xdc/0x240 [ 802.871099][T10263] should_fail_ex+0x390/0x4c0 [ 802.875849][T10263] get_futex_key+0x1b1/0x1000 [ 802.880607][T10263] ? futex_setup_timer+0xc0/0xc0 [ 802.885615][T10263] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 802.891669][T10263] ? __lock_acquire+0x7c40/0x7c40 [ 802.896761][T10263] ? lock_chain_count+0x20/0x20 [ 802.901687][T10263] futex_wait_setup+0xb8/0x270 [ 802.906519][T10263] ? futex_wait_multiple+0x920/0x920 [ 802.911870][T10263] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 802.917847][T10263] ? _raw_spin_unlock+0x40/0x40 [ 802.922757][T10263] ? task_woken_rt+0x130/0x1e0 [ 802.927598][T10263] futex_wait+0x1b8/0x5c0 [ 802.931989][T10263] ? futex_wait_setup+0x270/0x270 [ 802.937113][T10263] ? file_end_write+0x156/0x250 [ 802.942010][T10263] ? vfs_write+0x777/0x9a0 [ 802.946475][T10263] do_futex+0x310/0x320 [ 802.950708][T10263] ? __ia32_sys_get_robust_list+0x100/0x100 [ 802.956648][T10263] __se_sys_futex+0x381/0x410 [ 802.961359][T10263] ? __x64_sys_futex+0xf0/0xf0 [ 802.966167][T10263] ? __x64_sys_futex+0x1d/0xf0 [ 802.970979][T10263] do_syscall_64+0x4c/0xa0 [ 802.975441][T10263] ? clear_bhb_loop+0x60/0xb0 [ 802.980301][T10263] ? clear_bhb_loop+0x60/0xb0 [ 802.985050][T10263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.990999][T10263] RIP: 0033:0x7fc933f9e0d9 [ 802.995434][T10263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.015093][T10263] RSP: 002b:00007fc934d900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 803.023537][T10263] RAX: ffffffffffffffda RBX: 00007fc934226098 RCX: 00007fc933f9e0d9 [ 803.031543][T10263] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc934226098 [ 803.039714][T10263] RBP: 00007fc934226090 R08: 0000000000000000 R09: 0000000000000000 [ 803.047733][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.055756][T10263] R13: 00007fc934226128 R14: 00007ffc0e7bfea0 R15: 00007ffc0e7bff88 [ 803.063777][T10263] [ 805.743961][T10305] loop3: detected capacity change from 0 to 2048 [ 807.363289][T10322] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 807.867380][T10331] xt_TPROXY: Can be used only with -p tcp or -p udp [ 807.881853][T10331] device syzkaller1 entered promiscuous mode [ 808.741341][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.747729][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.028886][T10322] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 809.063681][T10322] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 809.096052][T10322] Remounting filesystem read-only [ 809.110568][ T4273] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 809.808961][T10348] loop3: detected capacity change from 0 to 8192 [ 811.240768][ T26] audit: type=1800 audit(1787766818.871:563): pid=10364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1279" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 813.428234][T10380] loop0: detected capacity change from 0 to 8192 [ 814.194609][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 814.358188][T10399] zram0: detected capacity change from 0 to 8 [ 816.172444][T10417] loop3: detected capacity change from 0 to 40427 [ 816.412215][T10417] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 816.468726][T10417] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 816.475651][T10417] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 821.766102][T10461] zram: Cannot change disksize for initialized device [ 823.759629][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 824.521632][T10490] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 825.199923][T10495] loop0: detected capacity change from 0 to 8192 [ 826.180394][T10510] jffs2: notice: (10510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 826.916991][T10514] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý00000000000000000003' with parent 'ieee80211' already present! [ 827.714671][T10519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 827.917848][T10519] loop5: detected capacity change from 0 to 7 [ 828.045697][T10519] Dev loop5: unable to read RDB block 7 [ 828.061129][T10519] loop5: unable to read partition table [ 828.068463][T10519] loop5: partition table beyond EOD, truncated [ 828.075016][T10519] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 828.250395][T10520] Dev loop5: unable to read RDB block 7 [ 828.273570][T10520] loop5: unable to read partition table [ 828.400383][T10520] loop5: partition table beyond EOD, truncated [ 828.413502][T10520] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 831.863742][T10552] loop5: detected capacity change from 0 to 8192 [ 831.934797][T10553] loop0: detected capacity change from 0 to 40427 [ 831.959563][T10553] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 832.058862][T10459] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 832.553288][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 832.743512][T10559] input: syz0 as /devices/virtual/input/input22 [ 833.660390][T10568] trusted_key: encrypted_key: insufficient parameters specified [ 835.850098][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 835.861905][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 835.870078][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 835.878092][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 835.886319][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 835.894546][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 836.099032][T10595] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 841.768086][T10629] Process accounting resumed [ 843.064810][T10645] loop3: detected capacity change from 0 to 40427 [ 843.143759][T10645] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 849.990609][T10677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.050665][T10677] loop5: detected capacity change from 0 to 7 [ 850.058461][T10677] Dev loop5: unable to read RDB block 7 [ 850.064537][T10677] loop5: unable to read partition table [ 850.070369][T10677] loop5: partition table beyond EOD, truncated [ 850.076557][T10677] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 850.152178][T10120] Dev loop5: unable to read RDB block 7 [ 850.157848][T10120] loop5: unable to read partition table [ 850.192991][T10120] loop5: partition table beyond EOD, truncated [ 850.212245][T10677] Dev loop5: unable to read RDB block 7 [ 850.217960][T10677] loop5: unable to read partition table [ 850.223864][T10677] loop5: partition table beyond EOD, truncated [ 850.230168][T10677] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 855.123013][T10734] fuse: Bad value for 'fd' [ 857.319626][T10739] Device name cannot be null; rc = [-22] [ 860.071858][T10750] autofs4:pid:10750:autofs_fill_super: called with bogus options [ 860.527311][T10759] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.536601][T10759] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.545445][T10759] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.554245][T10759] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.571688][T10759] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.581473][T10759] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.590494][T10759] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.599431][T10759] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.873082][T10765] loop5: detected capacity change from 0 to 40427 [ 861.914474][ T4764] rpcbind: server 127.0.0.1 not responding, timed out [ 861.939591][T10765] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 863.932860][T10785] jffs2: notice: (10785) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 866.115252][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 866.740798][ T26] audit: type=1326 audit(1787766874.371:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.0.1391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f320fb9e0d9 code=0x0 [ 870.185422][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.198492][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.818122][T10858] loop3: detected capacity change from 0 to 256 [ 874.902863][T10120] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 878.896663][T10879] loop3: detected capacity change from 0 to 64 [ 879.339999][T10883] syz.3.1406: attempt to access beyond end of device [ 879.339999][T10883] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 879.353798][T10883] Buffer I/O error on dev loop3, logical block 512, async page read [ 879.362413][T10883] syz.3.1406: attempt to access beyond end of device [ 879.362413][T10883] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 879.375852][T10883] Buffer I/O error on dev loop3, logical block 56576, async page read [ 880.252992][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1413'. [ 882.654236][T10911] loop3: detected capacity change from 0 to 512 [ 882.665778][T10911] ext4: Unknown parameter 'fsname' [ 882.763182][T10120] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 884.620818][T10928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 884.634504][T10928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 884.647694][T10928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 884.657458][T10928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 884.666709][T10928] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 884.675275][T10928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 884.862712][T10926] lo speed is unknown, defaulting to 1000 [ 885.441002][T10926] chnl_net:caif_netlink_parms(): no params data found [ 886.061723][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.108802][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.117233][T10926] device bridge_slave_0 entered promiscuous mode [ 886.151338][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.186687][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.246175][T10926] device bridge_slave_1 entered promiscuous mode [ 887.709409][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 889.092694][T10966] netlink: 'syz.0.1429': attribute type 4 has an invalid length. [ 889.101406][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 889.603885][T10868] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.709927][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.732498][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.782048][T10928] Bluetooth: hci4: command 0x041b tx timeout [ 889.798502][T10926] team0: Port device team_slave_0 added [ 889.842217][T10868] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.862606][T10926] team0: Port device team_slave_1 added [ 889.901729][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.911395][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.937936][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.966829][T10868] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.981998][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.989156][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.016657][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.069016][T10868] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.101831][T10926] device hsr_slave_0 entered promiscuous mode [ 890.110933][T10926] device hsr_slave_1 entered promiscuous mode [ 890.117803][T10926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.125572][T10926] Cannot create hsr debugfs directory [ 890.352405][T10926] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 890.438363][T10926] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 890.448111][T10926] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 890.458964][T10926] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 890.662759][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.690447][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 890.700489][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 890.714710][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.780086][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 890.792837][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 890.802660][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.809864][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.819753][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 890.829500][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 890.838143][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.845387][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.893553][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 890.903231][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 890.914380][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 890.923831][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 890.937057][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 890.946606][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 890.956453][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 890.976417][T10926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 890.995403][T10926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 891.039953][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 891.053805][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 891.084859][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 891.124500][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 891.515930][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 891.524732][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 891.571246][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.806680][T10868] device hsr_slave_0 left promiscuous mode [ 891.819508][T10868] device hsr_slave_1 left promiscuous mode [ 891.839728][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.847244][T10868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.858897][T10928] Bluetooth: hci4: command 0x040f tx timeout [ 891.869805][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.877297][T10868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.907453][T10868] device bridge_slave_1 left promiscuous mode [ 891.930745][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.955489][T10868] device bridge_slave_0 left promiscuous mode [ 891.962640][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.001927][T10868] device veth1_macvtap left promiscuous mode [ 892.008070][T10868] device veth0_macvtap left promiscuous mode [ 892.015628][T10868] device veth1_vlan left promiscuous mode [ 892.025078][T10868] device veth0_vlan left promiscuous mode [ 893.070115][T10868] team0 (unregistering): Port device team_slave_1 removed [ 893.135830][T10868] team0 (unregistering): Port device team_slave_0 removed [ 893.200265][T10868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.264226][T10868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.273359][ T9798] infiniband syz1: ib_query_port failed (-19) [ 893.666084][T10868] team0 (unregistering): Port device dummy0 removed [ 893.746905][T10868] bond0 (unregistering): Released all slaves [ 893.920247][ T4701] bond0 speed is unknown, defaulting to 1000 [ 893.939001][T10928] Bluetooth: hci4: command 0x0419 tx timeout [ 894.123413][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 894.135272][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 894.187421][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 894.211659][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 894.226971][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 894.236116][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 894.253845][T10926] device veth0_vlan entered promiscuous mode [ 894.301892][T10926] device veth1_vlan entered promiscuous mode [ 894.346768][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 894.363291][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 894.375359][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 894.393696][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 894.409090][T10926] device veth0_macvtap entered promiscuous mode [ 894.438098][T10926] device veth1_macvtap entered promiscuous mode [ 894.496347][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.517559][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.529261][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.546873][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.557507][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.573992][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.586476][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.595962][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 894.606084][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 894.616120][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 894.626410][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 894.640946][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.654207][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.670146][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.685183][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.696429][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.712050][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.724602][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.736891][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 894.760733][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 894.772345][T10926] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.784370][T10926] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.795309][T10926] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.807917][T10926] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.969042][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.976943][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.995066][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 895.028037][T10846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.050080][T10846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.057717][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 896.824419][T11063] loop3: detected capacity change from 0 to 4096 [ 897.179504][T11063] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 899.620671][ T4842] rpcbind: server 127.0.0.1 not responding, timed out [ 900.510931][T11113] jffs2: notice: (11113) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 908.162294][T11174] tmpfs: Unknown parameter 'quota' [ 911.175492][T11214] overlayfs: failed to clone lowerpath [ 913.911196][T11242] loop0: detected capacity change from 0 to 764 [ 915.868774][T10928] Bluetooth: hci4: command 0x0405 tx timeout [ 916.899343][T11263] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1487'. [ 919.983755][T11278] Process accounting resumed [ 921.802548][T11312] binder: 11305:11312 ioctl c00c620f 2000000003c0 returned -22 [ 922.981691][T11328] netlink: 'syz.2.1499': attribute type 4 has an invalid length. [ 922.990370][T11328] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 925.502427][T11359] loop6: detected capacity change from 0 to 8192 [ 927.857843][T11389] loop6: detected capacity change from 0 to 764 [ 928.685413][T10997] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 928.996699][T11392] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 929.090486][T11392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1511'. [ 931.659310][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.665687][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.712468][T11434] loop6: detected capacity change from 0 to 4096 [ 932.839557][T11434] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 935.494199][T11470] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 935.502520][T11470] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 935.511009][T11470] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 938.141244][T11498] tmpfs: Unknown parameter 'quota' [ 938.579831][T11502] loop6: detected capacity change from 0 to 512 [ 938.638156][T11502] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 938.728110][T11502] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 938.746785][T11502] Quota error (device loop6): write_blk: dquota write failed [ 938.754856][T11502] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 938.764128][T11502] Quota error (device loop6): write_blk: dquota write failed [ 938.771948][T11502] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 938.781908][T11502] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1543: Failed to acquire dquot type 1 [ 938.809109][T11502] EXT4-fs (loop6): 1 truncate cleaned up [ 938.814865][T11502] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 938.889368][T11506] Quota error (device loop6): write_blk: dquota write failed [ 938.897271][T11506] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 938.907302][T11506] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1543: Failed to acquire dquot type 1 [ 938.929253][T11506] Quota error (device loop6): write_blk: dquota write failed [ 938.939348][T11506] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 938.949307][T11506] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1543: Failed to acquire dquot type 1 [ 939.054654][T10926] EXT4-fs (loop6): unmounting filesystem. [ 939.093459][T11508] loop0: detected capacity change from 0 to 4096 [ 939.237771][T11508] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 948.648147][ T4323] Bluetooth: hci5: Frame reassembly failed (-84) [ 948.857313][T11604] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 949.163295][ T4323] Bluetooth: hci5: Frame reassembly failed (-84) [ 950.659045][T10928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 950.665970][ T4285] Bluetooth: hci5: command 0x1003 tx timeout [ 953.280880][T11634] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 953.289815][T11634] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 953.298268][T11634] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 955.753651][T11643] Process accounting resumed [ 960.258779][ T4285] Bluetooth: hci4: command 0x0405 tx timeout [ 960.877549][T11682] loop6: detected capacity change from 0 to 4096 [ 960.896221][T11682] EXT4-fs: inline encryption not supported [ 961.118813][T11682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 961.699783][T11682] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 961.878986][T11682] EXT4-fs (loop6): Test dummy encryption mode enabled [ 961.975757][T11682] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 964.622263][T10926] EXT4-fs (loop6): unmounting filesystem. [ 967.067465][T11728] tmpfs: Unknown parameter 'usrquota' [ 969.857684][T11794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1601'. [ 970.543257][ T26] audit: type=1326 audit(1787766978.169:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 970.877660][ T26] audit: type=1326 audit(1787766978.169:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 971.571902][T11823] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.340961][ T26] audit: type=1326 audit(1787766978.199:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 972.435969][ T26] audit: type=1326 audit(1787766978.199:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 972.528584][ T26] audit: type=1326 audit(1787766978.199:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 972.637098][ T26] audit: type=1326 audit(1787766978.199:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 972.728761][ T26] audit: type=1326 audit(1787766978.199:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 972.766395][ T26] audit: type=1326 audit(1787766978.209:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 973.055854][T11830] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.064863][T11830] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.073683][T11830] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.082690][T11830] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.432269][ T26] audit: type=1326 audit(1787766978.209:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 973.457585][ T26] audit: type=1326 audit(1787766978.209:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.1.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8faf9e0d9 code=0x7ffc0000 [ 973.483743][T11830] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.493029][T11830] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.502343][T11830] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.511362][T11830] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 977.413407][T11889] IPv6: NLM_F_CREATE should be specified when creating new route [ 977.436769][T11889] loop0: detected capacity change from 0 to 8 [ 980.464911][T11907] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 980.670484][T11913] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.679409][T11913] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.688193][T11913] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.697342][T11913] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.589697][T11913] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.598991][T11913] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.607914][T11913] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.616975][T11913] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.908309][T11782] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 984.393123][T11972] loop6: detected capacity change from 0 to 8192 [ 984.428888][T11971] rt1719: probe of 0-0049 failed with error -5 [ 984.442986][T11971] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 984.487588][T11973] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 984.568582][T11973] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 984.678551][T11972] Dev loop6: unable to read RDB block 8 [ 984.684392][T11972] loop6: unable to read partition table [ 984.690302][T11972] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 985.483814][T11983] loop0: detected capacity change from 0 to 64 [ 985.535642][T11983] MINIX-fs: bad superblock [ 993.408758][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.415166][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.117989][T12064] overlayfs: failed to clone lowerpath [ 998.702685][T12083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.710341][T12083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.870467][T12083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.878058][T12083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.565245][T10928] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1003.851902][T12139] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1005.395450][T12148] null_blk: disk nullb1 created [ 1011.630615][T10928] Bluetooth: hci4: command 0x0406 tx timeout [ 1014.955935][T12253] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.964812][T12253] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.973648][T12253] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.982496][T12253] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.002064][T12253] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.011311][T12253] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.020450][T12253] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.029474][T12253] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.136849][T12278] loop0: detected capacity change from 0 to 128 [ 1016.816769][T12278] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1016.829293][T12278] hpfs: filesystem error: improperly stopped [ 1016.835432][T12278] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1016.843222][T12278] hpfs: You really don't want any checks? You are crazy... [ 1016.851456][T12278] hpfs: hpfs_map_sector(): read error [ 1016.856903][T12278] hpfs: code page support is disabled [ 1016.889893][T12278] hpfs: hpfs_map_4sectors(): unaligned read [ 1016.896472][T12278] hpfs: hpfs_map_4sectors(): unaligned read [ 1016.902941][T12278] hpfs: filesystem error: unable to find root dir [ 1023.627498][T12338] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.636487][T12338] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.645374][T12338] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.654222][T12338] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.663391][T12338] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.744498][T12338] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.753539][T12338] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.762853][T12338] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.771970][T12338] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.780967][T12338] netdevsim netdevsim10 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.097402][T12410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1733'. [ 1030.488340][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 1030.488357][ T26] audit: type=1326 audit(1787767038.110:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1031.509075][ T26] audit: type=1326 audit(1787767038.110:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1031.678708][ T26] audit: type=1326 audit(1787767038.110:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1032.739854][ T26] audit: type=1326 audit(1787767038.110:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1032.804424][ T26] audit: type=1326 audit(1787767038.120:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1032.885828][ T26] audit: type=1326 audit(1787767038.120:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1032.956305][ T26] audit: type=1326 audit(1787767038.120:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1033.106594][ T26] audit: type=1326 audit(1787767038.120:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1033.745501][ T26] audit: type=1326 audit(1787767038.120:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1033.813701][ T26] audit: type=1326 audit(1787767038.120:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.0.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f320fb9e0d9 code=0x7ffc0000 [ 1035.088736][T12453] IPv6: NLM_F_CREATE should be specified when creating new route [ 1036.829903][T12461] loop0: detected capacity change from 0 to 4096 [ 1036.879747][T12461] EXT4-fs: inline encryption not supported [ 1036.885747][T12461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1036.961516][T12461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1037.015949][T12461] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1037.067913][T12461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1038.222999][T12461] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1042.059701][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1043.291596][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 1043.291612][ T26] audit: type=1800 audit(1787767050.920:638): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1757" name="idProduct" dev="configfs" ino=60857 res=0 errno=0 [ 1044.326294][ T26] audit: type=1800 audit(1787767050.960:639): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1757" name="UDC" dev="configfs" ino=60858 res=0 errno=0 [ 1044.717464][T12539] loop6: detected capacity change from 0 to 128 [ 1044.837471][T12539] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1044.849652][T12539] hpfs: filesystem error: improperly stopped [ 1044.855824][T12539] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1044.863761][T12539] hpfs: You really don't want any checks? You are crazy... [ 1044.872344][T12539] hpfs: hpfs_map_sector(): read error [ 1044.877896][T12539] hpfs: code page support is disabled [ 1044.890038][T12539] hpfs: hpfs_map_4sectors(): unaligned read [ 1044.896591][T12539] hpfs: hpfs_map_4sectors(): unaligned read [ 1044.902827][T12539] hpfs: filesystem error: unable to find root dir [ 1047.346352][T12564] loop0: detected capacity change from 0 to 4096 [ 1048.339293][T12564] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 1051.892018][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1773'. [ 1053.049040][ T26] audit: type=1326 audit(1787767060.640:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.125104][ T26] audit: type=1326 audit(1787767060.640:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.239661][ T26] audit: type=1326 audit(1787767060.640:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.279669][ T26] audit: type=1326 audit(1787767060.640:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.316823][ T26] audit: type=1326 audit(1787767060.640:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.420590][ T26] audit: type=1326 audit(1787767060.640:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.448117][ T26] audit: type=1326 audit(1787767060.640:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.703634][ T26] audit: type=1326 audit(1787767060.640:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.878115][ T26] audit: type=1326 audit(1787767060.650:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1053.973241][T12606] batman_adv: batadv0: Adding interface: macvtap1 [ 1054.004867][T12606] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.241396][ T26] audit: type=1326 audit(1787767060.650:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc933f9e0d9 code=0x7ffc0000 [ 1054.344251][T12612] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1780'. [ 1054.503217][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.512417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.828404][T12606] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1056.153803][T12626] loop6: detected capacity change from 0 to 256 [ 1058.813338][T12665] loop6: detected capacity change from 0 to 512 [ 1059.660903][T12665] ext4: Unknown parameter 'fowner<00000000000000000000' [ 1061.255235][T12297] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1065.554373][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 1065.554428][ T26] audit: type=1326 audit(1787767073.180:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1065.878234][ T26] audit: type=1326 audit(1787767073.250:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1065.902927][ T26] audit: type=1326 audit(1787767073.250:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1065.927559][ T26] audit: type=1326 audit(1787767073.300:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1065.952152][ T26] audit: type=1326 audit(1787767073.300:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1065.976897][ T26] audit: type=1326 audit(1787767073.310:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1066.001565][ T26] audit: type=1326 audit(1787767073.320:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1066.026591][ T26] audit: type=1326 audit(1787767073.340:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1066.173726][ T26] audit: type=1326 audit(1787767073.360:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1066.199351][ T26] audit: type=1326 audit(1787767073.380:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.1801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f066339e0d9 code=0x7ffc0000 [ 1071.121941][T12753] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1816'. [ 1073.965609][T12763] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1074.149181][T12763] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1075.434702][T12763] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1075.652345][T12763] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1076.636353][ C1] hrtimer: interrupt took 58751 ns [ 1078.483440][T12809] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1825'. [ 1078.870412][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 1079.160057][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1827'. [ 1079.232580][T12807] netlink: 'syz.0.1827': attribute type 1 has an invalid length. [ 1079.417087][T12812] openvswitch: netlink: Flow key attr not present in new flow. [ 1079.622513][T12818] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1081.588781][T12811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.596506][T12811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.933332][T12811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.941062][T12811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.893606][T12853] futex_wake_op: syz.2.1828 tries to shift op by 144; fix this program [ 1084.921622][T12855] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1089.943682][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 1089.943699][ T26] audit: type=1400 audit(1787767097.570:714): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=12892 comm="syz.0.1849" [ 1090.028834][T12893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1849'. [ 1097.012433][ T26] audit: type=1326 audit(1787767104.640:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.6.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcee6f9e0d9 code=0x0 [ 1097.203007][T12946] loop6: detected capacity change from 0 to 2048 [ 1097.239006][T12946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1099.373657][T12964] loop0: detected capacity change from 0 to 256 [ 1101.831702][T12964] FAT-fs (loop0): Directory bread(block 64) failed [ 1101.838320][T12964] FAT-fs (loop0): Directory bread(block 65) failed [ 1101.845041][T12964] FAT-fs (loop0): Directory bread(block 66) failed [ 1101.851664][T12964] FAT-fs (loop0): Directory bread(block 67) failed [ 1101.858347][T12964] FAT-fs (loop0): Directory bread(block 68) failed [ 1101.864938][T12964] FAT-fs (loop0): Directory bread(block 69) failed [ 1101.871587][T12964] FAT-fs (loop0): Directory bread(block 70) failed [ 1101.878126][T12964] FAT-fs (loop0): Directory bread(block 71) failed [ 1101.884828][T12964] FAT-fs (loop0): Directory bread(block 72) failed [ 1101.891482][T12964] FAT-fs (loop0): Directory bread(block 73) failed [ 1104.670882][T12998] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1874'. [ 1104.707715][T12998] loop0: detected capacity change from 0 to 512 [ 1105.329778][T12998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1105.537224][T12998] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1105.562305][T12998] EXT4-fs (loop0): Remounting filesystem read-only [ 1105.569693][T12998] EXT4-fs (loop0): 1 truncate cleaned up [ 1105.575452][T12998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1106.622422][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1107.099681][T13022] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1114.278044][T13095] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1115.941574][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.948085][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.128568][T13118] overlayfs: failed to clone upperpath [ 1119.779645][T13150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.787186][T13150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.816088][T13150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.823604][T13150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.606291][T13213] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1131.733195][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1940'. [ 1133.228268][T13286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1133.447243][T13289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1943'. [ 1136.252232][T13313] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1949'. [ 1137.744869][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1950'. [ 1141.416700][T13355] lo speed is unknown, defaulting to 1000 [ 1146.786176][T13412] futex_wake_op: syz.1.1969 tries to shift op by -1; fix this program [ 1147.712036][T13407] ieee802154 phy0 wpan0: encryption failed: -22 [ 1150.290367][T13418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1973'. [ 1153.091728][T13447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.099363][T13447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.133425][T13447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.141038][T13447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.151942][T13447] batman_adv: batadv0: Removing interface: macvtap1 [ 1155.220946][T13474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1988'. [ 1156.066829][T13486] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1157.841714][T13514] [ 1157.844141][T13514] ====================================================== [ 1157.851224][T13514] WARNING: possible circular locking dependency detected [ 1157.858295][T13514] syzkaller #0 Not tainted [ 1157.862755][T13514] ------------------------------------------------------ [ 1157.869805][T13514] syz.0.2004/13514 is trying to acquire lock: [ 1157.875907][T13514] ffffffff8d7b3730 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_frame_dw_max_video_frame_buffer_size_store+0x111/0x360 [ 1157.888760][T13514] [ 1157.888760][T13514] but task is already holding lock: [ 1157.896190][T13514] ffff88814d3b1778 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 1157.906039][T13514] [ 1157.906039][T13514] which lock already depends on the new lock. [ 1157.906039][T13514] [ 1157.916604][T13514] [ 1157.916604][T13514] the existing dependency chain (in reverse order) is: [ 1157.925665][T13514] [ 1157.925665][T13514] -> #3 (&p->frag_sem){++++}-{3:3}: [ 1157.933116][T13514] down_write_killable+0x45/0x90 [ 1157.938628][T13514] configfs_rmdir+0x3e0/0x980 [ 1157.943885][T13514] vfs_rmdir+0x34e/0x4a0 [ 1157.948703][T13514] do_rmdir+0x29a/0x5c0 [ 1157.953467][T13514] __x64_sys_unlinkat+0xc0/0xe0 [ 1157.958899][T13514] do_syscall_64+0x4c/0xa0 [ 1157.963902][T13514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1157.970900][T13514] [ 1157.970900][T13514] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 1157.979664][T13514] down_write+0x36/0x60 [ 1157.984386][T13514] configfs_depend_item_unlocked+0x14f/0x430 [ 1157.991051][T13514] usbg_make_tpg+0x1f3/0x580 [ 1157.996214][T13514] target_fabric_make_tpg+0xa0/0x6d0 [ 1158.002171][T13514] configfs_mkdir+0x511/0x9e0 [ 1158.007426][T13514] vfs_mkdir+0x386/0x570 [ 1158.012262][T13514] do_mkdirat+0x1d8/0x440 [ 1158.017202][T13514] __x64_sys_mkdir+0x6a/0x80 [ 1158.022370][T13514] do_syscall_64+0x4c/0xa0 [ 1158.027425][T13514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1158.033891][T13514] [ 1158.033891][T13514] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 1158.041582][T13514] __mutex_lock+0x12d/0xae0 [ 1158.046641][T13514] tcm_set_name+0x26/0x90 [ 1158.051535][T13514] function_make+0x195/0x350 [ 1158.056756][T13514] configfs_mkdir+0x511/0x9e0 [ 1158.062000][T13514] vfs_mkdir+0x386/0x570 [ 1158.066805][T13514] do_mkdirat+0x1d8/0x440 [ 1158.071699][T13514] __x64_sys_mkdir+0x6a/0x80 [ 1158.076846][T13514] do_syscall_64+0x4c/0xa0 [ 1158.081818][T13514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1158.088354][T13514] [ 1158.088354][T13514] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1158.096637][T13514] __lock_acquire+0x2d18/0x7c40 [ 1158.102080][T13514] lock_acquire+0x1bb/0x4a0 [ 1158.107136][T13514] __mutex_lock+0x12d/0xae0 [ 1158.112198][T13514] uvcg_frame_dw_max_video_frame_buffer_size_store+0x111/0x360 [ 1158.120303][T13514] configfs_write_iter+0x30b/0x400 [ 1158.125981][T13514] vfs_write+0x482/0x9a0 [ 1158.130809][T13514] ksys_write+0x14d/0x260 [ 1158.135693][T13514] do_syscall_64+0x4c/0xa0 [ 1158.140672][T13514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1158.147127][T13514] [ 1158.147127][T13514] other info that might help us debug this: [ 1158.147127][T13514] [ 1158.157391][T13514] Chain exists of: [ 1158.157391][T13514] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#23 --> &p->frag_sem [ 1158.157391][T13514] [ 1158.171995][T13514] Possible unsafe locking scenario: [ 1158.171995][T13514] [ 1158.179474][T13514] CPU0 CPU1 [ 1158.184859][T13514] ---- ---- [ 1158.190259][T13514] lock(&p->frag_sem); [ 1158.194446][T13514] lock(&sb->s_type->i_mutex_key#23); [ 1158.202547][T13514] lock(&p->frag_sem); [ 1158.209593][T13514] lock(gadget_subsys.su_mutex); [ 1158.214651][T13514] [ 1158.214651][T13514] *** DEADLOCK *** [ 1158.214651][T13514] [ 1158.222815][T13514] 4 locks held by syz.0.2004/13514: [ 1158.228077][T13514] #0: ffff88807f7e5268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 1158.237413][T13514] #1: ffff888148ac2460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 1158.246455][T13514] #2: ffff88802ed4d288 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x7d/0x400 [ 1158.256359][T13514] #3: ffff88814d3b1778 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 1158.266169][T13514] [ 1158.266169][T13514] stack backtrace: [ 1158.272345][T13514] CPU: 0 PID: 13514 Comm: syz.0.2004 Not tainted syzkaller #0 [ 1158.280446][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.290546][T13514] Call Trace: [ 1158.293865][T13514] [ 1158.296838][T13514] dump_stack_lvl+0x188/0x24e [ 1158.301576][T13514] ? load_image+0x410/0x410 [ 1158.306127][T13514] ? show_regs_print_info+0x12/0x12 [ 1158.311399][T13514] ? print_circular_bug+0x12b/0x1a0 [ 1158.316663][T13514] check_noncircular+0x296/0x330 [ 1158.321657][T13514] ? add_chain_block+0x9b0/0x9b0 [ 1158.326640][T13514] ? lockdep_lock+0xf1/0x1f0 [ 1158.331285][T13514] ? _find_first_zero_bit+0xd2/0x100 [ 1158.336708][T13514] __lock_acquire+0x2d18/0x7c40 [ 1158.341603][T13514] ? arch_stack_walk+0xf2/0x140 [ 1158.346536][T13514] ? verify_lock_unused+0x140/0x140 [ 1158.351785][T13514] ? mark_lock+0x94/0x320 [ 1158.356165][T13514] lock_acquire+0x1bb/0x4a0 [ 1158.360716][T13514] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x111/0x360 [ 1158.368476][T13514] ? __might_sleep+0xd0/0xd0 [ 1158.373149][T13514] ? read_lock_is_recursive+0x10/0x10 [ 1158.378566][T13514] ? verify_lock_unused+0x140/0x140 [ 1158.383810][T13514] __mutex_lock+0x12d/0xae0 [ 1158.388359][T13514] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x111/0x360 [ 1158.396117][T13514] ? __lock_acquire+0x7c40/0x7c40 [ 1158.401203][T13514] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x111/0x360 [ 1158.408978][T13514] ? mutex_lock_nested+0x10/0x10 [ 1158.413966][T13514] ? kstrtoull+0x12c/0x1c0 [ 1158.418431][T13514] uvcg_frame_dw_max_video_frame_buffer_size_store+0x111/0x360 [ 1158.426032][T13514] ? uvcg_frame_dw_max_video_frame_buffer_size_show+0x180/0x180 [ 1158.433714][T13514] ? down_read+0x1a8/0x2d0 [ 1158.438173][T13514] configfs_write_iter+0x30b/0x400 [ 1158.443336][T13514] ? uvcg_frame_dw_max_video_frame_buffer_size_show+0x180/0x180 [ 1158.451091][T13514] vfs_write+0x482/0x9a0 [ 1158.455434][T13514] ? file_end_write+0x250/0x250 [ 1158.460336][T13514] ? __fget_files+0x3fc/0x460 [ 1158.465053][T13514] ? __fdget_pos+0x2ae/0x360 [ 1158.469784][T13514] ? ksys_write+0x70/0x260 [ 1158.474251][T13514] ksys_write+0x14d/0x260 [ 1158.478620][T13514] ? __ia32_sys_read+0x80/0x80 [ 1158.483461][T13514] ? lockdep_hardirqs_on+0x94/0x140 [ 1158.488688][T13514] do_syscall_64+0x4c/0xa0 [ 1158.493142][T13514] ? clear_bhb_loop+0x60/0xb0 [ 1158.497855][T13514] ? clear_bhb_loop+0x60/0xb0 [ 1158.502589][T13514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1158.508540][T13514] RIP: 0033:0x7f320fb9e0d9 [ 1158.512983][T13514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.532826][T13514] RSP: 002b:00007f3210af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1158.541272][T13514] RAX: ffffffffffffffda RBX: 00007f320fe26090 RCX: 00007f320fb9e0d9 [ 1158.549270][T13514] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 0000000000000008 [ 1158.557275][T13514] RBP: 00007f320fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 1158.565298][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.573301][T13514] R13: 00007f320fe26128 R14: 00007f320fe26090 R15: 00007ffc048047b8 [ 1158.581311][T13514]