last executing test programs: 7.080163531s ago: executing program 3 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x203) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x109001, 0x1, 0x2}, 0x18) 6.9760079s ago: executing program 1 (id=185): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffc7b8) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 6.051055511s ago: executing program 1 (id=187): syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1ee, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) 6.050541071s ago: executing program 3 (id=188): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="42ede9dc810000000000000000000000000000005cae81efe24505fdde2f54", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000dc88000000f8ffffff00"/26], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0xe, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x19}, 0x94) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x4001) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r4, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=']) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) madvise(&(0x7f00006c5000/0x4000)=nil, 0x4000, 0xa86dc9dd36234221) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x4006}) 5.547415955s ago: executing program 1 (id=191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.817590609s ago: executing program 0 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x100}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000021001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.639424715s ago: executing program 1 (id=194): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x0, 0x1d4, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181000, 0x22) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) landlock_restrict_self(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x7c}, {0x6, 0x0, 0x8}]}) 4.609767117s ago: executing program 0 (id=195): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffc7b8) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 4.564924361s ago: executing program 2 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x5, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x21800}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0xfffffffffffffffe) 4.531843364s ago: executing program 3 (id=197): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x244, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r3, 0x0, 0x4004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x5, 0x40000006}, 0x3c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x45, 0xc11, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.346224948s ago: executing program 2 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x100000, 0x4, 0x8, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x54000, 0x200000, 0x7, 0x6, 0x8}) 3.239459857s ago: executing program 0 (id=199): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x5, 0x0, "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"}) 3.179203402s ago: executing program 3 (id=200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.066494772s ago: executing program 0 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$nfs4(0x0, 0x0, &(0x7f0000001a00), 0x10080, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, 0x0) 3.019318476s ago: executing program 2 (id=202): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.990444609s ago: executing program 1 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x100}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002100181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.378007812s ago: executing program 2 (id=204): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.0635278s ago: executing program 1 (id=205): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="42ede9dc810000000000000000000000000000005cae81efe24505fdde2f54", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000dc88000000f8ffffff00"/26], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0xe, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x19}, 0x94) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x4001) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r4, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) madvise(&(0x7f00006c5000/0x4000)=nil, 0x4000, 0xa86dc9dd36234221) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x4006}) 2.035912102s ago: executing program 3 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x5, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x21800}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0xfffffffffffffffe) 1.95221206s ago: executing program 0 (id=207): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffc7b8) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 1.854197558s ago: executing program 2 (id=208): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x244, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r3, 0x0, 0x4004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x5, 0x40000006}, 0x3c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x45, 0xc11, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.663472325s ago: executing program 0 (id=209): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES8, @ANYRESDEC, @ANYRES64=0x0], 0x9, 0xc56, &(0x7f0000000f40)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x4, 0x3) 160.547856ms ago: executing program 3 (id=210): unshare(0x62040200) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = semget(0x1, 0x5, 0x6b4) semop(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x1) 0s ago: executing program 2 (id=211): r0 = socket$alg(0x26, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 65.456576][ T5757] cgroup: Unknown subsys name 'net' [ 65.559467][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.965114][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.264923][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.273737][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.281835][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.290354][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.298368][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.322964][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.364183][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.374125][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.393042][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.401118][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.409307][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.432956][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.522485][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.531928][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.543315][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.554332][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.567891][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.576362][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.577369][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.591686][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.599614][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.615533][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.625523][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.633114][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.833594][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 68.867617][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 69.054179][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.061435][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.069433][ T5768] bridge_slave_0: entered allmulticast mode [ 69.076366][ T5768] bridge_slave_0: entered promiscuous mode [ 69.089302][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.096539][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.103939][ T5771] bridge_slave_0: entered allmulticast mode [ 69.111591][ T5771] bridge_slave_0: entered promiscuous mode [ 69.119901][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.127449][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.135167][ T5771] bridge_slave_1: entered allmulticast mode [ 69.142651][ T5771] bridge_slave_1: entered promiscuous mode [ 69.150147][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.157910][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.165343][ T5768] bridge_slave_1: entered allmulticast mode [ 69.172046][ T5768] bridge_slave_1: entered promiscuous mode [ 69.235370][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.262236][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.274824][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.286222][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 69.297541][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.366171][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 69.381436][ T5768] team0: Port device team_slave_0 added [ 69.391363][ T5768] team0: Port device team_slave_1 added [ 69.408204][ T5771] team0: Port device team_slave_0 added [ 69.417664][ T5771] team0: Port device team_slave_1 added [ 69.505723][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.512766][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.539475][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.551956][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.560771][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.587140][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.612102][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.619361][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.646108][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.658555][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.668985][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.700042][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.779528][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.787647][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.795130][ T5778] bridge_slave_0: entered allmulticast mode [ 69.802102][ T5778] bridge_slave_0: entered promiscuous mode [ 69.810387][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.817742][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.825528][ T5778] bridge_slave_1: entered allmulticast mode [ 69.832495][ T5778] bridge_slave_1: entered promiscuous mode [ 69.849127][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.857085][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.865382][ T5776] bridge_slave_0: entered allmulticast mode [ 69.872212][ T5776] bridge_slave_0: entered promiscuous mode [ 69.912403][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.920611][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.930079][ T5776] bridge_slave_1: entered allmulticast mode [ 69.938307][ T5776] bridge_slave_1: entered promiscuous mode [ 69.963995][ T5771] hsr_slave_0: entered promiscuous mode [ 69.973583][ T5771] hsr_slave_1: entered promiscuous mode [ 69.985563][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.029107][ T5768] hsr_slave_0: entered promiscuous mode [ 70.037248][ T5768] hsr_slave_1: entered promiscuous mode [ 70.044338][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.053815][ T5768] Cannot create hsr debugfs directory [ 70.063577][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.084447][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.134202][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.163361][ T5778] team0: Port device team_slave_0 added [ 70.207959][ T5778] team0: Port device team_slave_1 added [ 70.230393][ T5776] team0: Port device team_slave_0 added [ 70.266665][ T5776] team0: Port device team_slave_1 added [ 70.279044][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.289983][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.318779][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.351342][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.358785][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.386200][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.403690][ T5082] Bluetooth: hci0: command tx timeout [ 70.427126][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.435566][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.463968][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.483417][ T5082] Bluetooth: hci1: command tx timeout [ 70.508034][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.516632][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.546732][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.643536][ T5082] Bluetooth: hci2: command tx timeout [ 70.666833][ T5776] hsr_slave_0: entered promiscuous mode [ 70.673539][ T5776] hsr_slave_1: entered promiscuous mode [ 70.680076][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.688322][ T5776] Cannot create hsr debugfs directory [ 70.715512][ T5778] hsr_slave_0: entered promiscuous mode [ 70.722240][ T5778] hsr_slave_1: entered promiscuous mode [ 70.729930][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.737723][ T5082] Bluetooth: hci3: command tx timeout [ 70.742776][ T5778] Cannot create hsr debugfs directory [ 70.909896][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.948292][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.999320][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.026715][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.056355][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.066050][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.101882][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.121048][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.159793][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.171351][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.199460][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.226730][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.296287][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.307173][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.320212][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.350585][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.404932][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.449875][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.518389][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.526064][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.540480][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.548905][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.586999][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.599455][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.671495][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.687852][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.704759][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.712011][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.738303][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.749327][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.756755][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.769757][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.772785][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.780029][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.784517][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.803224][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.810462][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.870827][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.937228][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.944710][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.957400][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.964651][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.988711][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.171073][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.299553][ T5768] veth0_vlan: entered promiscuous mode [ 72.326312][ T5768] veth1_vlan: entered promiscuous mode [ 72.428994][ T5768] veth0_macvtap: entered promiscuous mode [ 72.483796][ T5082] Bluetooth: hci0: command tx timeout [ 72.498357][ T5768] veth1_macvtap: entered promiscuous mode [ 72.531018][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.547144][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.563675][ T5082] Bluetooth: hci1: command tx timeout [ 72.579713][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.608463][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.647834][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.657381][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.666692][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.676088][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.720285][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.733084][ T5082] Bluetooth: hci2: command tx timeout [ 72.749353][ T5771] veth0_vlan: entered promiscuous mode [ 72.803475][ T5082] Bluetooth: hci3: command tx timeout [ 72.815041][ T5771] veth1_vlan: entered promiscuous mode [ 72.835515][ T5776] veth0_vlan: entered promiscuous mode [ 72.905316][ T5776] veth1_vlan: entered promiscuous mode [ 72.930847][ T5778] veth0_vlan: entered promiscuous mode [ 72.945972][ T5771] veth0_macvtap: entered promiscuous mode [ 72.948573][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.976078][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.005652][ T5771] veth1_macvtap: entered promiscuous mode [ 73.025680][ T5778] veth1_vlan: entered promiscuous mode [ 73.047991][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.065688][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.091609][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.105255][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.118273][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.151705][ T5778] veth0_macvtap: entered promiscuous mode [ 73.165544][ T5778] veth1_macvtap: entered promiscuous mode [ 73.178349][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.190487][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.205206][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.215610][ T5776] veth0_macvtap: entered promiscuous mode [ 73.247711][ T5776] veth1_macvtap: entered promiscuous mode [ 73.276695][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.290372][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.300199][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.310407][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.338949][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.358093][ T5825] syz.3.4[5825]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.371703][ T5825] loop3: detected capacity change from 0 to 164 [ 73.379489][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.400231][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.416122][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.438369][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.477069][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.481512][ T5827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.511308][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.521510][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.543290][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.564329][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.589303][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.613823][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.624206][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.637002][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.662291][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.673091][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.686292][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.701252][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.716689][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.728714][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.744173][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.797814][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.823585][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.834015][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.852701][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.863476][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.882622][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.894684][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.943580][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.964696][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.978190][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.996842][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.155215][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.166920][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.191873][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.214762][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.235027][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.257824][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.323673][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.339205][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.416882][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.418876][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.440863][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.441842][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.568766][ T5082] Bluetooth: hci0: command tx timeout [ 74.643798][ T5082] Bluetooth: hci1: command tx timeout [ 74.812743][ T5082] Bluetooth: hci2: command tx timeout [ 74.884295][ T5082] Bluetooth: hci3: command tx timeout [ 74.893815][ T5833] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 74.966525][ T5838] 9pnet_fd: p9_fd_create_tcp (5838): problem connecting socket to 127.0.0.1 [ 75.158799][ T5844] loop3: detected capacity change from 0 to 128 [ 75.184630][ T5844] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.225674][ T5844] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.544112][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 75.557156][ T5833] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 75.566627][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.583817][ T5833] usb 2-1: config 0 descriptor?? [ 75.592077][ T5835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.667234][ T5850] loop2: detected capacity change from 0 to 1024 [ 75.678745][ T5844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.702862][ T5850] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 75.709782][ T5848] xt_TCPMSS: Only works on TCP SYN packets [ 75.785890][ T5851] process 'syz.3.6' launched './file1' with NULL argv: empty string added [ 76.064487][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.089754][ T5833] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 76.100925][ T5833] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 76.108681][ T5833] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 76.122474][ T5833] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 76.131050][ T5833] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 76.187684][ T5833] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 76.299505][ T5861] loop2: detected capacity change from 0 to 1024 [ 76.306571][ T5832] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.363855][ T5862] tmpfs: Unknown parameter 'nr_blo' [ 76.367946][ T5861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.492740][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 76.493135][ T5806] usb 2-1: USB disconnect, device number 2 [ 76.502838][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.519335][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.536305][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.567143][ T5832] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.588783][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.618559][ T5832] usb 1-1: config 0 descriptor?? [ 76.635504][ T5861] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.11: bad entry in directory: inode out of bounds - offset=60, inode=13, rec_len=16, size=1024 fake=0 [ 76.662701][ T5082] Bluetooth: hci0: command tx timeout [ 76.723789][ T5082] Bluetooth: hci1: command tx timeout [ 76.787678][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.884097][ T5082] Bluetooth: hci2: command tx timeout [ 76.935768][ T5870] loop2: detected capacity change from 0 to 1024 [ 76.962068][ T5870] hfsplus: invalid file type 0120411 for inode 2 [ 76.973178][ T5082] Bluetooth: hci3: command tx timeout [ 76.981523][ T5870] hfsplus: failed to load root directory [ 77.068517][ T5832] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 77.083864][ T5832] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 77.117089][ T5832] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5 [ 77.198491][ T5873] loop2: detected capacity change from 0 to 2048 [ 77.216908][ T5873] ======================================================= [ 77.216908][ T5873] WARNING: The mand mount option has been deprecated and [ 77.216908][ T5873] and is ignored by this kernel. Remove the mand [ 77.216908][ T5873] option from the mount to silence this warning. [ 77.216908][ T5873] ======================================================= [ 77.293263][ T5832] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 77.369414][ T5832] usb 1-1: USB disconnect, device number 2 [ 77.478361][ T5873] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 77.551634][ T5873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.598400][ T5882] loop3: detected capacity change from 0 to 2048 [ 77.628035][ T5879] fido_id[5879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 77.634754][ T5882] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 77.699357][ T5882] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 77.728439][ T5882] UDF-fs: Scanning with blocksize 512 failed [ 77.799299][ T5882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.237734][ T5890] 9pnet_fd: p9_fd_create_tcp (5890): problem connecting socket to 127.0.0.1 [ 78.486507][ T5893] loop3: detected capacity change from 0 to 1024 [ 78.626042][ T28] audit: type=1800 audit(1771641530.779:2): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 79.944007][ T5909] loop0: detected capacity change from 0 to 2048 [ 80.044463][ T5909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.088859][ T5910] tmpfs: Unknown parameter 'nr_blo' [ 81.432724][ T5823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.574865][ T5932] loop3: detected capacity change from 0 to 512 [ 81.591820][ T5932] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.637590][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 81.649326][ T5823] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 81.672688][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.673199][ T5932] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.32: inode has both inline data and extents flags [ 81.699259][ T5823] usb 2-1: config 0 descriptor?? [ 81.722624][ T5932] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.32: couldn't read orphan inode 15 (err -117) [ 81.738544][ T5937] loop0: detected capacity change from 0 to 2048 [ 81.744771][ T5932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.760800][ T5937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.799767][ T5932] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.32: inode has both inline data and extents flags [ 81.956438][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.301463][ T5823] wacom 0003:056A:0094.0003: unknown main item tag 0x0 [ 82.370907][ T5823] wacom 0003:056A:0094.0003: unknown main item tag 0x0 [ 82.418592][ T5823] wacom 0003:056A:0094.0003: unknown main item tag 0x0 [ 82.544046][ T5823] wacom 0003:056A:0094.0003: Using device in hidraw-only mode [ 82.809157][ T5823] wacom 0003:056A:0094.0003: hidraw0: USB HID vff.fc Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 83.067221][ T5823] usb 2-1: USB disconnect, device number 3 [ 83.107229][ T5953] loop3: detected capacity change from 0 to 1024 [ 83.143951][ T5953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.165008][ T5953] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.230763][ T5953] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 83.399864][ T5953] EXT4-fs error (device loop3): ext4_free_blocks:6692: comm syz.3.39: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.437136][ T5954] fido_id[5954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 83.490197][ T5953] EXT4-fs (loop3): Remounting filesystem read-only [ 83.515287][ T5953] EXT4-fs (loop3): 1 orphan inode deleted [ 83.553815][ T5953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.583718][ T2912] EXT4-fs (loop3): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 83.624971][ T2912] Quota error (device loop3): write_blk: dquota write failed [ 83.633402][ T5967] loop0: detected capacity change from 0 to 2048 [ 83.653844][ T2912] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list [ 83.688349][ T5967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.818684][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.329998][ T5985] loop2: detected capacity change from 0 to 1024 [ 85.432722][ T5823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.450454][ T5985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.489496][ T5985] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.493158][ T5992] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 85.518449][ T5985] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.51: inode has both inline data and extents flags [ 85.634834][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.666701][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.705107][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.725260][ T5823] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 85.757522][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.792294][ T5823] usb 4-1: config 0 descriptor?? [ 86.060813][ T6007] loop1: detected capacity change from 0 to 16 [ 86.139424][ T6007] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.264883][ T1189] cfg80211: failed to load regulatory.db [ 87.495858][ T6026] loop1: detected capacity change from 0 to 512 [ 87.588802][ T6028] hub 8-0:1.0: USB hub found [ 87.595619][ T6028] hub 8-0:1.0: 1 port detected [ 87.700098][ T6026] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.033873][ T6026] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 88.173666][ T6026] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.385625][ T6036] loop0: detected capacity change from 0 to 2048 [ 88.397417][ T6036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.447908][ T6026] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.64: corrupted inode contents [ 88.493651][ T6026] EXT4-fs (loop1): Remounting filesystem read-only [ 88.501362][ T6026] EXT4-fs (loop1): 1 truncate cleaned up [ 88.525750][ T42] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.564075][ T6038] syzkaller0: entered promiscuous mode [ 88.577023][ T6038] syzkaller0: entered allmulticast mode [ 88.579138][ T5823] wacom 0003:056A:0018.0004: unknown main item tag 0x0 [ 88.589794][ T42] Quota error (device loop1): write_blk: dquota write failed [ 88.610401][ T5823] wacom 0003:056A:0018.0004: unknown main item tag 0x4 [ 88.617035][ T42] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 88.658224][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 88.665688][ T5823] wacom 0003:056A:0018.0004: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 88.667532][ T42] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.716310][ T5823] wacom 0003:056A:0018.0004: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.3-1/input0 [ 88.738148][ T5823] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0018.0004/input/input6 [ 88.743302][ T42] Quota error (device loop1): write_blk: dquota write failed [ 88.771563][ T42] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 88.786419][ T42] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 88.810272][ T42] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 88.853140][ T42] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 88.886086][ T6026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.007498][ T5823] usb 4-1: USB disconnect, device number 2 [ 89.075459][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.716117][ T6064] loop3: detected capacity change from 0 to 128 [ 90.752716][ T6064] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.814779][ T6064] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.879946][ T6064] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.316361][ T6064] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 91.331232][ T28] audit: type=1800 audit(1771641543.499:3): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.75" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 91.570111][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.699779][ T6101] loop1: detected capacity change from 0 to 2048 [ 91.724219][ T6101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.902599][ C0] hrtimer: interrupt took 54136 ns [ 92.693833][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.89'. [ 92.703536][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 94.363005][ T28] audit: type=1326 audit(1771641546.529:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.3.101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff40659c629 code=0x0 [ 94.497859][ T6150] loop0: detected capacity change from 0 to 512 [ 94.506302][ T6150] EXT4-fs: Ignoring removed nobh option [ 94.511998][ T6150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.537807][ T6150] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.105: iget: bad i_size value: 38620345925642 [ 94.552033][ T6150] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.105: couldn't read orphan inode 15 (err -117) [ 94.580436][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.647290][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.803244][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.002784][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 95.023252][ T786] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 95.039888][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.056864][ T786] usb 3-1: config 0 has no interface number 0 [ 95.075874][ T786] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 95.092703][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.117977][ T786] usb 3-1: Product: syz [ 95.133590][ T786] usb 3-1: Manufacturer: syz [ 95.138260][ T786] usb 3-1: SerialNumber: syz [ 95.156485][ T786] usb 3-1: config 0 descriptor?? [ 95.166673][ T6170] tmpfs: Bad value for 'nr_blocks' [ 95.170676][ T786] uvcvideo 3-1:0.31: Found Unit with invalid ID 0 [ 95.232537][ T786] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 95.248984][ T28] audit: type=1326 audit(1771641547.419:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3619c629 code=0x0 [ 95.277843][ T786] usb 3-1: No valid video chain found. [ 95.585223][ T786] usb 3-1: USB disconnect, device number 2 [ 97.195063][ T6187] 9pnet_fd: p9_fd_create_tcp (6187): problem connecting socket to 127.0.0.1 [ 98.291963][ T6201] loop1: detected capacity change from 0 to 8 [ 98.358534][ T6201] SQUASHFS error: zlib decompression failed, data probably corrupt [ 98.399524][ T6201] SQUASHFS error: Failed to read block 0x9b: -5 [ 98.417043][ T6201] SQUASHFS error: Unable to read metadata cache entry [99] [ 98.912832][ T6201] SQUASHFS error: Unable to read inode 0x127 [ 99.519142][ T28] audit: type=1326 audit(1771641551.689:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3619c629 code=0x0 [ 99.743073][ T6218] loop3: detected capacity change from 0 to 2048 [ 99.763790][ T6219] tmpfs: Bad value for 'nr_blocks' [ 99.809123][ T6218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.095751][ T6252] loop0: detected capacity change from 0 to 8 [ 103.159556][ T6252] SQUASHFS error: zlib decompression failed, data probably corrupt [ 103.188699][ T6252] SQUASHFS error: Failed to read block 0x9b: -5 [ 103.197314][ T6252] SQUASHFS error: Unable to read metadata cache entry [99] [ 103.207289][ T6252] SQUASHFS error: Unable to read inode 0x127 [ 103.371247][ T5759] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.579683][ T6260] 9pnet_fd: p9_fd_create_tcp (6260): problem connecting socket to 127.0.0.1 [ 103.823596][ T28] audit: type=1326 audit(1771641555.969:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae09d9c629 code=0x0 [ 104.637662][ T6278] tmpfs: Bad value for 'nr_blocks' [ 106.386773][ T6292] loop1: detected capacity change from 0 to 2048 [ 106.400561][ T6292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.866051][ T6301] loop2: detected capacity change from 0 to 8 [ 107.937994][ T6301] SQUASHFS error: zlib decompression failed, data probably corrupt [ 108.002069][ T6301] SQUASHFS error: Failed to read block 0x9b: -5 [ 108.013851][ T6301] SQUASHFS error: Unable to read metadata cache entry [99] [ 108.032628][ T6301] SQUASHFS error: Unable to read inode 0x127 [ 108.405444][ T6309] 9pnet_fd: p9_fd_create_tcp (6309): problem connecting socket to 127.0.0.1 [ 108.758299][ T28] audit: type=1326 audit(1771641560.879:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.2.149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb873b9c629 code=0x0 [ 111.178642][ T6342] tmpfs: Bad value for 'nr_blocks' [ 111.704977][ T6352] loop2: detected capacity change from 0 to 8 [ 111.777974][ T6352] SQUASHFS error: zlib decompression failed, data probably corrupt [ 111.789853][ T6352] SQUASHFS error: Failed to read block 0x9b: -5 [ 111.986011][ T6352] SQUASHFS error: Unable to read metadata cache entry [99] [ 112.002403][ T6352] SQUASHFS error: Unable to read inode 0x127 [ 112.898040][ T28] audit: type=1326 audit(1771641565.069:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb873b9c629 code=0x0 [ 113.618857][ T6368] 9pnet_fd: p9_fd_create_tcp (6368): problem connecting socket to 127.0.0.1 [ 114.561545][ T6384] loop0: detected capacity change from 0 to 2048 [ 114.588234][ T6384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.901704][ T6394] tmpfs: Bad value for 'nr_blocks' [ 115.874404][ T6402] loop3: detected capacity change from 0 to 8 [ 116.150365][ T6402] SQUASHFS error: zlib decompression failed, data probably corrupt [ 116.450514][ T6402] SQUASHFS error: Failed to read block 0x9b: -5 [ 116.573998][ T6402] SQUASHFS error: Unable to read metadata cache entry [99] [ 116.581347][ T6402] SQUASHFS error: Unable to read inode 0x127 [ 117.444096][ T28] audit: type=1326 audit(1771641569.559:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.3.177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff40659c629 code=0x0 [ 119.195030][ T6434] 9pnet_fd: p9_fd_create_tcp (6434): problem connecting socket to 127.0.0.1 [ 119.242372][ T6439] loop1: detected capacity change from 0 to 16 [ 119.291172][ T6439] erofs: (device loop1): mounted with root inode @ nid 36. [ 119.378708][ T6439] syz.1.187: attempt to access beyond end of device [ 119.378708][ T6439] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 119.466065][ T6444] tmpfs: Bad value for 'nr_blocks' [ 119.474434][ T6439] syz.1.187: attempt to access beyond end of device [ 119.474434][ T6439] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 119.552632][ T28] audit: type=1800 audit(1771641571.679:11): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.187" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 120.594283][ T6461] loop1: detected capacity change from 0 to 8 [ 120.664963][ T6461] SQUASHFS error: zlib decompression failed, data probably corrupt [ 120.685222][ T6461] SQUASHFS error: Failed to read block 0x9b: -5 [ 120.691537][ T6461] SQUASHFS error: Unable to read metadata cache entry [99] [ 120.718275][ T6461] SQUASHFS error: Unable to read inode 0x127 [ 120.866752][ T6470] loop3: detected capacity change from 0 to 2048 [ 121.308280][ T6470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.791636][ T28] audit: type=1326 audit(1771641573.959:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.1.194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3619c629 code=0x0 [ 124.700620][ T6512] loop2: detected capacity change from 0 to 2048 [ 124.792908][ T6512] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.049304][ T6514] loop0: detected capacity change from 0 to 2048 [ 125.166975][ T6514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.268984][ T28] audit: type=1800 audit(1771641577.429:13): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.209" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 125.270576][ T6514] ------------[ cut here ]------------ [ 125.297052][ T6514] WARNING: CPU: 0 PID: 6514 at fs/udf/truncate.c:224 udf_truncate_extents+0xd87/0xef0 [ 125.307010][ T6514] Modules linked in: [ 125.310959][ T6514] CPU: 0 PID: 6514 Comm: syz.0.209 Not tainted syzkaller #0 [ 125.318575][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.329008][ T6514] RIP: 0010:udf_truncate_extents+0xd87/0xef0 [ 125.335097][ T6514] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 73 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a9 67 89 fe <0f> 0b e9 6a ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e8 f3 ff ff 4c [ 125.355015][ T6514] RSP: 0018:ffffc90018167880 EFLAGS: 00010287 [ 125.361117][ T6514] RAX: ffffffff82fdad67 RBX: 1ffff1100e8635a3 RCX: 0000000000080000 [ 125.369274][ T6514] RDX: ffffc9000bc49000 RSI: 000000000000a969 RDI: 000000000000a96a [ 125.377645][ T6514] RBP: ffffc90018167a48 R08: ffff88804b5f0000 R09: 0000000000000002 [ 125.385800][ T6514] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 125.395011][ T6514] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 125.403243][ T6514] FS: 00007fae0acb76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 125.412222][ T6514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.418893][ T6514] CR2: 0000001b2d423ffc CR3: 000000002fe55000 CR4: 00000000003506f0 [ 125.426950][ T6514] Call Trace: [ 125.430267][ T6514] [ 125.433595][ T6514] ? udf_discard_prealloc+0x5c0/0x5c0 [ 125.439028][ T6514] ? udf_write_failed+0x178/0x1b0 [ 125.444165][ T6514] ? __lock_acquire+0x7d40/0x7d40 [ 125.449233][ T6514] ? do_raw_spin_lock+0x11f/0x2c0 [ 125.454482][ T6514] ? __rwlock_init+0xe0/0x150 [ 125.459321][ T6514] ? do_raw_spin_unlock+0x121/0x230 [ 125.464654][ T6514] udf_write_failed+0x180/0x1b0 [ 125.469543][ T6514] udf_direct_IO+0x1c3/0x200 [ 125.474270][ T6514] generic_file_direct_write+0x1d4/0x3e0 [ 125.479955][ T6514] __generic_file_write_iter+0x11b/0x230 [ 125.485702][ T6514] ? udf_file_write_iter+0x29c/0x610 [ 125.491036][ T6514] udf_file_write_iter+0x2b5/0x610 [ 125.497148][ T6514] do_iter_write+0x738/0xc30 [ 125.501799][ T6514] ? vfs_iter_write+0xa0/0xa0 [ 125.506793][ T6514] ? rcu_read_lock_any_held+0xb4/0x140 [ 125.512312][ T6514] do_pwritev+0x241/0x3a0 [ 125.516841][ T6514] ? do_preadv+0x390/0x390 [ 125.521313][ T6514] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 125.527978][ T6514] ? lock_chain_count+0x20/0x20 [ 125.532971][ T6514] ? lockdep_hardirqs_on+0x98/0x150 [ 125.538203][ T6514] ? __x64_sys_pwritev2+0xbe/0x100 [ 125.543418][ T6514] do_syscall_64+0x55/0xa0 [ 125.547872][ T6514] ? clear_bhb_loop+0x40/0x90 [ 125.552689][ T6514] ? clear_bhb_loop+0x40/0x90 [ 125.557492][ T6514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.563475][ T6514] RIP: 0033:0x7fae09d9c629 [ 125.567923][ T6514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.587634][ T6514] RSP: 002b:00007fae0acb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 125.596150][ T6514] RAX: ffffffffffffffda RBX: 00007fae0a015fa0 RCX: 00007fae09d9c629 [ 125.605108][ T6514] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 125.613354][ T6514] RBP: 00007fae09e32b39 R08: 0000000000000004 R09: 0000000000000003 [ 125.621536][ T6514] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 125.629742][ T6514] R13: 00007fae0a016038 R14: 00007fae0a015fa0 R15: 00007ffc0b9c2b78 [ 125.637803][ T6514] [ 125.640845][ T6514] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.648130][ T6514] CPU: 0 PID: 6514 Comm: syz.0.209 Not tainted syzkaller #0 [ 125.655405][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.665453][ T6514] Call Trace: [ 125.668726][ T6514] [ 125.671664][ T6514] dump_stack_lvl+0x18c/0x250 [ 125.676349][ T6514] ? show_regs_print_info+0x20/0x20 [ 125.681637][ T6514] ? load_image+0x400/0x400 [ 125.686149][ T6514] panic+0x2dc/0x730 [ 125.690475][ T6514] ? bpf_jit_dump+0xd0/0xd0 [ 125.694984][ T6514] __warn+0x2e0/0x470 [ 125.698957][ T6514] ? udf_truncate_extents+0xd87/0xef0 [ 125.704323][ T6514] ? udf_truncate_extents+0xd87/0xef0 [ 125.709695][ T6514] report_bug+0x2be/0x4f0 [ 125.714022][ T6514] ? udf_truncate_extents+0xd87/0xef0 [ 125.719386][ T6514] ? udf_truncate_extents+0xd87/0xef0 [ 125.724748][ T6514] ? udf_truncate_extents+0xd89/0xef0 [ 125.730112][ T6514] handle_bug+0xcf/0x120 [ 125.734353][ T6514] exc_invalid_op+0x1a/0x50 [ 125.738859][ T6514] asm_exc_invalid_op+0x1a/0x20 [ 125.743712][ T6514] RIP: 0010:udf_truncate_extents+0xd87/0xef0 [ 125.749686][ T6514] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 73 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a9 67 89 fe <0f> 0b e9 6a ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e8 f3 ff ff 4c [ 125.769290][ T6514] RSP: 0018:ffffc90018167880 EFLAGS: 00010287 [ 125.775438][ T6514] RAX: ffffffff82fdad67 RBX: 1ffff1100e8635a3 RCX: 0000000000080000 [ 125.783404][ T6514] RDX: ffffc9000bc49000 RSI: 000000000000a969 RDI: 000000000000a96a [ 125.791454][ T6514] RBP: ffffc90018167a48 R08: ffff88804b5f0000 R09: 0000000000000002 [ 125.799426][ T6514] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 125.807391][ T6514] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 125.815446][ T6514] ? udf_truncate_extents+0xd87/0xef0 [ 125.820831][ T6514] ? udf_discard_prealloc+0x5c0/0x5c0 [ 125.826198][ T6514] ? udf_write_failed+0x178/0x1b0 [ 125.831209][ T6514] ? __lock_acquire+0x7d40/0x7d40 [ 125.836225][ T6514] ? do_raw_spin_lock+0x11f/0x2c0 [ 125.841245][ T6514] ? __rwlock_init+0xe0/0x150 [ 125.846099][ T6514] ? do_raw_spin_unlock+0x121/0x230 [ 125.851331][ T6514] udf_write_failed+0x180/0x1b0 [ 125.856175][ T6514] udf_direct_IO+0x1c3/0x200 [ 125.860766][ T6514] generic_file_direct_write+0x1d4/0x3e0 [ 125.866483][ T6514] __generic_file_write_iter+0x11b/0x230 [ 125.872104][ T6514] ? udf_file_write_iter+0x29c/0x610 [ 125.877389][ T6514] udf_file_write_iter+0x2b5/0x610 [ 125.882538][ T6514] do_iter_write+0x738/0xc30 [ 125.887137][ T6514] ? vfs_iter_write+0xa0/0xa0 [ 125.891808][ T6514] ? rcu_read_lock_any_held+0xb4/0x140 [ 125.897276][ T6514] do_pwritev+0x241/0x3a0 [ 125.901610][ T6514] ? do_preadv+0x390/0x390 [ 125.906032][ T6514] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 125.912006][ T6514] ? lock_chain_count+0x20/0x20 [ 125.916940][ T6514] ? lockdep_hardirqs_on+0x98/0x150 [ 125.922135][ T6514] ? __x64_sys_pwritev2+0xbe/0x100 [ 125.927254][ T6514] do_syscall_64+0x55/0xa0 [ 125.931672][ T6514] ? clear_bhb_loop+0x40/0x90 [ 125.936340][ T6514] ? clear_bhb_loop+0x40/0x90 [ 125.941009][ T6514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.946893][ T6514] RIP: 0033:0x7fae09d9c629 [ 125.951299][ T6514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.971001][ T6514] RSP: 002b:00007fae0acb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 125.979445][ T6514] RAX: ffffffffffffffda RBX: 00007fae0a015fa0 RCX: 00007fae09d9c629 [ 125.987503][ T6514] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 125.995509][ T6514] RBP: 00007fae09e32b39 R08: 0000000000000004 R09: 0000000000000003 [ 126.003475][ T6514] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 126.011438][ T6514] R13: 00007fae0a016038 R14: 00007fae0a015fa0 R15: 00007ffc0b9c2b78 [ 126.019416][ T6514] [ 126.022847][ T6514] Kernel Offset: disabled [ 126.027215][ T6514] Rebooting in 86400 seconds..