last executing test programs: 3m38.914470181s ago: executing program 2 (id=1510): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x7, 0x80, 0x101, 0x7, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x64, 0x0, 0x0, 0x858dea5049a491d6, 0x0, @private=0xa010102, @multicast2}}}}) 3m38.762292983s ago: executing program 2 (id=1512): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 3m38.664945701s ago: executing program 2 (id=1514): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 3m37.764227274s ago: executing program 2 (id=1516): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 3m37.485873516s ago: executing program 2 (id=1521): socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18) socket(0x200000100000011, 0x803, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2000030, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = semget(0x0, 0x0, 0x200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, 0x0, 0x40000) semctl$GETNCNT(r4, 0x2, 0xe, &(0x7f0000000340)=""/111) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) open(&(0x7f0000000240)='./file1\x00', 0x10b801, 0x20) 3m36.097761938s ago: executing program 2 (id=1525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 3m20.873202735s ago: executing program 32 (id=1525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 45.804604946s ago: executing program 3 (id=2095): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="93", 0x1e}], 0x1, 0x8, 0x8000, 0x13) 44.362288022s ago: executing program 3 (id=2098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/4092, 0xffc) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r5, 0xffffffffffffffff, 0x0) 39.498518163s ago: executing program 3 (id=2104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2040400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 35.092059348s ago: executing program 3 (id=2115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r4, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) setpriority(0x3, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), 0x0) 34.618340836s ago: executing program 4 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, 0x0, &(0x7f0000000040)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd57087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155934378491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afebc369ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e7fa095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 33.664523583s ago: executing program 3 (id=2122): socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18) socket(0x200000100000011, 0x803, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2000030, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = semget(0x0, 0x0, 0x200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, 0x0, 0x40000) semctl$GETNCNT(r4, 0x2, 0xe, &(0x7f0000000340)=""/111) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 33.632319155s ago: executing program 4 (id=2123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) r7 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r7, 0x40189206, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000180)="ca59b928b749d890ac5cd191cc1ca34f2adb5234f45dcf280dba15c95de65da9bcd73281c72d635cd214fdd914808b1e8dbc3d5412b4e4b249428435599982383dd11ad1a86c73f98c4387c26b9e255dee112e11206a8e41b69ce5f36460270a2a5a66a57bc22c476e778fc35929c670930bba8c4ab81440c0ed09eb97fce65a5c24fabd6e1d9217512b8ecb76dbfce362f0908f170de9a4b427aeca0c1632f220a789c7a8fb172eeab15110f93271063c75611683e6a4fb1038e1b8a047", 0xbe}], 0x1) 32.634480625s ago: executing program 4 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x83f, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r6, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 32.602753248s ago: executing program 3 (id=2127): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r0 = socket(0x15, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x995e1e5a5df85597, @local}, 0xffffffffffffff85) recvmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x33d7, 0x80002) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='dvmrp0\x00', 0x10) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1ff, 0x280102) readv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000000400)=""/235, 0xeb}], 0x3) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x202808, 0x10100, 0x0, 0x3, 0x0, r1}, &(0x7f0000000540), 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x2000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x4c, 0x1e, 0x109, 0x2, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, "d8ac"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}}, 0x44090) 29.682551613s ago: executing program 4 (id=2130): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r1 = open(&(0x7f0000000480)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x30002802, 0x800, 0x8, 0x5, 0x1, 0x0, 0x0, 0x80, 0x46}}, 0x50) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x20000000007, 0xf) read(r2, &(0x7f0000019440)=""/102391, 0x18ff7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 26.568815034s ago: executing program 4 (id=2138): socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18) socket(0x200000100000011, 0x803, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2000030, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = semget(0x0, 0x0, 0x200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, 0x0, 0x40000) semctl$GETNCNT(r4, 0x2, 0xe, &(0x7f0000000340)=""/111) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 25.48827363s ago: executing program 4 (id=2139): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16.872988203s ago: executing program 33 (id=2127): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r0 = socket(0x15, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x995e1e5a5df85597, @local}, 0xffffffffffffff85) recvmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x33d7, 0x80002) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='dvmrp0\x00', 0x10) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1ff, 0x280102) readv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000000400)=""/235, 0xeb}], 0x3) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x202808, 0x10100, 0x0, 0x3, 0x0, r1}, &(0x7f0000000540), 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x2000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x4c, 0x1e, 0x109, 0x2, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, "d8ac"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}}, 0x44090) 9.753453616s ago: executing program 34 (id=2139): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.446645121s ago: executing program 0 (id=2179): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) 8.305615162s ago: executing program 0 (id=2181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x83f, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r7, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.678946153s ago: executing program 0 (id=2184): iopl(0x3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340), 0x2, 0x482, &(0x7f0000001040)="$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") mkdir(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') lseek(r1, 0x4b, 0x1) 5.419966204s ago: executing program 0 (id=2187): syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f00000001c0)='./file0\x00', 0x4c0, &(0x7f00000029c0)=ANY=[@ANYBLOB='session=0x0000000000000043,dmode=0x0000000000000006,map=acorn,mode=0x0000000000000007,sbsector=0x0000000004008001,check=strict,check=relaxed,overriderockperm,sbsector=0x0000000000000000,utf8,sbsector=0x0000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES64], 0x2, 0x976, &(0x7f0000000980)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 5.260053927s ago: executing program 1 (id=2188): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400000000000000", @ANYRES32=r1, @ANYBLOB="0198000000000000200012800800"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x7c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x6, "fd"}, {0x1}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 4.985132749s ago: executing program 1 (id=2189): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a010000000000000030aa2ae2c084a0ea1000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4.882273688s ago: executing program 0 (id=2190): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) 4.784786575s ago: executing program 1 (id=2191): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x26) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f00000011c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r8}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x0, 0x409ee07df186b7eb}}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) 4.591901291s ago: executing program 0 (id=2192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x1d, 0x7ff, @remote, 0x1000}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000680)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0xfffd, 0x0, @remote, 0x800000}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 4.238665389s ago: executing program 35 (id=2192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x1d, 0x7ff, @remote, 0x1000}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000680)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0xfffd, 0x0, @remote, 0x800000}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 3.285302306s ago: executing program 1 (id=2196): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) fchdir(r1) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) ftruncate(r6, 0x6) 2.911156266s ago: executing program 5 (id=2198): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0xfe, 0xc11, &(0x7f0000000d00)="$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") sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x8010) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 2.468794942s ago: executing program 5 (id=2199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/221, 0xdd}, 0x1}], 0x1, 0x2001, 0x0) 2.091294592s ago: executing program 5 (id=2200): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) 2.014546328s ago: executing program 5 (id=2201): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYRES8, @ANYRES8, @ANYRESHEX=r4, @ANYRESOCT, @ANYRES32=r3, @ANYRESHEX=r3, @ANYRES8=r4, @ANYRESDEC=r3, @ANYRESHEX, @ANYRES8=r3, @ANYRESHEX=r3, @ANYRES8=r3, @ANYRESOCT=0x0, @ANYRESHEX=r4, @ANYRES16], 0x5, 0x1514, &(0x7f0000002c80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x800000000003) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f0000001a00)={[], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfe\xff\xff\xff\xff\xff\xff\xff\xff@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe1\x9dy\xe5\x9c\xb75\n]\xa6R\x9b\x14\xd4\x96\x91M\xf8\x87\x03wu/\xbb\xa1\x15\x995f\x0eavN%V\xd8\xdf\x10-\x82\xc7:\xa7;D\x1a$\xac\x96\xda\xc9<\x8bM\x9e\xa1U\"\x86f\xa9\xd2\x10te\xc8\x9c\x14K\x92\xb9_\x10\xdf0%\x84\xa6z\xd0\xeb\x8e6\x03L\xc0^\x8f\x18z\xc1\xd4C\xaa\xcfU&\xe6\x8e\x87>=\xf43\x9eM|\xeb02\tm\xb2Lz\a\xbf\xf2\xa1lR~\xc9jk\x1a&\xff\xa6\xc0.\xa0\xad\x82[\xfeKc\x80\x80\x8f\xc8\xfcS=\x93\xf0\x03\xa1eq\n\xab\xf7\xe2\x19\xb4f\x187\xd7\x11\xa5\x12\xe6\xab\xb5\xe1\x8c\xd8\xcb\x8ej\xb4\x7f\xe3s\x99fkA\xe1+\xf1\xa8\xfa\x84:K\xcb \xa7\x06\xd6\xfd\x90\x01\xce\xf8M\xaa+}\xe4\xb8O\xe3\xc4\xb4\xc8\x14\xd6z\xb3\xd6\xf3`Z\x1c\xb2n\xed)/\x05\x1d\xff\xaf\x14?L\x13\xf2\x80\xc2U\xfc{'}}, {@subj_type={'subj_type', 0x3d, 'ext\x1e\xbaT\x02H4\x00'}}]}, 0x6, 0x512, &(0x7f00000014c0)="$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") ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.389551369s ago: executing program 1 (id=2202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000040)=0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 434.715096ms ago: executing program 1 (id=2203): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(r0, r0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) fcntl$setstatus(r3, 0x4, 0x40000) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="26e9d50952ff9b23b2c8aa8c67bf33ce"], 0x24}, 0x1, 0x0, 0x0, 0x8089}, 0x80) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x19) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9b1b8035379a1d30b7606e65", @ANYRES16=0x0, @ANYBLOB="010300000000fedbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000c349eeb31595edee908c73145e247a4d6d09cb6367a791828bc0bfac26035590ebd3847822631f0eb1c65468bf4dad89d54351708cdfb3e909a34973a8c86bf9062715da97e120982821b5d73c1871526fff96e90b5da43a876929eadf07afb5cd254b1a3ccde8440e9bba251fb3f60d2ba5247920d6e21310eeed131acc2db6ded36c905a60fbbfc8", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fddbdf2507000000080001004200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001800000090000000400cc001400040076657468300000000000000000000000080005000f000000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000700)='\x13g\x02\x8c\xed\xca\xa1\xe8=\x9a\xaa\x8c\xe40xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) 0s ago: executing program 5 (id=2205): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) kernel console output (not intermixed with test programs): 0 [ 112.250388][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.259385][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.270304][ T4288] device veth0_vlan entered promiscuous mode [ 112.276191][ T4304] Bluetooth: hci3: command 0x040f tx timeout [ 112.282314][ T4304] Bluetooth: hci0: command 0x040f tx timeout [ 112.283018][ T4299] Bluetooth: hci2: command 0x040f tx timeout [ 112.324606][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.333744][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.344710][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.353710][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.360136][ T4300] Bluetooth: hci1: command 0x040f tx timeout [ 112.363453][ T4299] Bluetooth: hci4: command 0x040f tx timeout [ 112.387219][ T4288] device veth1_vlan entered promiscuous mode [ 112.446642][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.459537][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.467963][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.477104][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.492966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.501940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.516589][ T4286] device veth0_macvtap entered promiscuous mode [ 112.582830][ T4286] device veth1_macvtap entered promiscuous mode [ 112.586180][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.606394][ T4288] device veth0_macvtap entered promiscuous mode [ 112.609881][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.629913][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.634515][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.651221][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.652124][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.662665][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.681135][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.691328][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.703548][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.717481][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.725770][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.735710][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.743692][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.752146][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.761705][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.770400][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.779593][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.804261][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.819872][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.829858][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.841115][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.851942][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.862408][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.873509][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.894427][ T4286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.906138][ T4286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.914857][ T4286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.924861][ T4286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.934851][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.943906][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.953631][ T4288] device veth1_macvtap entered promiscuous mode [ 112.968317][ T321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.976732][ T321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.990315][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.009175][ T321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.023412][ T321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.030531][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.044700][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.054805][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.065917][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.077870][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.088815][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.099230][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.111081][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.122750][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.142748][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.158526][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.173900][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.191121][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.202000][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.212229][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.223568][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.233799][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.245032][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.254990][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.266658][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.277837][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.306689][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.322113][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.335097][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.344234][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.353756][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.422189][ T4288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.441345][ T4288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.455444][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.464128][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.464318][ T4288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.494192][ T4288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.682933][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.693748][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.718871][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.727961][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.736728][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.215709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.366195][ T4299] Bluetooth: hci2: command 0x0419 tx timeout [ 114.426495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 114.436663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.450949][ T4300] Bluetooth: hci4: command 0x0419 tx timeout [ 114.457037][ T4300] Bluetooth: hci0: command 0x0419 tx timeout [ 114.463056][ T4300] Bluetooth: hci3: command 0x0419 tx timeout [ 114.469776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.480875][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 114.491787][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.539977][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.569247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.606027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.614683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.622947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 114.631185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 114.639946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 114.661021][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.701579][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.942940][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.842471][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.850589][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.930639][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.190075][ T4425] Bluetooth: MGMT ver 1.22 [ 119.328731][ T4456] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.590413][ T4477] binder_alloc: 4476: pid 4476 spamming oneway? 2 buffers allocated for a total size of 5120 [ 125.144917][ T4510] xt_SECMARK: invalid mode: 2 [ 125.369723][ T4364] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.475054][ T4517] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.32'. [ 125.490086][ T4517] netlink: del zone limit has 4 unknown bytes [ 126.230559][ T4364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.272182][ T4364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.317651][ T4364] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 126.356603][ T4364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.400738][ T4364] usb 4-1: config 0 descriptor?? [ 127.172972][ T4364] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 127.201088][ T4364] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 127.447132][ T4364] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x4D [ 127.964187][ T4364] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 127.990192][ T4364] usb 4-1: USB disconnect, device number 2 [ 128.343295][ T4536] fido_id[4536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 128.536679][ T4542] comedi comedi3: dt2817: I/O port conflict (0xa,5) [ 129.019126][ T4548] 9pnet_fd: Insufficient options for proto=fd [ 131.256957][ T4556] sctp: failed to load transform for md5: -2 [ 131.822066][ T4576] misc userio: No port type given on /dev/userio [ 131.990238][ T4576] misc userio: Invalid payload size [ 132.123101][ T4575] binder: 4571:4575 unknown command 1074553619 [ 132.129616][ T4575] binder: 4571:4575 ioctl c0306201 200000000540 returned -22 [ 132.435686][ T4430] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.532022][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 132.606818][ T4430] usb 4-1: device descriptor read/64, error -71 [ 132.758311][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.765040][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.708059][ T4430] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.135536][ T4430] usb 4-1: device descriptor read/64, error -71 [ 136.202355][ T26] audit: type=1800 audit(1754935292.742:2): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.57" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 136.202526][ T4612] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 136.231744][ T4612] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 136.241352][ T4612] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 136.258107][ T4430] usb usb4-port1: attempt power cycle [ 136.344612][ T4612] syz.0.57 (4612) used greatest stack depth: 20200 bytes left [ 137.199157][ T4613] ALSA: mixer_oss: invalid OSS volume '' [ 137.255924][ T4430] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.378666][ T4626] Zero length message leads to an empty skb [ 137.857201][ T4626] block device autoloading is deprecated and will be removed. [ 138.184544][ T4430] usb 4-1: device not accepting address 5, error -71 [ 138.360826][ T4635] atomic_op ffff8880540f0198 conn xmit_atomic 0000000000000000 [ 139.796566][ T4633] netlink: 224 bytes leftover after parsing attributes in process `syz.0.64'. [ 141.558830][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 143.257091][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 143.463207][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 144.670442][ T4686] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 146.734741][ T4682] capability: warning: `syz.4.77' uses deprecated v2 capabilities in a way that may be insecure [ 147.338641][ T4716] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET) [ 150.133436][ T4747] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 150.145862][ T4747] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 150.165642][ T4747] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 150.172189][ T4747] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 150.278750][ T4747] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 150.285250][ T4747] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 150.295231][ T4747] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 150.304466][ T4747] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 150.311653][ T4747] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 150.318608][ T4747] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 150.325067][ T4747] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 150.885754][ T4747] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 152.900758][ T4782] netlink: 224 bytes leftover after parsing attributes in process `syz.3.109'. [ 153.685641][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.382711][ T4805] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 154.410320][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.422054][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.434272][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.445863][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.500135][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 154.529989][ T4808] vivid-001: disconnect [ 154.564301][ T7] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 154.614877][ T7] usb 3-1: Manufacturer: syz [ 154.684098][ T7] usb 3-1: config 0 descriptor?? [ 155.196828][ T7] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 155.245056][ T4802] vivid-001: reconnect [ 155.262091][ T7] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 155.407903][ T7] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 157.617252][ T7] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 159.222965][ T4330] usb 3-1: USB disconnect, device number 2 [ 161.762192][ T4344] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 161.957925][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.008442][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.043142][ T4344] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 162.061824][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.093598][ T4344] usb 1-1: config 0 descriptor?? [ 163.003261][ T4344] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 163.694547][ T4344] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 163.786208][ T4344] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x4D [ 164.438359][ T4344] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 164.528567][ T4344] usb 1-1: USB disconnect, device number 2 [ 164.770588][ T4950] fido_id[4950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 175.507423][ T5182] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 176.872645][ T5220] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 178.978157][ T5257] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 183.910757][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 188.986732][ T5373] binder: BINDER_SET_CONTEXT_MGR already set [ 188.993084][ T5373] binder: 5370:5373 ioctl 4018620d 200000000040 returned -16 [ 192.753144][ T5440] atomic_op ffff888145b64998 conn xmit_atomic 0000000000000000 [ 194.198055][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204422][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.947179][ T5482] atomic_op ffff8880303b9198 conn xmit_atomic 0000000000000000 [ 196.095607][ T952] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 197.210311][ T952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.299544][ T952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.453252][ T952] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 197.589151][ T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.772671][ T952] usb 4-1: config 0 descriptor?? [ 198.345753][ T952] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 198.355708][ T952] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 198.998341][ T952] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x4D [ 199.180204][ T952] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 199.198827][ T952] cp2112: probe of 0003:10C4:EA90.0004 failed with error -32 [ 199.254965][ T952] usb 4-1: USB disconnect, device number 7 [ 201.238019][ T5536] atomic_op ffff88807d3b5998 conn xmit_atomic 0000000000000000 [ 201.714995][ T5534] binder: BINDER_SET_CONTEXT_MGR already set [ 201.852069][ T5518] fido_id[5518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 201.855862][ T5534] binder: 5530:5534 ioctl 4018620d 200000000040 returned -16 [ 202.618247][ T5549] binder: BINDER_SET_CONTEXT_MGR already set [ 202.635615][ T5549] binder: 5548:5549 ioctl 4018620d 2000000000c0 returned -16 [ 204.150675][ T4293] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.347917][ T4293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.266882][ T4293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.277043][ T4293] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 205.286355][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.346897][ T4293] usb 4-1: config 0 descriptor?? [ 205.354188][ T5586] binder: BINDER_SET_CONTEXT_MGR already set [ 205.382260][ T5586] binder: 5585:5586 ioctl 4018620d 2000000000c0 returned -16 [ 205.407122][ T5586] binder: BINDER_SET_CONTEXT_MGR already set [ 205.413381][ T5586] binder: 5585:5586 ioctl 4018620d 200000000040 returned -16 [ 205.770799][ T4293] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 205.791361][ T4293] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 205.979420][ T4293] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x4D [ 206.337018][ T4293] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 206.353456][ T4293] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 206.752103][ T4293] usb 4-1: USB disconnect, device number 8 [ 206.867414][ T5624] fido_id[5624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 207.183989][ T5632] binder: BINDER_SET_CONTEXT_MGR already set [ 207.233521][ T5632] binder: 5631:5632 ioctl 4018620d 2000000000c0 returned -16 [ 207.464013][ T5634] binder: BINDER_SET_CONTEXT_MGR already set [ 207.577770][ T5634] binder: 5631:5634 ioctl 4018620d 200000000040 returned -16 [ 209.465731][ T4430] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 209.671150][ T4430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.753117][ T4430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.883763][ T4430] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 210.002781][ T4430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.131441][ T4430] usb 3-1: config 0 descriptor?? [ 210.597702][ T4430] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 210.628428][ T4430] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 210.668326][ T5696] binder: BINDER_SET_CONTEXT_MGR already set [ 210.692483][ T5696] binder: 5695:5696 ioctl 4018620d 2000000000c0 returned -16 [ 210.806062][ T4430] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 210.980340][ T5709] binder: BINDER_SET_CONTEXT_MGR already set [ 210.989196][ T5709] binder: 5707:5709 ioctl 4018620d 200000000100 returned -16 [ 211.016140][ T4430] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 211.040405][ T4430] cp2112: probe of 0003:10C4:EA90.0006 failed with error -32 [ 211.084459][ T4430] usb 3-1: USB disconnect, device number 3 [ 212.098736][ T5712] fido_id[5712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 212.305673][ T5726] binder: BINDER_SET_CONTEXT_MGR already set [ 212.335704][ T5726] binder: 5725:5726 ioctl 4018620d 2000000000c0 returned -16 [ 212.984622][ T5754] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 212.985553][ T4330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.187903][ T4330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.204939][ T4330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.223835][ T4330] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 213.248481][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.264418][ T4330] usb 3-1: config 0 descriptor?? [ 213.685163][ T4330] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 213.709678][ T4330] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 213.884148][ T4330] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 214.086235][ T4330] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 214.099165][ T4330] cp2112: probe of 0003:10C4:EA90.0007 failed with error -32 [ 214.111686][ T4330] usb 3-1: USB disconnect, device number 4 [ 214.380759][ T5798] fido_id[5798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 214.758816][ T5816] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 216.635711][ T4430] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.857093][ T4430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.889788][ T4430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.910511][ T4430] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 216.921541][ T5860] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 216.931158][ T4430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.967383][ T4430] usb 3-1: config 0 descriptor?? [ 217.387681][ T4430] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 217.432037][ T4430] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 217.594143][ T4430] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 217.832766][ T4430] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 218.073365][ T4430] cp2112: probe of 0003:10C4:EA90.0008 failed with error -32 [ 218.136523][ T4430] usb 3-1: USB disconnect, device number 5 [ 218.309650][ T5882] fido_id[5882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 218.558580][ T5894] binder: BINDER_SET_CONTEXT_MGR already set [ 218.564610][ T5894] binder: 5893:5894 ioctl 4018620d 2000000000c0 returned -16 [ 218.611230][ T5894] binder: BINDER_SET_CONTEXT_MGR already set [ 218.637830][ T5894] binder: 5893:5894 ioctl 4018620d 200000000040 returned -16 [ 218.856369][ T5903] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 220.755988][ T5951] binder: BINDER_SET_CONTEXT_MGR already set [ 220.782705][ T5951] binder: 5950:5951 ioctl 4018620d 200000000100 returned -16 [ 220.990627][ T5955] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 224.545718][ T4330] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 224.592432][ T6004] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 224.752002][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.777559][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.788394][ T4330] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 224.797592][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.830732][ T4330] usb 1-1: config 0 descriptor?? [ 224.980082][ T6022] binder: BINDER_SET_CONTEXT_MGR already set [ 225.000129][ T6022] binder: 6019:6022 ioctl 4018620d 200000000100 returned -16 [ 225.026932][ T6022] binder: BINDER_SET_CONTEXT_MGR already set [ 225.034391][ T6022] binder: 6019:6022 ioctl 4018620d 2000000002c0 returned -16 [ 225.304010][ T4330] usbhid 1-1:0.0: can't add hid device: -71 [ 225.310892][ T4330] usbhid: probe of 1-1:0.0 failed with error -71 [ 225.325351][ T4330] usb 1-1: USB disconnect, device number 3 [ 226.765018][ T6058] binder: BINDER_SET_CONTEXT_MGR already set [ 226.790683][ T6058] binder: 6057:6058 ioctl 4018620d 2000000000c0 returned -16 [ 226.842555][ T6058] binder: BINDER_SET_CONTEXT_MGR already set [ 226.871079][ T6058] binder: 6057:6058 ioctl 4018620d 200000000040 returned -16 [ 227.174472][ T6064] atomic_op ffff888077165998 conn xmit_atomic 0000000000000000 [ 228.135560][ T4293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 228.427413][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.445533][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.455328][ T4293] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 229.065310][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.161190][ T4293] usb 5-1: config 0 descriptor?? [ 229.305839][ T6080] binder: BINDER_SET_CONTEXT_MGR already set [ 229.322130][ T6080] binder: 6079:6080 ioctl 4018620d 2000000002c0 returned -16 [ 229.502887][ T6093] binder: BINDER_SET_CONTEXT_MGR already set [ 229.509922][ T6093] binder: 6092:6093 ioctl 4018620d 2000000000c0 returned -16 [ 229.527253][ T6093] binder: BINDER_SET_CONTEXT_MGR already set [ 229.533624][ T6093] binder: 6092:6093 ioctl 4018620d 200000000040 returned -16 [ 229.662010][ T6095] gfs2: gfs2 mount does not exist [ 230.280509][ T4293] usbhid 5-1:0.0: can't add hid device: -71 [ 230.287339][ T4293] usbhid: probe of 5-1:0.0 failed with error -71 [ 230.296120][ T4293] usb 5-1: USB disconnect, device number 2 [ 232.275786][ T4302] Bluetooth: hci3: command 0x0406 tx timeout [ 232.281850][ T4302] Bluetooth: hci1: command 0x0406 tx timeout [ 232.287979][ T4300] Bluetooth: hci2: command 0x0406 tx timeout [ 232.288012][ T4299] Bluetooth: hci4: command 0x0406 tx timeout [ 232.804888][ T6136] binder: BINDER_SET_CONTEXT_MGR already set [ 232.826858][ T6136] binder: 6135:6136 ioctl 4018620d 200000000100 returned -16 [ 232.842174][ T6136] binder: BINDER_SET_CONTEXT_MGR already set [ 232.866678][ T6136] binder: 6135:6136 ioctl 4018620d 2000000002c0 returned -16 [ 236.120162][ T952] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 236.325626][ T952] usb 3-1: Using ep0 maxpacket: 32 [ 236.351151][ T952] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 236.394948][ T6190] Can't find a SQUASHFS superblock on nullb0 [ 236.446461][ T952] usb 3-1: config 0 has no interface number 0 [ 236.609043][ T952] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 236.760868][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.909547][ T952] usb 3-1: Product: syz [ 236.930667][ T952] usb 3-1: Manufacturer: syz [ 236.961008][ T952] usb 3-1: SerialNumber: syz [ 236.988536][ T952] usb 3-1: config 0 descriptor?? [ 237.058067][ T952] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 237.086231][ T6198] binder: BINDER_SET_CONTEXT_MGR already set [ 237.126363][ T6198] binder: 6195:6198 ioctl 4018620d 200000000040 returned -16 [ 237.345030][ T952] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 237.680516][ T952] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 237.769000][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 238.008769][ T952] usb 3-1: USB disconnect, device number 6 [ 238.183573][ T952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 238.236309][ T952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 238.297102][ T952] quatech2 3-1:0.51: device disconnected [ 241.188165][ T6286] atomic_op ffff8880545cb198 conn xmit_atomic 0000000000000000 [ 241.973769][ T6304] binder: BINDER_SET_CONTEXT_MGR already set [ 241.985645][ T6304] binder: 6303:6304 ioctl 4018620d 200000000040 returned -16 [ 243.324142][ T6333] binder: BINDER_SET_CONTEXT_MGR already set [ 243.330501][ T6333] binder: 6332:6333 ioctl 4018620d 200000000040 returned -16 [ 243.450252][ T6336] binder: BINDER_SET_CONTEXT_MGR already set [ 243.463249][ T6336] binder: 6335:6336 ioctl 4018620d 200000000040 returned -16 [ 243.740762][ T6340] binder: BINDER_SET_CONTEXT_MGR already set [ 243.741235][ T6340] binder: 6339:6340 ioctl 4018620d 200000000100 returned -16 [ 243.813698][ T6340] binder: BINDER_SET_CONTEXT_MGR already set [ 243.813853][ T6340] binder: 6339:6340 ioctl 4018620d 2000000002c0 returned -16 [ 245.422312][ T6356] netlink: 64 bytes leftover after parsing attributes in process `syz.2.671'. [ 246.137969][ T6388] binder: BINDER_SET_CONTEXT_MGR already set [ 246.144919][ T6388] binder: 6387:6388 ioctl 4018620d 200000000040 returned -16 [ 246.217226][ T6389] binder: 6387:6389 unknown command 1074553619 [ 246.225575][ T6389] binder: 6387:6389 ioctl c0306201 200000000540 returned -22 [ 246.666763][ T6396] Cannot find add_set index 0 as target [ 247.149715][ T4983] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 247.355610][ T4983] usb 5-1: device descriptor read/64, error -71 [ 247.640945][ T4983] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 247.805704][ T4983] usb 5-1: device descriptor read/64, error -71 [ 247.936474][ T4983] usb usb5-port1: attempt power cycle [ 248.406177][ T4983] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 248.467509][ T4983] usb 5-1: device descriptor read/8, error -71 [ 248.728462][ T6444] binder: 6443:6444 ioctl 4018620d 0 returned -22 [ 248.746773][ T4983] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 248.788361][ T4983] usb 5-1: device descriptor read/8, error -71 [ 249.011412][ T4983] usb usb5-port1: unable to enumerate USB device [ 250.153647][ T6478] binder: 6477:6478 ioctl 4018620d 0 returned -22 [ 250.198720][ T6478] binder: BINDER_SET_CONTEXT_MGR already set [ 250.220008][ T6478] binder: 6477:6478 ioctl 4018620d 200000000040 returned -16 [ 250.621585][ T6492] binder: BINDER_SET_CONTEXT_MGR already set [ 250.631125][ T6492] binder: 6491:6492 ioctl 4018620d 200000000100 returned -16 [ 250.643838][ T6492] binder: BINDER_SET_CONTEXT_MGR already set [ 250.653629][ T6492] binder: 6491:6492 ioctl 4018620d 2000000002c0 returned -16 [ 252.112340][ T6535] Can't find a SQUASHFS superblock on nullb0 [ 252.904548][ T6542] binder: BINDER_SET_CONTEXT_MGR already set [ 252.904563][ T6542] binder: 6540:6542 ioctl 4018620d 2000000002c0 returned -16 [ 253.662786][ T6574] Cannot find add_set index 0 as target [ 254.020106][ T4983] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 254.358243][ T4983] usb 5-1: Using ep0 maxpacket: 16 [ 254.369910][ T4983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.437462][ T4983] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.479899][ T4983] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 254.509185][ T4983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.557706][ T4983] usb 5-1: config 0 descriptor?? [ 254.814846][ T4983] usb 5-1: USB disconnect, device number 7 [ 255.549981][ T6607] binder: BINDER_SET_CONTEXT_MGR already set [ 255.565542][ T6607] binder: 6604:6607 ioctl 4018620d 2000000000c0 returned -16 [ 255.589326][ T6607] binder: BINDER_SET_CONTEXT_MGR already set [ 255.638396][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.645006][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.715844][ T6607] binder: 6604:6607 ioctl 4018620d 200000000040 returned -16 [ 256.621885][ T6625] binder: BINDER_SET_CONTEXT_MGR already set [ 256.651319][ T6625] binder: 6624:6625 ioctl 4018620d 2000000000c0 returned -16 [ 256.677841][ T6625] binder: BINDER_SET_CONTEXT_MGR already set [ 256.700716][ T6625] binder: 6624:6625 ioctl 4018620d 200000000040 returned -16 [ 257.022909][ T6639] Cannot find add_set index 0 as target [ 263.304434][ T6734] binder: BINDER_SET_CONTEXT_MGR already set [ 263.998467][ T6734] binder: 6733:6734 ioctl 4018620d 200000000040 returned -16 [ 266.516192][ T6767] UBIFS error (pid: 6767): cannot open "/dev/sg0", error -22 [ 266.518592][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.818'. [ 267.427843][ T6773] atomic_op ffff888145b67198 conn xmit_atomic 0000000000000000 [ 275.379106][ T6933] atomic_op ffff888075178998 conn xmit_atomic 0000000000000000 [ 276.639813][ T6963] "syz.1.893" (6963) uses obsolete ecb(arc4) skcipher [ 277.709880][ T6974] atomic_op ffff88807baac998 conn xmit_atomic 0000000000000000 [ 278.431289][ T7000] tmpfs: Unknown parameter 'usrquota' [ 280.477897][ T7036] atomic_op ffff888054c87198 conn xmit_atomic 0000000000000000 [ 283.720309][ T7069] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.928' sets config #8 [ 284.858153][ T7097] atomic_op ffff8880269d8198 conn xmit_atomic 0000000000000000 [ 286.478492][ T7110] binder: BINDER_SET_CONTEXT_MGR already set [ 286.484524][ T7110] binder: 7109:7110 ioctl 4018620d 2000000000c0 returned -16 [ 286.500977][ T7110] binder: BINDER_SET_CONTEXT_MGR already set [ 286.521963][ T7110] binder: 7109:7110 ioctl 4018620d 200000000040 returned -16 [ 286.857817][ T7118] gfs2: gfs2 mount does not exist [ 289.059410][ T7151] atomic_op ffff8880288e5198 conn xmit_atomic 0000000000000000 [ 289.708515][ T7158] binder: BINDER_SET_CONTEXT_MGR already set [ 289.745576][ T7158] binder: 7157:7158 ioctl 4018620d 2000000000c0 returned -16 [ 289.778018][ T7158] binder: 7157:7158 ioctl c0306201 0 returned -14 [ 289.794164][ T7164] binder: 7159:7164 ioctl 4018620d 0 returned -22 [ 289.813827][ T7158] binder: BINDER_SET_CONTEXT_MGR already set [ 289.863030][ T7158] binder: 7157:7158 ioctl 4018620d 200000000040 returned -16 [ 289.871343][ T7161] binder: 7159:7161 ioctl c0306201 2000000003c0 returned -22 [ 290.062566][ T7169] gfs2: gfs2 mount does not exist [ 291.997503][ T4430] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 292.657233][ T4430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.738085][ T7204] atomic_op ffff888023c89198 conn xmit_atomic 0000000000000000 [ 292.988612][ T4430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.998568][ T4430] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 293.007687][ T4430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.021729][ T4430] usb 5-1: config 0 descriptor?? [ 293.146044][ T1044] block nbd0: Attempted send on invalid socket [ 293.153628][ T1044] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.169995][ T7211] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32 [ 293.960186][ T4430] usbhid 5-1:0.0: can't add hid device: -32 [ 294.502287][ T4430] usbhid: probe of 5-1:0.0 failed with error -32 [ 295.919174][ T4430] usb 5-1: USB disconnect, device number 8 [ 296.221467][ T7245] gfs2: gfs2 mount does not exist [ 296.917748][ T7264] atomic_op ffff888029093198 conn xmit_atomic 0000000000000000 [ 297.614492][ T7282] netlink: 'syz.2.1002': attribute type 12 has an invalid length. [ 297.631208][ T7282] netlink: 'syz.2.1002': attribute type 29 has an invalid length. [ 297.653314][ T7282] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1002'. [ 298.572794][ T7290] binder: BINDER_SET_CONTEXT_MGR already set [ 298.589279][ T7290] binder: 7286:7290 ioctl 4018620d 200000000100 returned -16 [ 298.616552][ T7290] binder: BINDER_SET_CONTEXT_MGR already set [ 298.636978][ T7290] binder: 7286:7290 ioctl 4018620d 2000000002c0 returned -16 [ 299.046708][ T7301] gfs2: gfs2 mount does not exist [ 299.105572][ T4330] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 299.183512][ T7303] atomic_op ffff8880551f4998 conn xmit_atomic 0000000000000000 [ 299.298071][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.313038][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.323164][ T4330] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 299.332632][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.344771][ T4330] usb 4-1: config 0 descriptor?? [ 300.924578][ T7322] ceph: No mds server is up or the cluster is laggy [ 300.978849][ T4983] libceph: connect (1)[c::]:6789 error -101 [ 301.063330][ T4330] usbhid 4-1:0.0: can't add hid device: -32 [ 301.070290][ T4983] libceph: mon0 (1)[c::]:6789 connect error [ 301.095523][ T4330] usbhid: probe of 4-1:0.0 failed with error -32 [ 301.112488][ T7331] binder: BINDER_SET_CONTEXT_MGR already set [ 301.130038][ T7331] binder: 7330:7331 ioctl 4018620d 2000000000c0 returned -16 [ 301.142344][ T4330] usb 4-1: USB disconnect, device number 9 [ 301.214114][ T7331] binder: BINDER_SET_CONTEXT_MGR already set [ 301.232228][ T7331] binder: 7330:7331 ioctl 4018620d 200000000040 returned -16 [ 301.242829][ T7331] binder: 7330:7331 ioctl c0306201 0 returned -14 [ 301.683114][ T7347] atomic_op ffff8880756e0998 conn xmit_atomic 0000000000000000 [ 302.075687][ T7356] gfs2: gfs2 mount does not exist [ 303.297655][ T7373] binder: BINDER_SET_CONTEXT_MGR already set [ 303.351633][ T7373] binder: 7366:7373 ioctl 4018620d 2000000000c0 returned -16 [ 303.419215][ T7373] binder: BINDER_SET_CONTEXT_MGR already set [ 303.425244][ T7373] binder: 7366:7373 ioctl 4018620d 200000000040 returned -16 [ 303.466468][ T7373] binder: 7366:7373 ioctl c0306201 0 returned -14 [ 303.607087][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 303.690250][ T1044] block nbd3: Attempted send on invalid socket [ 303.696960][ T1044] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.708363][ T7382] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 303.959130][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.098757][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.116852][ T126] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 304.131406][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.160569][ T126] usb 1-1: config 0 descriptor?? [ 304.562657][ T7391] atomic_op ffff88801fe62198 conn xmit_atomic 0000000000000000 [ 304.612462][ T7392] gfs2: gfs2 mount does not exist [ 304.831679][ T126] usbhid 1-1:0.0: can't add hid device: -32 [ 304.838070][ T126] usbhid: probe of 1-1:0.0 failed with error -32 [ 304.855193][ T126] usb 1-1: USB disconnect, device number 4 [ 306.892295][ T1044] block nbd4: Attempted send on invalid socket [ 306.898722][ T1044] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.975595][ T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 306.995722][ T26] audit: type=1326 audit(1754935463.492:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.1.1053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1c478ebe9 code=0x0 [ 307.833477][ T7424] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 308.135516][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 308.142067][ T126] usb 4-1: no configurations [ 308.179529][ T126] usb 4-1: can't read configurations, error -22 [ 308.345687][ T126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 308.535476][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 308.545767][ T126] usb 4-1: no configurations [ 308.555483][ T126] usb 4-1: can't read configurations, error -22 [ 308.622952][ T126] usb usb4-port1: attempt power cycle [ 308.833942][ T7450] binder: BINDER_SET_CONTEXT_MGR already set [ 308.843660][ T7450] binder: 7449:7450 ioctl 4018620d 2000000000c0 returned -16 [ 308.860656][ T7450] binder: BINDER_SET_CONTEXT_MGR already set [ 308.870857][ T7450] binder: 7449:7450 ioctl 4018620d 200000000040 returned -16 [ 309.078100][ T126] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 309.726427][ T26] audit: type=1326 audit(1754935466.262:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.0.1065" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee3658ebe9 code=0x0 [ 309.801750][ T7468] gfs2: gfs2 mount does not exist [ 313.853004][ T7479] atomic_op ffff888078ed3998 conn xmit_atomic 0000000000000000 [ 314.515951][ T126] usb 4-1: device descriptor read/8, error -110 [ 314.731311][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 315.430696][ T126] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 315.577296][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.599813][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.620070][ T7] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 315.634781][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.643039][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 315.667237][ T7] usb 1-1: config 0 descriptor?? [ 315.685594][ T126] usb 4-1: device not accepting address 13, error -71 [ 315.696915][ T126] usb usb4-port1: unable to enumerate USB device [ 315.704296][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 315.804661][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1079'. [ 316.171100][ T7512] gfs2: gfs2 mount does not exist [ 316.687990][ T7] usbhid 1-1:0.0: can't add hid device: -32 [ 316.835105][ T7] usbhid: probe of 1-1:0.0 failed with error -32 [ 316.848079][ T7] usb 1-1: USB disconnect, device number 5 [ 317.099737][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.119407][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.119322][ T26] audit: type=1326 audit(1754935473.642:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.3.1082" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafba38ebe9 code=0x0 [ 319.611596][ T7547] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1094'. [ 319.621881][ T7547] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1094'. [ 319.631214][ T7547] netlink: 'syz.4.1094': attribute type 6 has an invalid length. [ 319.639496][ T7547] netlink: 'syz.4.1094': attribute type 5 has an invalid length. [ 319.648123][ T7547] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1094'. [ 319.708704][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 319.794443][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 319.928672][ T7561] binder: 7560:7561 ioctl c0306201 0 returned -14 [ 320.681757][ T4983] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 320.876879][ T4983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.913052][ T4983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.937320][ T7583] binder: BINDER_SET_CONTEXT_MGR already set [ 320.955557][ T4983] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 320.964628][ T4983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.975488][ T7583] binder: 7582:7583 ioctl 4018620d 2000000000c0 returned -16 [ 321.021515][ T4983] usb 3-1: config 0 descriptor?? [ 321.504172][ T4983] cp2112 0003:10C4:EA90.0009: item fetching failed at offset 5/7 [ 321.516906][ T4983] cp2112 0003:10C4:EA90.0009: parse failed [ 321.522948][ T4983] cp2112: probe of 0003:10C4:EA90.0009 failed with error -22 [ 323.995585][ T7] usb 3-1: USB disconnect, device number 7 [ 325.957139][ T4293] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 326.556823][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.945814][ T7657] 9pnet_virtio: no channels available for device syz [ 327.691057][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.728111][ T4293] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 327.778588][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.813777][ T4293] usb 1-1: config 0 descriptor?? [ 328.235837][ T4293] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 328.261933][ T4293] cp2112 0003:10C4:EA90.000A: parse failed [ 328.283052][ T4293] cp2112: probe of 0003:10C4:EA90.000A failed with error -22 [ 329.661669][ T4293] usb 1-1: USB disconnect, device number 6 [ 330.197213][ T7693] binder: 7692:7693 ioctl 4018620d 0 returned -22 [ 331.315121][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 331.333957][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.362344][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.374852][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.402992][ T7717] device bridge_slave_0 left promiscuous mode [ 331.422313][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.435748][ T4983] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 331.478850][ T7717] device bridge_slave_1 left promiscuous mode [ 331.485761][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.502931][ T7717] bond0: (slave bond_slave_0): Releasing backup interface [ 331.521146][ T7717] bond0: (slave bond_slave_1): Releasing backup interface [ 331.577760][ T7717] team0: Failed to send options change via netlink (err -105) [ 331.585835][ T7717] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 331.597248][ T7717] team0: Port device team_slave_0 removed [ 331.624409][ T7717] team0: Failed to send options change via netlink (err -105) [ 331.643356][ T4983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.649234][ T7717] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 331.661236][ T4983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.664844][ T7717] team0: Port device team_slave_1 removed [ 331.686356][ T7717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.686698][ T4983] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 331.703181][ T4983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.704879][ T7717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.713833][ T4983] usb 3-1: config 0 descriptor?? [ 331.733793][ T7717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.743854][ T7717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.772257][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 331.783846][ T7719] team0: Failed to send options change via netlink (err -105) [ 331.793184][ T7719] team0: Mode changed to "activebackup" [ 331.859254][ T7734] binder: BINDER_SET_CONTEXT_MGR already set [ 331.867751][ T7734] binder: 7733:7734 ioctl 4018620d 2000000000c0 returned -16 [ 331.878885][ T7734] binder: BINDER_SET_CONTEXT_MGR already set [ 331.884960][ T7734] binder: 7733:7734 ioctl 4018620d 200000000040 returned -16 [ 331.981456][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 332.008750][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 332.132205][ T4983] cp2112 0003:10C4:EA90.000B: item fetching failed at offset 5/7 [ 332.156516][ T4983] cp2112 0003:10C4:EA90.000B: parse failed [ 332.162873][ T4983] cp2112: probe of 0003:10C4:EA90.000B failed with error -22 [ 332.626000][ T7759] 9pnet_virtio: no channels available for device syz [ 333.451841][ T7748] sched: RT throttling activated [ 333.867493][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 333.880595][ T7778] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 334.218435][ T4430] usb 3-1: USB disconnect, device number 8 [ 334.434956][ T7797] binder: BINDER_SET_CONTEXT_MGR already set [ 334.441332][ T7797] binder: 7795:7797 ioctl 4018620d 2000000000c0 returned -16 [ 334.453553][ T7797] binder: BINDER_SET_CONTEXT_MGR already set [ 334.461331][ T7797] binder: 7795:7797 ioctl 4018620d 200000000040 returned -16 [ 334.736977][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 334.776625][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 335.878479][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 336.056623][ T7826] atomic_op ffff888077c31998 conn xmit_atomic 0000000000000000 [ 337.067764][ T7837] binder: BINDER_SET_CONTEXT_MGR already set [ 337.083985][ T7837] binder: 7836:7837 ioctl 4018620d 2000000000c0 returned -16 [ 337.107320][ T7837] binder: BINDER_SET_CONTEXT_MGR already set [ 337.113333][ T7837] binder: 7836:7837 ioctl 4018620d 200000000040 returned -16 [ 337.174476][ T7843] gfs2: gfs2 mount does not exist [ 337.290860][ T7847] binder: BINDER_SET_CONTEXT_MGR already set [ 337.324824][ T7847] binder: 7845:7847 ioctl 4018620d 2000000000c0 returned -16 [ 337.333310][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 337.358149][ T7847] binder: BINDER_SET_CONTEXT_MGR already set [ 337.373393][ T7847] binder: 7845:7847 ioctl 4018620d 200000000040 returned -16 [ 337.388189][ T7848] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 337.396125][ T7847] binder: 7845:7847 ioctl c0306201 0 returned -14 [ 337.404309][ T7850] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 338.351050][ T7862] sctp: [Deprecated]: syz.0.1210 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.351050][ T7862] Use struct sctp_sack_info instead [ 338.411034][ T7862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1210'. [ 339.047202][ T7878] atomic_op ffff88807cf60998 conn xmit_atomic 0000000000000000 [ 339.366667][ T7890] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 340.648943][ T26] audit: type=1326 audit(1754935497.192:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.1224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafba38ebe9 code=0x0 [ 344.355216][ T7924] input: syz1 as /devices/virtual/input/input6 [ 345.569002][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 345.609039][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.650056][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.690232][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.167685][ T7950] gfs2: gfs2 mount does not exist [ 346.184657][ T7939] device bridge_slave_0 left promiscuous mode [ 346.223451][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.258643][ T7939] device bridge_slave_1 left promiscuous mode [ 346.274764][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.323151][ T7939] bond0: (slave bond_slave_0): Releasing backup interface [ 346.360419][ T7939] bond0: (slave bond_slave_1): Releasing backup interface [ 346.433412][ T7939] team0: Failed to send options change via netlink (err -105) [ 346.528212][ T7939] team0: Port device team_slave_0 removed [ 346.582212][ T7939] team0: Port device team_slave_1 removed [ 346.596733][ T7939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.614467][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.632964][ T7939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.656219][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.720065][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 346.757939][ T7942] team0: Mode changed to "activebackup" [ 350.141794][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1248'. [ 350.207474][ T7989] atomic_op ffff88802f36c998 conn xmit_atomic 0000000000000000 [ 350.510990][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 350.885856][ T26] audit: type=1326 audit(1754935507.422:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.2.1252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25d6b8ebe9 code=0x0 [ 356.599212][ T321] wlan1: Trigger new scan to find an IBSS to join [ 356.615891][ T4467] wlan1: Trigger new scan to find an IBSS to join [ 358.906274][ T4376] wlan1: Creating new IBSS network, BSSID e2:cc:2e:f1:98:b0 [ 359.905617][ T8044] tipc: Started in network mode [ 359.910739][ T8044] tipc: Node identity 76738c741aa3, cluster identity 4711 [ 359.923215][ T8044] tipc: Enabled bearer , priority 0 [ 359.931941][ T8044] device syzkaller0 entered promiscuous mode [ 360.758266][ T8044] tipc: Resetting bearer [ 361.353712][ T4430] tipc: Node number set to 1825606772 [ 361.474665][ T8043] tipc: Resetting bearer [ 361.519411][ T8043] tipc: Disabling bearer [ 366.966748][ T8119] binder: BINDER_SET_CONTEXT_MGR already set [ 366.972917][ T8119] binder: 8117:8119 ioctl 4018620d 2000000000c0 returned -16 [ 367.022789][ T8119] binder: BINDER_SET_CONTEXT_MGR already set [ 367.034185][ T8119] binder: 8117:8119 ioctl 4018620d 200000000040 returned -16 [ 367.530716][ T8126] binder: 8117:8126 ioctl c0306201 0 returned -14 [ 368.472358][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 369.161196][ T8153] binder: 8152:8153 ioctl c0306201 0 returned -14 [ 371.231723][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 374.001694][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 375.544517][ T8243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 375.564353][ T8243] input: syz1 as /devices/virtual/input/input7 [ 375.965470][ T8244] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 376.288356][ T8013] udevd[8013]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 376.452462][ T8249] gfs2: gfs2 mount does not exist [ 376.681492][ T8255] overlayfs: unrecognized mount option "verity=require" or missing value [ 378.517776][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.524216][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.889793][ T8292] binder: BINDER_SET_CONTEXT_MGR already set [ 379.915759][ T8292] binder: 8289:8292 ioctl 4018620d 2000000000c0 returned -16 [ 379.990185][ T26] audit: type=1326 audit(1754935536.532:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.0.1352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee3658ebe9 code=0x0 [ 381.491126][ T8296] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 382.480221][ T8292] binder: BINDER_SET_CONTEXT_MGR already set [ 382.704328][ T8292] binder: 8289:8292 ioctl 4018620d 200000000040 returned -16 [ 388.608497][ T8339] binder: BINDER_SET_CONTEXT_MGR already set [ 388.686786][ T8339] binder: 8338:8339 ioctl 4018620d 2000000000c0 returned -16 [ 388.751562][ T8339] binder: BINDER_SET_CONTEXT_MGR already set [ 388.830581][ T8339] binder: 8338:8339 ioctl 4018620d 200000000040 returned -16 [ 389.075720][ T26] audit: type=1326 audit(1754935545.602:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8337 comm="syz.2.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25d6b8ebe9 code=0x0 [ 389.097347][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.894091][ T8360] atomic_op ffff8880551a4998 conn xmit_atomic 0000000000000000 [ 390.112120][ T8362] tipc: Started in network mode [ 390.141948][ T8362] tipc: Node identity f27a1868dfd7, cluster identity 4711 [ 390.149279][ T8362] tipc: Enabled bearer , priority 0 [ 390.157178][ T8362] device syzkaller0 entered promiscuous mode [ 390.378124][ T8367] tipc: Resetting bearer [ 390.390751][ T8362] mmap: syz.3.1374 (8362) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 390.504324][ T8361] tipc: Resetting bearer [ 390.875124][ T8361] tipc: Disabling bearer [ 392.536795][ T8391] binder: BINDER_SET_CONTEXT_MGR already set [ 392.542889][ T8391] binder: 8389:8391 ioctl 4018620d 2000000000c0 returned -16 [ 392.553473][ T8391] binder: BINDER_SET_CONTEXT_MGR already set [ 392.560888][ T8391] binder: 8389:8391 ioctl 4018620d 200000000040 returned -16 [ 392.625692][ T8393] sctp: [Deprecated]: syz.4.1382 (pid 8393) Use of int in maxseg socket option. [ 392.625692][ T8393] Use struct sctp_assoc_value instead [ 393.661137][ T8401] tc_dump_action: action bad kind [ 393.866928][ T8410] binder: BINDER_SET_CONTEXT_MGR already set [ 393.904441][ T8410] binder: 8409:8410 ioctl 4018620d 200000000100 returned -16 [ 393.945399][ T8410] binder: 8409:8410 ioctl 4018620d 0 returned -22 [ 394.246553][ T8420] atomic_op ffff8881452fe198 conn xmit_atomic 0000000000000000 [ 394.534910][ T8427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1396'. [ 395.005771][ T8439] capability: warning: `syz.2.1401' uses 32-bit capabilities (legacy support in use) [ 395.020894][ T4293] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 395.365463][ T4293] usb 4-1: Using ep0 maxpacket: 32 [ 395.372367][ T4293] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 396.001332][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.100282][ T4293] usb 4-1: config 0 descriptor?? [ 396.320468][ T4293] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 396.340089][ T4293] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.355877][ T4293] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 396.363354][ T4293] usb 4-1: media controller created [ 396.405034][ T4293] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.415996][ T8459] binder: BINDER_SET_CONTEXT_MGR already set [ 396.422005][ T8459] binder: 8458:8459 ioctl 4018620d 2000000000c0 returned -16 [ 396.520591][ T8459] binder: BINDER_SET_CONTEXT_MGR already set [ 396.527010][ T8459] binder: 8458:8459 ioctl 4018620d 200000000040 returned -16 [ 396.539229][ T8459] binder: 8458:8459 ioctl c0306201 0 returned -14 [ 396.610642][ T4293] az6027: usb out operation failed. (-71) [ 396.631214][ T4293] az6027: usb out operation failed. (-71) [ 396.676113][ T26] audit: type=1326 audit(1754935553.192:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.0.1407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee3658ebe9 code=0x0 [ 397.656992][ T4293] stb0899_attach: Driver disabled by Kconfig [ 397.663017][ T4293] az6027: no front-end attached [ 397.663017][ T4293] [ 397.672294][ T4293] az6027: usb out operation failed. (-71) [ 397.678468][ T4293] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 397.727835][ T4293] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 397.851513][ T4293] dvb-usb: schedule remote query interval to 400 msecs. [ 397.913395][ T4293] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 397.997434][ T4293] usb 4-1: USB disconnect, device number 14 [ 400.933929][ T4293] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 402.162465][ T8505] binder: BINDER_SET_CONTEXT_MGR already set [ 402.190458][ T8505] binder: 8504:8505 ioctl 4018620d 2000000000c0 returned -16 [ 402.217381][ T8505] binder: BINDER_SET_CONTEXT_MGR already set [ 402.389646][ T8505] binder: 8504:8505 ioctl 4018620d 200000000040 returned -16 [ 402.458040][ T8505] binder: 8504:8505 ioctl c0306201 0 returned -14 [ 402.999380][ T26] audit: type=1326 audit(1754935559.532:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.1422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25d6b8ebe9 code=0x0 [ 403.036746][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 403.796269][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 403.805086][ T7] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 404.191405][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.206064][ T7] usb 5-1: config 0 descriptor?? [ 404.417893][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 404.804206][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.821366][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 404.831304][ T7] usb 5-1: media controller created [ 404.904094][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.982005][ T7] az6027: usb out operation failed. (-71) [ 404.991193][ T7] az6027: usb out operation failed. (-71) [ 404.998994][ T7] stb0899_attach: Driver disabled by Kconfig [ 406.087977][ T7] az6027: no front-end attached [ 406.087977][ T7] [ 406.332927][ T7] az6027: usb out operation failed. (-71) [ 406.405490][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 406.439050][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 406.486845][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 406.493880][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 406.512169][ T7] usb 5-1: USB disconnect, device number 9 [ 406.658078][ T8555] binder: BINDER_SET_CONTEXT_MGR already set [ 406.664400][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 406.686412][ T8555] binder: 8544:8555 ioctl 4018620d 2000000000c0 returned -16 [ 406.714016][ T8555] binder: BINDER_SET_CONTEXT_MGR already set [ 406.729075][ T8555] binder: 8544:8555 ioctl 4018620d 200000000040 returned -16 [ 406.753040][ T8555] binder: 8544:8555 ioctl c0306201 0 returned -14 [ 408.830462][ T8586] process 'syz.1.1445' launched './file2' with NULL argv: empty string added [ 408.965439][ T4348] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 409.099374][ T8593] binder: BINDER_SET_CONTEXT_MGR already set [ 409.106360][ T8593] binder: 8592:8593 ioctl 4018620d 2000000000c0 returned -16 [ 409.117529][ T8593] binder: BINDER_SET_CONTEXT_MGR already set [ 409.123598][ T8593] binder: 8592:8593 ioctl 4018620d 200000000040 returned -16 [ 409.165416][ T4348] usb 4-1: Using ep0 maxpacket: 32 [ 409.183159][ T4348] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 409.202190][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.221732][ T4348] usb 4-1: config 0 descriptor?? [ 409.446611][ T4348] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 409.466491][ T4348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.619314][ T4348] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 409.627012][ T4348] usb 4-1: media controller created [ 409.644399][ T4348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.737920][ T26] audit: type=1326 audit(1754935566.272:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.1452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee3658ebe9 code=0x0 [ 411.077852][ T4348] az6027: usb out operation failed. (-71) [ 411.084926][ T4348] az6027: usb out operation failed. (-71) [ 411.090760][ T4348] stb0899_attach: Driver disabled by Kconfig [ 411.096796][ T4348] az6027: no front-end attached [ 411.096796][ T4348] [ 411.109784][ T4348] az6027: usb out operation failed. (-71) [ 411.116610][ T4348] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 411.129670][ T4348] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 411.142790][ T4348] dvb-usb: schedule remote query interval to 400 msecs. [ 411.154184][ T4348] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 411.174787][ T4348] usb 4-1: USB disconnect, device number 15 [ 411.197281][ T8610] netlink: 1160 bytes leftover after parsing attributes in process `syz.4.1453'. [ 411.271544][ T4348] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 411.550512][ T8617] ======================================================= [ 411.550512][ T8617] WARNING: The mand mount option has been deprecated and [ 411.550512][ T8617] and is ignored by this kernel. Remove the mand [ 411.550512][ T8617] option from the mount to silence this warning. [ 411.550512][ T8617] ======================================================= [ 413.480056][ T26] audit: type=1326 audit(1754935569.852:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.1.1465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1c478ebe9 code=0x0 [ 415.474484][ T4348] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 415.715508][ T4348] usb 3-1: Using ep0 maxpacket: 32 [ 415.724218][ T4348] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 415.752473][ T4348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.883718][ T4348] usb 3-1: config 0 descriptor?? [ 416.169284][ T4348] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 416.244299][ T4348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.372366][ T4348] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 416.496416][ T4348] usb 3-1: media controller created [ 417.034983][ T4348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.432157][ T4348] az6027: usb out operation failed. (-71) [ 417.498676][ T4348] az6027: usb out operation failed. (-71) [ 417.569183][ T4348] stb0899_attach: Driver disabled by Kconfig [ 417.644502][ T4348] az6027: no front-end attached [ 417.644502][ T4348] [ 417.770024][ T4348] az6027: usb out operation failed. (-71) [ 417.974526][ T4348] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 418.280950][ T4348] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 418.474987][ T4348] dvb-usb: schedule remote query interval to 400 msecs. [ 418.534000][ T4348] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 418.704578][ T4348] usb 3-1: USB disconnect, device number 9 [ 422.066735][ T26] audit: type=1326 audit(1754935575.342:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.2.1477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25d6b8ebe9 code=0x0 [ 422.265873][ T4348] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 423.272135][ T8714] atomic_op ffff888141ad4198 conn xmit_atomic 0000000000000000 [ 423.479702][ T8715] binder: BINDER_SET_CONTEXT_MGR already set [ 423.592782][ T8715] binder: 8713:8715 ioctl 4018620d 2000000000c0 returned -16 [ 423.840099][ T8715] binder: BINDER_SET_CONTEXT_MGR already set [ 423.865458][ T8715] binder: 8713:8715 ioctl 4018620d 200000000040 returned -16 [ 426.471802][ T8768] binder: BINDER_SET_CONTEXT_MGR already set [ 426.500628][ T8768] binder: 8767:8768 ioctl 4018620d 2000000000c0 returned -16 [ 426.520576][ T8771] binder: BINDER_SET_CONTEXT_MGR already set [ 426.756843][ T8771] binder: 8767:8771 ioctl 4018620d 200000000040 returned -16 [ 430.220198][ T8815] binder: BINDER_SET_CONTEXT_MGR already set [ 430.303176][ T8815] binder: 8814:8815 ioctl 4018620d 2000000000c0 returned -16 [ 430.311834][ T8816] binder: BINDER_SET_CONTEXT_MGR already set [ 430.311846][ T8816] binder: 8814:8816 ioctl 4018620d 200000000040 returned -16 [ 430.891504][ T8821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1516'. [ 431.004162][ T8818] 9pnet_fd: Insufficient options for proto=fd [ 431.012717][ T8818] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1515'. [ 431.021827][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 431.166904][ T8827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1517'. [ 436.058129][ T8880] overlayfs: failed to clone upperpath [ 436.177068][ T8884] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1536'. [ 436.186509][ T8884] device ip6gretap0 entered promiscuous mode [ 436.192701][ T8884] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1536'. [ 437.159547][ T8888] gfs2: gfs2 mount does not exist [ 439.967858][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.974188][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.019567][ T8977] gfs2: gfs2 mount does not exist [ 442.672584][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1569'. [ 443.682869][ T8989] tipc: Failed to remove unknown binding: 66,1,1/0:3322113870/3322113872 [ 443.712045][ T8989] tipc: Failed to remove unknown binding: 66,1,1/0:3322113870/3322113872 [ 445.484627][ T26] audit: type=1326 audit(1754935602.022:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.3.1575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafba38ebe9 code=0x0 [ 445.506235][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.435852][ T9033] gfs2: gfs2 mount does not exist [ 449.179043][ T4304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.188783][ T4304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.197240][ T4304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.304221][ T4304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.312352][ T4304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 449.320053][ T4304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.818446][ T9048] chnl_net:caif_netlink_parms(): no params data found [ 451.395578][ T4304] Bluetooth: hci3: command 0x0409 tx timeout [ 451.550148][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.550350][ T9086] binder: BINDER_SET_CONTEXT_MGR already set [ 451.563387][ T9086] binder: 9085:9086 ioctl 4018620d 200000000100 returned -16 [ 451.567633][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.576852][ T9086] binder: BINDER_SET_CONTEXT_MGR already set [ 451.584050][ T9086] binder: 9085:9086 ioctl 4018620d 2000000002c0 returned -16 [ 451.621570][ T9048] device bridge_slave_0 entered promiscuous mode [ 451.656347][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.677620][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.714626][ T9048] device bridge_slave_1 entered promiscuous mode [ 451.747059][ T9048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.762232][ T9048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.872545][ T9048] team0: Port device team_slave_0 added [ 451.880645][ T9048] team0: Port device team_slave_1 added [ 451.904520][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.917311][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.982534][ T9048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.044052][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.051245][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.077717][ T9048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.089825][ T9098] gfs2: gfs2 mount does not exist [ 452.262762][ T9048] device hsr_slave_0 entered promiscuous mode [ 452.297076][ T9048] device hsr_slave_1 entered promiscuous mode [ 452.330846][ T9048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.354304][ T9048] Cannot create hsr debugfs directory [ 452.866655][ T9119] binder: BINDER_SET_CONTEXT_MGR already set [ 452.918458][ T9119] binder: 9118:9119 ioctl 4018620d 200000000100 returned -16 [ 453.268785][ T9119] binder: BINDER_SET_CONTEXT_MGR already set [ 453.400625][ T9119] binder: 9118:9119 ioctl 4018620d 2000000002c0 returned -16 [ 453.485526][ T4304] Bluetooth: hci3: command 0x041b tx timeout [ 453.620267][ T9048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.682662][ T9048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 453.710579][ T9048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 453.752900][ T9048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 454.035842][ T9048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.084556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.106180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.130352][ T9048] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.141103][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 454.160424][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.181092][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.189419][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.231224][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 454.240231][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 454.256741][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.274211][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.281372][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.339270][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 454.356637][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 454.410205][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 454.551849][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 455.080608][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 455.193470][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 455.213634][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 455.222979][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 455.232305][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.243657][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 455.255077][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.266749][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 455.566799][ T4299] Bluetooth: hci3: command 0x040f tx timeout [ 457.843016][ T4299] Bluetooth: hci3: command 0x0419 tx timeout [ 457.936412][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.950726][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.983726][ T9048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.969300][ T9201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1632'. [ 459.850105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.900246][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.273422][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.291394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.315046][ T9048] device veth0_vlan entered promiscuous mode [ 460.322593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.344158][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.378950][ T9048] device veth1_vlan entered promiscuous mode [ 460.871593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 460.885007][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 460.912353][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.938241][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.956771][ T9048] device veth0_macvtap entered promiscuous mode [ 460.977348][ T9048] device veth1_macvtap entered promiscuous mode [ 461.041917][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.066181][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.092790][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.123779][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.146402][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.174231][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.192679][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.220449][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.257436][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.288370][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.726239][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.797532][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.831311][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.905418][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.233570][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.243962][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.255477][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.269260][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.278554][ T9240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1645'. [ 462.289725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.382888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.394437][ T9048] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.415831][ T9048] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.424790][ T9048] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.434184][ T9048] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.406294][ T9245] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1647'. [ 463.504819][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.532632][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.564639][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.589858][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.611442][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.705829][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 464.097368][ T9263] gfs2: gfs2 mount does not exist [ 469.933854][ T9336] gfs2: gfs2 mount does not exist [ 472.806058][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1689'. [ 475.948415][ T11] wlan1: Trigger new scan to find an IBSS to join [ 476.080141][ T9410] gfs2: gfs2 mount does not exist [ 476.170345][ T9412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1703'. [ 476.485606][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1705'. [ 477.461322][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 477.657668][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.680189][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.725553][ T7] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 477.734637][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.761660][ T7] usb 6-1: config 0 descriptor?? [ 477.795604][ T33] wlan1: Trigger new scan to find an IBSS to join [ 478.196954][ T7] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 478.224925][ T7] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 478.686106][ T7] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x4D [ 478.751287][ T7] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 478.777467][ T7] cp2112: probe of 0003:10C4:EA90.000C failed with error -32 [ 479.189307][ T9461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1720'. [ 480.041922][ T4413] wlan1: Trigger new scan to find an IBSS to join [ 480.048970][ T46] wlan1: Trigger new scan to find an IBSS to join [ 481.147440][ T7] usb 6-1: USB disconnect, device number 2 [ 481.163892][ T4368] wlan1: Creating new IBSS network, BSSID 42:1e:1e:50:6e:e3 [ 482.273888][ T9487] binder: BINDER_SET_CONTEXT_MGR already set [ 482.366191][ T9487] binder: 9486:9487 ioctl 4018620d 200000000100 returned -16 [ 482.378377][ T9487] binder: BINDER_SET_CONTEXT_MGR already set [ 482.384510][ T9487] binder: 9486:9487 ioctl 4018620d 2000000002c0 returned -16 [ 482.545803][ T9491] atomic_op ffff888079a75198 conn xmit_atomic 0000000000000000 [ 482.852051][ T4414] wlan1: Trigger new scan to find an IBSS to join [ 484.262928][ T26] audit: type=1326 audit(1754935640.802:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.1.1735" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1c478ebe9 code=0x0 [ 484.367477][ T4528] wlan1: Creating new IBSS network, BSSID 56:4e:95:38:4e:3b [ 486.587002][ T9540] atomic_op ffff888073c24198 conn xmit_atomic 0000000000000000 [ 488.666133][ T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 488.920495][ T9572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1756'. [ 488.931317][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.955425][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.965267][ T41] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 489.017280][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.057581][ T41] usb 5-1: config 0 descriptor?? [ 490.044599][ T41] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 490.067163][ T41] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 490.147437][ T41] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x4D [ 490.285092][ T41] cp2112 0003:10C4:EA90.000D: error requesting SMBus config [ 490.331148][ T41] cp2112: probe of 0003:10C4:EA90.000D failed with error -32 [ 490.722179][ T9596] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1763'. [ 490.843962][ T41] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 491.020164][ T41] usb 1-1: device descriptor read/64, error -71 [ 491.775031][ T4430] usb 5-1: USB disconnect, device number 10 [ 491.781729][ T41] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 492.111273][ T41] usb 1-1: device descriptor read/64, error -71 [ 492.235587][ T41] usb usb1-port1: attempt power cycle [ 492.656128][ T41] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 492.737477][ T41] usb 1-1: device descriptor read/8, error -71 [ 493.025833][ T41] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 493.082279][ T41] usb 1-1: device descriptor read/8, error -71 [ 493.240304][ T41] usb usb1-port1: unable to enumerate USB device [ 493.733946][ T9639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1775'. [ 496.025472][ T4430] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 496.986351][ T9681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1791'. [ 497.015519][ T4430] usb 5-1: device descriptor read/64, error -71 [ 497.285870][ T4430] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 497.455500][ T4430] usb 5-1: device descriptor read/64, error -71 [ 497.565883][ T4344] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 498.875053][ T4430] usb usb5-port1: attempt power cycle [ 499.052988][ T4344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.084247][ T4344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.135111][ T4344] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 499.191128][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.802013][ T4344] usb 6-1: config 0 descriptor?? [ 500.262305][ T4344] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 500.283293][ T4344] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 500.470613][ T4344] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x4D [ 500.671084][ T4344] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 500.698091][ T4344] cp2112: probe of 0003:10C4:EA90.000E failed with error -5 [ 501.397210][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.403635][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.719098][ T9728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1807'. [ 502.075528][ T26] audit: type=1326 audit(1754935658.582:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.4.1810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70e278ebe9 code=0x0 [ 503.208972][ T41] usb 6-1: USB disconnect, device number 3 [ 503.815676][ T4348] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 504.233260][ T4348] usb 5-1: device descriptor read/64, error -71 [ 504.611242][ T4348] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 504.775871][ T4348] usb 5-1: device descriptor read/64, error -71 [ 505.079270][ T4348] usb usb5-port1: attempt power cycle [ 505.865375][ T4348] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 506.554331][ T4348] usb 5-1: device descriptor read/8, error -71 [ 507.440619][ T26] audit: type=1326 audit(1754935663.182:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.0.1823" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee3658ebe9 code=0x0 [ 507.533355][ T9785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1824'. [ 507.595490][ T4344] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 508.509915][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.539987][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.552031][ T4344] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 508.575410][ T4344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.619066][ T4344] usb 4-1: config 0 descriptor?? [ 509.069407][ T4344] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 509.079185][ T4344] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 509.544364][ T4344] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x4D [ 509.821910][ T4344] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 510.500711][ T4344] cp2112: probe of 0003:10C4:EA90.000F failed with error -5 [ 511.369978][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1840'. [ 511.519838][ T4344] usb 4-1: USB disconnect, device number 16 [ 513.491404][ T9860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1849'. [ 513.831239][ T4428] wlan1: Trigger new scan to find an IBSS to join [ 514.371831][ T9879] atomic_op ffff88805423b198 conn xmit_atomic 0000000000000000 [ 514.386664][ T4430] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 515.267492][ T4430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.309375][ T4430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.339902][ T4430] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 515.376745][ T4430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.975846][ T26] audit: type=1326 audit(1754935672.202:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.1.1860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1c478ebe9 code=0x0 [ 516.406374][ T4430] usb 1-1: config 0 descriptor?? [ 517.046014][ T4430] usbhid 1-1:0.0: can't add hid device: -71 [ 517.054959][ T4430] usbhid: probe of 1-1:0.0 failed with error -71 [ 517.202961][ T4430] usb 1-1: USB disconnect, device number 11 [ 517.855833][ T4413] wlan1: Trigger new scan to find an IBSS to join [ 518.152580][ T9913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1865'. [ 518.976331][ T9741] wlan1: Trigger new scan to find an IBSS to join [ 519.985046][ T9932] atomic_op ffff88805545e198 conn xmit_atomic 0000000000000000 [ 521.215757][ T46] wlan1: Creating new IBSS network, BSSID be:c1:76:42:9d:14 [ 522.766278][ T4413] wlan1: Trigger new scan to find an IBSS to join [ 524.104153][ T9985] atomic_op ffff88807695e198 conn xmit_atomic 0000000000000000 [ 526.320950][ T4413] wlan1: Creating new IBSS network, BSSID c6:b6:08:03:66:34 [ 526.435573][ T4430] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 526.809216][ T4430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.200106][ T4430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.360068][ T4430] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 527.369353][ T4430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.387432][ T4430] usb 4-1: config 0 descriptor?? [ 527.992236][ T4430] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 528.085132][ T4430] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 528.203675][T10037] atomic_op ffff88805520f998 conn xmit_atomic 0000000000000000 [ 528.707849][ T4430] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x4D [ 529.840101][ T4430] cp2112 0003:10C4:EA90.0010: error reading lock byte: -71 [ 529.872957][ T4430] usb 4-1: USB disconnect, device number 17 [ 529.994659][T10055] fido_id[10055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 531.867969][T10085] atomic_op ffff88807d750198 conn xmit_atomic 0000000000000000 [ 533.865454][ T4344] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 534.378833][ T4330] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 534.399082][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.543866][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.675990][ T4330] usb 1-1: Using ep0 maxpacket: 32 [ 534.690778][ T4330] usb 1-1: no configurations [ 534.728788][ T4330] usb 1-1: can't read configurations, error -22 [ 534.738543][ T4344] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 534.752741][T10119] binder: BINDER_SET_CONTEXT_MGR already set [ 534.765766][ T4344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.768363][T10119] binder: 10118:10119 ioctl 4018620d 200000000100 returned -16 [ 534.832847][ T4344] usb 4-1: config 0 descriptor?? [ 534.871397][T10119] binder: BINDER_SET_CONTEXT_MGR already set [ 534.893307][T10119] binder: 10118:10119 ioctl 4018620d 2000000002c0 returned -16 [ 534.925496][ T4330] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 535.135351][ T4330] usb 1-1: Using ep0 maxpacket: 32 [ 535.141268][ T4330] usb 1-1: no configurations [ 535.151295][ T4330] usb 1-1: can't read configurations, error -22 [ 535.163588][ T4330] usb usb1-port1: attempt power cycle [ 535.246004][ T4344] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 535.262076][ T4344] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 535.454042][ T4344] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x4D [ 535.605682][ T4330] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 535.680175][ T4330] usb 1-1: Using ep0 maxpacket: 32 [ 535.701344][ T4330] usb 1-1: no configurations [ 536.155272][ T4330] usb 1-1: can't read configurations, error -22 [ 536.315607][ T4330] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 536.356334][ T4330] usb 1-1: Using ep0 maxpacket: 32 [ 536.362396][ T4330] usb 1-1: no configurations [ 536.376665][ T4344] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 536.560111][ T4344] usb 4-1: USB disconnect, device number 18 [ 536.566226][ T4330] usb 1-1: can't read configurations, error -22 [ 536.574519][ T4330] usb usb1-port1: unable to enumerate USB device [ 537.055871][T10142] fido_id[10142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 539.029032][T10166] binder: BINDER_SET_CONTEXT_MGR already set [ 539.035158][T10166] binder: 10165:10166 ioctl 4018620d 200000000100 returned -16 [ 539.054430][T10166] binder: BINDER_SET_CONTEXT_MGR already set [ 539.060900][T10166] binder: 10165:10166 ioctl 4018620d 2000000002c0 returned -16 [ 539.225255][T10171] binder: 10165:10171 ioctl c0306201 0 returned -14 [ 540.058768][ T26] audit: type=1326 audit(1754935695.892:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1947" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafba38ebe9 code=0x0 [ 540.080426][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.956118][ T4330] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 542.226709][ T4330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.325716][ T4330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.484203][ T4330] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 542.622134][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.665709][ T4330] usb 5-1: config 0 descriptor?? [ 542.983821][T10211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1959'. [ 543.197212][ T4330] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 543.208406][ T4330] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 543.326341][ T26] audit: type=1326 audit(1754935699.862:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafba38ebe9 code=0x0 [ 544.245569][ T4330] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x4D [ 544.698585][T10225] binder: BINDER_SET_CONTEXT_MGR already set [ 544.704624][T10225] binder: 10224:10225 ioctl 4018620d 200000000100 returned -16 [ 545.310669][ T4330] cp2112 0003:10C4:EA90.0012: error reading lock byte: -71 [ 545.338034][ T4330] usb 5-1: USB disconnect, device number 18 [ 545.362268][T10228] binder: BINDER_SET_CONTEXT_MGR already set [ 545.395182][T10228] binder: 10224:10228 ioctl 4018620d 2000000002c0 returned -16 [ 545.611480][ T26] audit: type=1326 audit(1754935702.152:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.1.1964" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1c478ebe9 code=0x0 [ 545.709266][T10237] binder: 10224:10237 ioctl c0306201 0 returned -14 [ 546.629136][T10234] fido_id[10234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 551.475161][ T26] audit: type=1326 audit(1754935705.962:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.3.1975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafba38ebe9 code=0x0 [ 551.899358][ T4444] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.390925][ T4330] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 553.857256][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1983'. [ 553.957489][ T4330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.968826][ T4330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.978911][ T4330] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 553.989085][ T4330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.999557][ T4330] usb 6-1: config 0 descriptor?? [ 554.245480][ T126] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 554.480738][ T4330] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 554.488288][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 554.537823][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.641266][T10070] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 554.764789][ T4330] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 554.777758][ T126] usb 4-1: config 0 has no interfaces? [ 554.783655][ T126] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 554.793371][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.809414][ T126] usb 4-1: config 0 descriptor?? [ 554.862645][ T4330] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x4D [ 555.475110][T10324] cp2112 0003:10C4:EA90.0013: Error starting transaction: -38 [ 555.841913][ T4330] cp2112 0003:10C4:EA90.0013: error reading lock byte: -71 [ 555.852501][ T4330] usb 6-1: USB disconnect, device number 4 [ 557.579064][ T26] audit: type=1326 audit(1754935712.702:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.1.1990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1c478ebe9 code=0x0 [ 558.290616][ T26] audit: type=1326 audit(1754935713.882:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70e278ebe9 code=0x0 [ 558.357458][ T41] usb 4-1: USB disconnect, device number 19 [ 558.627146][T10347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1996'. [ 558.813692][T10338] fido_id[10338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 559.855049][T10364] atomic_op ffff88807f106998 conn xmit_atomic 0000000000000000 [ 562.541768][ T26] audit: type=1326 audit(1754935717.682:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10367 comm="syz.5.2003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9df4b8ebe9 code=0x0 [ 562.627676][ T4430] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 562.836157][ T4293] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 562.844196][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.850528][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.057151][ T4430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.089983][ T4430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.114353][ T4430] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 563.125031][ T4430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.154245][ T4430] usb 5-1: config 0 descriptor?? [ 563.823074][ T4430] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 563.856090][ T4293] usb 4-1: Using ep0 maxpacket: 32 [ 563.871261][ T4430] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 563.885677][ T4293] usb 4-1: device descriptor read/all, error -71 [ 564.106025][ T4430] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x4D [ 564.635860][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 565.737066][T10410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2012'. [ 566.033956][ T4430] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 566.058954][T10420] atomic_op ffff88807e6b0198 conn xmit_atomic 0000000000000000 [ 566.067253][ T4430] cp2112: probe of 0003:10C4:EA90.0014 failed with error -71 [ 566.411986][ T4430] usb 5-1: USB disconnect, device number 19 [ 567.650658][ T26] audit: type=1326 audit(1754935724.032:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.1.2019" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1c478ebe9 code=0x0 [ 569.146964][T10422] fido_id[10422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 569.802616][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'. [ 570.569793][ T4330] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 571.051498][ T26] audit: type=1326 audit(1754935727.592:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.2028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee3658ebe9 code=0x0 [ 573.474754][T10462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2029'. [ 574.305514][ T4330] usb 6-1: device descriptor read/all, error -71 [ 574.881993][T10479] atomic_op ffff88807e392998 conn xmit_atomic 0000000000000000 [ 574.998114][ T26] audit: type=1326 audit(1754935731.532:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.2032" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9df4b8ebe9 code=0x0 [ 575.475515][ T4299] Bluetooth: hci3: command 0x0406 tx timeout [ 578.267796][ T4344] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 578.535574][ T4344] usb 6-1: Using ep0 maxpacket: 32 [ 578.544716][ T4344] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.602917][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2043'. [ 578.657656][ T4344] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.658638][ T4344] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 578.658834][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.731511][ T4344] usb 6-1: config 0 descriptor?? [ 580.565171][ T4983] usb 6-1: USB disconnect, device number 7 [ 580.716487][T10522] autofs4:pid:10522:autofs_fill_super: pipe file descriptor does not contain proper ops [ 581.615406][T10531] atomic_op ffff8880546f6998 conn xmit_atomic 0000000000000000 [ 581.720625][ T26] audit: type=1326 audit(1754935738.262:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.0.2046" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee3658ebe9 code=0x0 [ 586.211136][ T4428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 587.568568][ T26] audit: type=1326 audit(1754935744.102:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.3.2063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafba38ebe9 code=0x0 [ 588.974350][T10589] atomic_op ffff8880552c2198 conn xmit_atomic 0000000000000000 [ 589.911812][ T4444] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 594.460635][T10613] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 594.467426][T10613] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 594.475630][T10613] vhci_hcd vhci_hcd.0: Device attached [ 594.553417][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2075'. [ 594.823078][ T26] audit: type=1326 audit(1754935751.362:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.4.2076" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70e278ebe9 code=0x0 [ 594.849189][ T41] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 595.585738][T10618] vhci_hcd: connection reset by peer [ 595.599859][ T9] vhci_hcd: stop threads [ 595.676493][ T9] vhci_hcd: release socket [ 595.779296][ T9] vhci_hcd: disconnect device [ 595.874561][T10635] binder: BINDER_SET_CONTEXT_MGR already set [ 595.916476][T10635] binder: 10633:10635 ioctl 4018620d 200000000100 returned -16 [ 597.075951][T10635] binder: BINDER_SET_CONTEXT_MGR already set [ 597.105008][T10635] binder: 10633:10635 ioctl 4018620d 2000000002c0 returned -16 [ 601.226696][ T41] vhci_hcd: vhci_device speed not set [ 602.785247][T10691] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2092'. [ 605.653534][ T26] audit: type=1326 audit(1754935762.192:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.3.2098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafba38ebe9 code=0x0 [ 608.851167][T10719] overlayfs: failed to clone upperpath [ 609.581612][ T26] audit: type=1326 audit(1754935765.692:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.2101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70e278ebe9 code=0x0 [ 610.190164][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2105'. [ 611.949735][T10755] binder: BINDER_SET_CONTEXT_MGR already set [ 611.962675][T10755] binder: 10754:10755 ioctl 4018620d 200000000100 returned -16 [ 612.070372][T10755] binder: BINDER_SET_CONTEXT_MGR already set [ 612.825590][T10755] binder: 10754:10755 ioctl 4018620d 2000000002c0 returned -16 [ 614.597671][ T4344] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 614.703078][T10785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2120'. [ 614.830096][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2121'. [ 614.932570][ T4344] usb 6-1: config 4 has an invalid interface number: 121 but max is 0 [ 614.955295][ T4344] usb 6-1: config 4 has no interface number 0 [ 614.961438][ T4344] usb 6-1: config 4 interface 121 has no altsetting 0 [ 614.988166][ T4344] usb 6-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 615.013050][ T4344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.173597][ T4344] usb 6-1: Product: syz [ 615.186679][ T4344] usb 6-1: Manufacturer: syz [ 615.191294][ T4344] usb 6-1: SerialNumber: syz [ 616.237173][T10810] binder: BINDER_SET_CONTEXT_MGR already set [ 616.243259][T10810] binder: 10809:10810 ioctl 4018620d 200000000100 returned -16 [ 616.256148][T10810] binder: BINDER_SET_CONTEXT_MGR already set [ 616.262217][T10810] binder: 10809:10810 ioctl 4018620d 2000000002c0 returned -16 [ 618.756329][ T4344] usb 6-1: USB disconnect, device number 8 [ 621.303130][T10832] syz.1.2134 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 622.363709][ T4348] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 623.165395][ T4348] usb 6-1: Using ep0 maxpacket: 32 [ 623.172374][ T4348] usb 6-1: unable to get BOS descriptor or descriptor too short [ 623.187693][ T4348] usb 6-1: config 128 has an invalid interface number: 87 but max is 0 [ 623.200067][ T4348] usb 6-1: config 128 has no interface number 0 [ 623.210588][ T4348] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0016, bcdDevice=c5.9a [ 623.219969][ T4348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.228193][ T4348] usb 6-1: Product: syz [ 623.232390][ T4348] usb 6-1: Manufacturer: syz [ 623.237364][ T4348] usb 6-1: SerialNumber: syz [ 624.289727][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.296840][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.092103][ T4348] kvaser_usb 6-1:128.87: Cannot get usb endpoint(s) [ 625.226595][ T4348] usb 6-1: USB disconnect, device number 9 [ 629.763253][ T26] audit: type=1326 audit(1754936042.302:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.5.2154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9df4b8ebe9 code=0x0 [ 630.269777][T10909] loop5: detected capacity change from 0 to 128 [ 630.373176][T10909] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 630.402305][T10909] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 630.502195][T10909] EXT4-fs error (device loop5): ext4_check_dx_root:2266: inode #2: comm syz.5.2156: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 630.644124][ T9048] EXT4-fs (loop5): unmounting filesystem. [ 632.801871][ T4304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 632.816984][ T4304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 632.824862][ T4304] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 632.835407][ T4304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 632.846902][ T4304] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 632.854172][ T4304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 634.202721][ T26] audit: type=1326 audit(1754936046.742:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.2167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9df4b8ebe9 code=0x0 [ 637.485326][ T4304] Bluetooth: hci5: command 0x0409 tx timeout [ 637.855046][T10929] chnl_net:caif_netlink_parms(): no params data found [ 638.505065][T10929] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.598522][T10929] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.811158][T10929] device bridge_slave_0 entered promiscuous mode [ 638.895580][T10929] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.902790][T10929] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.951490][T10929] device bridge_slave_1 entered promiscuous mode [ 639.090309][T10929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.125001][T10929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.197000][T10929] team0: Port device team_slave_0 added [ 639.216901][T10929] team0: Port device team_slave_1 added [ 639.394300][T10929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.401391][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.427837][T10929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.573925][ T4304] Bluetooth: hci5: command 0x041b tx timeout [ 639.599031][T10929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.145577][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.204660][T10929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.319356][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 640.335562][ T4299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 640.344130][ T4299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 640.354099][ T4302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 640.371909][ T4302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 640.383183][ T4302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 640.607012][T10929] device hsr_slave_0 entered promiscuous mode [ 640.678605][ T26] audit: type=1326 audit(1754936053.212:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.0.2181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee3658ebe9 code=0x0 [ 641.659864][ T4304] Bluetooth: hci5: command 0x040f tx timeout [ 641.951817][T10929] device hsr_slave_1 entered promiscuous mode [ 641.959585][T11006] loop0: detected capacity change from 0 to 512 [ 641.970871][T10929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.992077][T10929] Cannot create hsr debugfs directory [ 642.026717][T11006] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 642.089478][T11006] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 642.117926][T11006] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2184: invalid indirect mapped block 1 (level 1) [ 642.257924][T11006] EXT4-fs (loop0): 1 truncate cleaned up [ 642.263630][T11006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 642.574251][ T4302] Bluetooth: hci0: command 0x0409 tx timeout [ 643.146861][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 643.416548][T11019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2188'. [ 643.447005][T11017] loop0: detected capacity change from 0 to 2364 [ 643.698899][T10929] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 643.715419][ T4302] Bluetooth: hci5: command 0x0419 tx timeout [ 643.741498][T10929] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.850397][T10929] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.868651][T10990] chnl_net:caif_netlink_parms(): no params data found [ 643.893368][T10929] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 644.137413][T10990] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.147990][T10990] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.210810][T10990] device bridge_slave_0 entered promiscuous mode [ 644.265400][T10990] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.288636][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.343147][T10990] device bridge_slave_1 entered promiscuous mode [ 644.791114][ T4302] Bluetooth: hci0: command 0x041b tx timeout [ 645.089465][T10990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.280294][T10990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.377654][T10990] team0: Port device team_slave_0 added [ 645.393253][T10929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.419870][T10990] team0: Port device team_slave_1 added [ 645.454719][ T4304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 645.464623][ T4304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 645.473368][ T4304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 645.481287][ T4304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 645.490438][ T4304] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 645.497776][ T4304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.585608][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.593392][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.614297][T10929] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.734693][T10990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.748215][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.790960][T11053] loop5: detected capacity change from 0 to 2048 [ 645.829076][T10990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.849690][T10990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.858280][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.886747][T10990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.907394][T11053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.925512][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 645.939565][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.965794][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.972949][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.010445][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 646.041705][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.066659][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.073819][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.093487][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 646.118031][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 646.133012][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 646.226161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 646.243473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 646.254232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 646.264897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 646.282351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.293395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.311272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 646.341353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.350241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.438579][T10990] device hsr_slave_0 entered promiscuous mode [ 646.447981][T10990] device hsr_slave_1 entered promiscuous mode [ 646.461587][T10990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.473294][T10990] Cannot create hsr debugfs directory [ 646.706384][T11064] loop5: detected capacity change from 0 to 256 [ 646.760088][T10987] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 646.802456][T11064] loop5: detected capacity change from 0 to 512 [ 646.809169][T11064] ext2: Unknown parameter 'smackfsroot' [ 646.930514][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 646.965096][T11046] chnl_net:caif_netlink_parms(): no params data found [ 647.655177][ T4299] Bluetooth: hci1: command 0x0409 tx timeout [ 648.156020][T10929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.168863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.197918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.257748][T10990] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 648.295828][T11046] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.303592][T11046] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.320651][T11046] device bridge_slave_0 entered promiscuous mode [ 648.337246][T10990] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 648.353913][T11046] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.363692][T11046] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.378213][T11046] device bridge_slave_1 entered promiscuous mode [ 648.390180][T10990] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 648.434826][T10990] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 648.514063][T11046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.551888][T11046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.647985][T11046] team0: Port device team_slave_0 added [ 648.675058][T11046] team0: Port device team_slave_1 added [ 648.690773][T11093] loop5: detected capacity change from 0 to 2048 [ 648.724197][T11093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 648.817971][T10990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.829591][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.839661][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.866187][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.895461][T11093] loop5: detected capacity change from 2048 to 64 [ 648.912571][T11096] syz.5.2205: attempt to access beyond end of device [ 648.912571][T11096] loop5: rw=0, sector=1438, nr_sectors = 1 limit=64 [ 648.931918][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 648.937474][T11096] syz.5.2205: attempt to access beyond end of device [ 648.937474][T11096] loop5: rw=0, sector=1438, nr_sectors = 1 limit=64 [ 648.954216][T11096] ------------[ cut here ]------------ [ 648.959996][T11096] WARNING: CPU: 0 PID: 11096 at fs/udf/truncate.c:209 udf_truncate_extents+0xcb4/0xe30 [ 648.969729][T11096] Modules linked in: [ 648.973619][T11096] CPU: 0 PID: 11096 Comm: syz.5.2205 Not tainted 6.1.147-syzkaller #0 [ 648.981789][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 648.991889][T11096] RIP: 0010:udf_truncate_extents+0xcb4/0xe30 [ 648.997905][T11096] Code: 25 28 00 00 00 48 3b 84 24 80 01 00 00 0f 85 b5 00 00 00 44 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3c fc 9b fe <0f> 0b 49 bd 00 00 00 00 00 fc ff df eb 8b 44 89 e9 80 e1 07 38 c1 [ 649.017573][T11096] RSP: 0018:ffffc900034d7900 EFLAGS: 00010287 [ 649.023635][T11096] RAX: ffffffff82e4caa4 RBX: ffff888047491490 RCX: 0000000000080000 [ 649.031638][T11096] RDX: ffffc9001cd38000 RSI: 0000000000025534 RDI: 0000000000025535 [ 649.039632][T11096] RBP: ffffc900034d7ad0 R08: dffffc0000000000 R09: ffffed100a7ccb4c [ 649.047620][T11096] R10: ffffed100a7ccb4c R11: 1ffff1100a7ccb4b R12: 00000015c00057fc [ 649.055613][T11096] R13: ffff888073e84018 R14: 00000020fffffffc R15: 0000000000000000 [ 649.063598][T11096] FS: 00007f9df2df66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 649.072545][T11096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.079155][T11096] CR2: 000000110c304c85 CR3: 000000005eb88000 CR4: 00000000003506f0 [ 649.087148][T11096] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 649.095196][T11096] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 649.103195][T11096] Call Trace: [ 649.106508][T11096] [ 649.109452][T11096] ? udf_discard_prealloc+0x600/0x600 [ 649.114820][T11096] ? __lock_acquire+0x7c50/0x7c50 [ 649.119865][T11096] ? do_raw_spin_lock+0x11d/0x280 [ 649.124878][T11096] ? do_raw_spin_lock+0x4f/0x280 [ 649.129834][T11096] ? do_raw_spin_unlock+0x11d/0x230 [ 649.135032][T11096] udf_setsize+0xd7a/0x1090 [ 649.139559][T11096] ? __lock_acquire+0x7c50/0x7c50 [ 649.144572][T11096] ? slab_free_freelist_hook+0x131/0x1a0 [ 649.150227][T11096] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 649.156170][T11096] ? udf_evict_inode+0x3e0/0x3e0 [ 649.161103][T11096] ? current_time+0x1e6/0x2b0 [ 649.165797][T11096] ? setattr_prepare+0x1f5/0xd00 [ 649.170811][T11096] ? atime_needs_update+0x780/0x780 [ 649.176040][T11096] udf_setattr+0x404/0x560 [ 649.180447][T11096] ? udf_release_file+0x120/0x120 [ 649.185509][T11096] notify_change+0xc74/0xf40 [ 649.190091][T11096] do_truncate+0x197/0x220 [ 649.194494][T11096] ? put_page_bootmem+0x2c0/0x2c0 [ 649.199537][T11096] ? bpf_lsm_path_truncate+0x5/0x10 [ 649.204724][T11096] vfs_truncate+0x262/0x2f0 [ 649.209250][T11096] do_sys_truncate+0xdc/0x190 [ 649.213918][T11096] ? break_lease+0xd0/0xd0 [ 649.218363][T11096] ? lockdep_hardirqs_on+0x94/0x140 [ 649.223574][T11096] do_syscall_64+0x4c/0xa0 [ 649.228005][T11096] ? clear_bhb_loop+0x60/0xb0 [ 649.232689][T11096] ? clear_bhb_loop+0x60/0xb0 [ 649.237384][T11096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.243281][T11096] RIP: 0033:0x7f9df4b8ebe9 [ 649.247719][T11096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.267356][T11096] RSP: 002b:00007f9df2df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 649.275792][T11096] RAX: ffffffffffffffda RBX: 00007f9df4db6090 RCX: 00007f9df4b8ebe9 [ 649.283752][T11096] RDX: 0000000000000000 RSI: 00000020fffffffc RDI: 0000200000000200 [ 649.291805][T11096] RBP: 00007f9df4c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 649.299807][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.307802][T11096] R13: 00007f9df4db6128 R14: 00007f9df4db6090 R15: 00007ffff3c32c48 [ 649.315795][T11096] [ 649.318807][T11096] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 649.326080][T11096] CPU: 0 PID: 11096 Comm: syz.5.2205 Not tainted 6.1.147-syzkaller #0 [ 649.334234][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.344271][T11096] Call Trace: [ 649.347555][T11096] [ 649.350484][T11096] dump_stack_lvl+0x168/0x22e [ 649.355150][T11096] ? memcpy+0x3c/0x60 [ 649.359120][T11096] ? show_regs_print_info+0x12/0x12 [ 649.364386][T11096] ? load_image+0x3b0/0x3b0 [ 649.368878][T11096] panic+0x2c9/0x710 [ 649.372770][T11096] ? bpf_jit_dump+0xd0/0xd0 [ 649.377274][T11096] __warn+0x2f8/0x4f0 [ 649.381260][T11096] ? udf_truncate_extents+0xcb4/0xe30 [ 649.386615][T11096] ? udf_truncate_extents+0xcb4/0xe30 [ 649.391966][T11096] report_bug+0x2ba/0x4f0 [ 649.396282][T11096] ? udf_truncate_extents+0xcb4/0xe30 [ 649.401634][T11096] handle_bug+0x3a/0x70 [ 649.405859][T11096] exc_invalid_op+0x16/0x40 [ 649.410344][T11096] asm_exc_invalid_op+0x16/0x20 [ 649.415278][T11096] RIP: 0010:udf_truncate_extents+0xcb4/0xe30 [ 649.421242][T11096] Code: 25 28 00 00 00 48 3b 84 24 80 01 00 00 0f 85 b5 00 00 00 44 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3c fc 9b fe <0f> 0b 49 bd 00 00 00 00 00 fc ff df eb 8b 44 89 e9 80 e1 07 38 c1 [ 649.440840][T11096] RSP: 0018:ffffc900034d7900 EFLAGS: 00010287 [ 649.446979][T11096] RAX: ffffffff82e4caa4 RBX: ffff888047491490 RCX: 0000000000080000 [ 649.454937][T11096] RDX: ffffc9001cd38000 RSI: 0000000000025534 RDI: 0000000000025535 [ 649.462893][T11096] RBP: ffffc900034d7ad0 R08: dffffc0000000000 R09: ffffed100a7ccb4c [ 649.470850][T11096] R10: ffffed100a7ccb4c R11: 1ffff1100a7ccb4b R12: 00000015c00057fc [ 649.478809][T11096] R13: ffff888073e84018 R14: 00000020fffffffc R15: 0000000000000000 [ 649.486789][T11096] ? udf_truncate_extents+0xcb4/0xe30 [ 649.492164][T11096] ? udf_discard_prealloc+0x600/0x600 [ 649.497523][T11096] ? __lock_acquire+0x7c50/0x7c50 [ 649.502549][T11096] ? do_raw_spin_lock+0x11d/0x280 [ 649.507660][T11096] ? do_raw_spin_lock+0x4f/0x280 [ 649.512582][T11096] ? do_raw_spin_unlock+0x11d/0x230 [ 649.517768][T11096] udf_setsize+0xd7a/0x1090 [ 649.522256][T11096] ? __lock_acquire+0x7c50/0x7c50 [ 649.527266][T11096] ? slab_free_freelist_hook+0x131/0x1a0 [ 649.532900][T11096] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 649.538774][T11096] ? udf_evict_inode+0x3e0/0x3e0 [ 649.543693][T11096] ? current_time+0x1e6/0x2b0 [ 649.548350][T11096] ? setattr_prepare+0x1f5/0xd00 [ 649.553269][T11096] ? atime_needs_update+0x780/0x780 [ 649.558450][T11096] udf_setattr+0x404/0x560 [ 649.562849][T11096] ? udf_release_file+0x120/0x120 [ 649.567857][T11096] notify_change+0xc74/0xf40 [ 649.572435][T11096] do_truncate+0x197/0x220 [ 649.576834][T11096] ? put_page_bootmem+0x2c0/0x2c0 [ 649.581844][T11096] ? bpf_lsm_path_truncate+0x5/0x10 [ 649.587025][T11096] vfs_truncate+0x262/0x2f0 [ 649.591509][T11096] do_sys_truncate+0xdc/0x190 [ 649.596167][T11096] ? break_lease+0xd0/0xd0 [ 649.600575][T11096] ? lockdep_hardirqs_on+0x94/0x140 [ 649.605771][T11096] do_syscall_64+0x4c/0xa0 [ 649.610210][T11096] ? clear_bhb_loop+0x60/0xb0 [ 649.614874][T11096] ? clear_bhb_loop+0x60/0xb0 [ 649.619532][T11096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.625412][T11096] RIP: 0033:0x7f9df4b8ebe9 [ 649.629808][T11096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.649404][T11096] RSP: 002b:00007f9df2df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 649.657820][T11096] RAX: ffffffffffffffda RBX: 00007f9df4db6090 RCX: 00007f9df4b8ebe9 [ 649.665797][T11096] RDX: 0000000000000000 RSI: 00000020fffffffc RDI: 0000200000000200 [ 649.673753][T11096] RBP: 00007f9df4c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 649.681732][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.689707][T11096] R13: 00007f9df4db6128 R14: 00007f9df4db6090 R15: 00007ffff3c32c48 [ 649.697681][T11096] [ 649.700923][T11096] Kernel Offset: disabled [ 649.705296][T11096] Rebooting in 86400 seconds..