last executing test programs: 15m52.238522315s ago: executing program 32 (id=202): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x2, 0x642, &(0x7f0000000ac0)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000000)=ANY=[], 0x700, 0x1) 12m44.927633545s ago: executing program 33 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x5, [@remote, @rand_addr]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffdc0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r5, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x850) 11m47.033626718s ago: executing program 34 (id=739): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x20, 0x17, 0x0, 0x0) 11m21.663555441s ago: executing program 35 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x5, [@remote, @rand_addr]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffdc0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r7, 0x0}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 11m18.329755307s ago: executing program 36 (id=808): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x8004550f, 0x0) 10m46.095432315s ago: executing program 37 (id=878): truncate(&(0x7f0000000040)='./file2\x00', 0x881c00) 8m22.054745473s ago: executing program 38 (id=1156): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x0, @desc3}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000600)=ANY=[], 0xde, 0xc2d, &(0x7f0000002d80)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x82800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) 8m12.886459101s ago: executing program 39 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) setrlimit(0x5, 0x0) creat(0x0, 0x0) capset(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x4, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r2, &(0x7f0000001840)={0x2020}, 0x2020) pread64(r2, &(0x7f0000000200)=""/224, 0xe0, 0x73) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000010c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0x4c}, @l2cap_disconn_rsp={{0x7, 0x6}, {0x401, 0x5}}}}, 0x17) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x19a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6m43.254374424s ago: executing program 4 (id=1331): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 6m37.983294157s ago: executing program 4 (id=1339): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvTOIkm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7dkLghih1HsVOa0EP6PyBRiRP8CRyQOCD1xJ0b3Li0B6QCFahB4mA09iRNUzvJtqlHij8faTTz5tn+vmdr3td+TvwCGFmXImIvIiYi4tOImM3PJ/kWH/a27HaPH91e3n90ezmJTueTfybd+uxcHLlP5tX8Maci4kffj/hp8mzc1s7u+lK9XtvKy5V2Y7PS2tm9utZYWq2t1jaq1cWFxfn3r71XPbe+vtX43cPvrX304z/+4av3/7z3nV9kzZrJ64724zz1ul46jJMZj4iPXkawAozl/ZkouiE8lzQiPhcRb2fXf6fo1gAAw9DpzEZn9mgZALjo0u4cWJKW87mAmUjTcrk3h/dmTKf1Zqt95UZze2OlN1c2F6X0xlq9Np/PFc5FKcnKC93jJ+XqsfK1iHgjIn45+Uq3XF5u1leKfOMDACPs1WP5/z+TvfwPAFxwU0U3AAAYOvkfAEaP/A8Ao0f+B4DRI/8DwOiR/wFg9Mj/ADBSfvjxx9nW2c9//3rl5s72evPm1ZVaa73c2F4uLze3NsurzeZq9zd7Gqc9Xr3Z3Fx4N7ZvVdq1VrvS2tm93mhub7Svd3/X+3qtNJReAQAneeOte39NImLvg1e6WxxZy0GuhostLboBQGHGim4AUJjxohsAFMZnfKDPEr1P6f8nQhMRd19Kc4AhuPwl8/8wqsz/w+jqP/8v88MoMP8Po6vTSaz5DwAjxid94Pm+/w/f/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDSZrpbkpbztcBnIk3L5YjXImIuSsmNtXptPiJej4i/TJYms/JC0Y0GAF5Q+vckX//r8uw7M8drJ5L/Tnb3EfHzX3/yq1tL7fbWQnb+X4fn23fz89Ui2g8AnOYgTx/k8QOPH91ePtiG2Z6H3+0tLprF3c+3Xs14jHf3U1GKiOl/J3m5J3u/MnYO8ffuRMQX+/U/6c6NzOUrnx6Pn8V+bajx06fip9263j57Lj5/Dm2BUXMvG38+7Hf9pXGpu+9//U91R6gXdzD+7T8z/qWH49/YgPHv0lljvPunHwysuxPx5fF+8ZPD+MmA+O+cMf7fvvK1twfVdX4TcTn6xz8aq9JubFZaO7tX1xpLq7XV2ka1uriwOP/+tfeqle4cdeVgpvpZ//jgyusn9X96QPypU/r/zTP2/7f/+/QnXz8h/re/0f/1f/OE+FlO/NYZ4y9N/37g8t1Z/JUB/T/t9b9yxvj3H+yunPGmAMAQtHZ215fq9dpWfjC+dfyMg/M+yN67FRZ9L3/hi34SLtLBg5/1ntMz36v0WW58wsEXXmK/ihyVgGF4ctEX3RIAAAAAAAAAAAAAAGCQYfybVNF9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OL6fwAAAP//M8rRSQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00"], 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r4, 0xffffffffffffffff, 0x2) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1) 6m34.838903921s ago: executing program 4 (id=1346): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4044014) 6m32.386911175s ago: executing program 4 (id=1352): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000340)=0x8, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000000)={0x0, 0xfff, 0x6, 0x1, 0x8fff, 0x8, 0x1000, 0x7, 0x0, 0x1, 0x8, 0x4}) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000001380)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3}], 0xc}) socket$inet6(0xa, 0x3, 0x9) 6m30.57602761s ago: executing program 4 (id=1355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setrlimit(0x5, &(0x7f0000000000)={0x8465, 0xfff}) capset(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 6m28.614298047s ago: executing program 4 (id=1359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ff) 6m21.805483362s ago: executing program 40 (id=1338): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000100), 0x80000) mknodat(0xffffffffffffffff, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000040)='./file0\x00', 0x22) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 6m13.507763067s ago: executing program 41 (id=1359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ff) 4m47.944229514s ago: executing program 5 (id=1514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000005680)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e8451be2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fd20ef229e56213246f7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x11, 0x6e3, &(0x7f00000057c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close(r0) io_setup(0x3, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 4m44.813556818s ago: executing program 5 (id=1517): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@noload}, {@dioread_nolock}, {@grpquota}]}, 0x1, 0x4ee, &(0x7f0000000740)="$eJzs3E1sVNUeAPD/nWlL+Xr08Xi8B4/3XhGNjcSWFhQWJgajiQtNjCzUnU0/CFKooSURgmZIDC4NiXvj0q0Lt+qGGFcmbnFpYkiIYQOYGMfcmTufnWlpOzO19vdLhjnn3rn3nP+999yeew4zAWxZw+k/STl9OyL2RESu+QPD5bcH965NPbx3bSoKxeKZX5LSZvfTfCbbTezMMiO5iNyHSW1FnYUrV89Pzs3NXMryY4sX3h1buHL16XOD2ZJTp04cHz/57MQzqw+qRXlpXPcPfjB/6MDLb918daqvsrxSWn0cnTIcw62qUvJEpwvbYLvr0knfBlaEVUmv//R09Zfa/57Ix3Inr9DDmgHdViwWi9vary4Um11fsgTYtJLY6BoAG6Pyhz59/q28WnUEBrrT/dhwd0+XH4DSuB9kr4j/lxZWxkH6m55vO2k4It4s/Ppp+oqGcYi3u1QiALDVfX26OvzT2P8bKs+M/Hb51vPp+9+yOZShiPh7ROyNiH9ExL6I+GdE7I+If0XEv5v2n4+I4jLlDzflq+VXJ6FydzoQZltp/++5bG6r1v9rqMBQPsvtjqh0mGeOZcdkJPpLx298mTK+efGHj9utq+//pa+0/EpfMKvHnb6mAbrpycXJtcbb7O71iIN9zfEnfRFJdSYgiYgDEXFwFfsdqkufe+rzQ9VMf+PnVo6/pNhyHq0D80zFzyKeLJ//QjSc/1qJScP85IXJszNnZy5OVOcnxwZjbubY2Gzb2nz3/Y3X2q1bMf4vf2re5KWTX53JWtb6ped/R/X67yvFXpq/rcU/lEQk1fnahdWXcePHj9rOra71+h9Iygsrz6XvTS4uXhqPGEheWbp8orZtJZ++R6Ec/8iR1u1/b7ZNeiT+ExHpRfzfiPhflJ8Q07ofjojHIuLIMvF/+8Lj76w9/u5K459uuv+Vz3zD+a/N17dLJNncYItV+fOHbz9sc/N4tPN/opQayZa0vv8lDbeIdjWtjHukS35f99EDAACAzSEXEbvqxpJ2RS43OloeA9oXO3Jz8wuLR2fnL1+cTtdFDEV/bvbc3Myxgcp4cH+S5sezMb9KfqIpfzwbN/4kv72UH52an5ve0MiBnaU2n+RGI97I17X/1M+dGWIG/sx8Xwu2riXtv+4bwGknfv/NHlcI6JlH//t/6/2uVgToubr23+4b/oU1/L8vYBPw/A/UrPxDP+4ZsPkVtWXY0lbV/o/6EUD4K+mL16vp3IbWBOg1/X/Yklb8Xv+6EsVtrVcNxtIPx+DyO8zH2qqxvVZW5bdHuhly+0Tas+p5oWli+1q2qvyaQtvPRG51O9wWnTmns+s8GoVLC2f3d/ziL+a7c2l90ZN22irR81sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAV/wRAAD//7xR0mI=") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./control\x00', 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000001c0)='./control\x00', 0xa2000396) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) close(r0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xff, 0x80000) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000200)={'\x00', 0xf, 0xfffffff8, 0x3, 0x2e, 0x401, r1}) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000001480)={0x10, 0x0, "efadd89a95dbcd173b03b36f7ba844b2"}) 4m43.295388359s ago: executing program 9 (id=1522): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)}], 0x1}, 0x0) 4m42.201657414s ago: executing program 9 (id=1525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) 4m41.04370301s ago: executing program 9 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xfffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000005680)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e8451be2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fd20ef229e56213246f7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x11, 0x6e3, &(0x7f00000057c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close(r0) io_setup(0x3, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 4m37.989348452s ago: executing program 9 (id=1531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0xf, 0x0, &(0x7f0000000040)) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) getpriority(0x2, r0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 4m33.953665879s ago: executing program 9 (id=1536): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)}], 0x1}, 0x0) 4m33.564485813s ago: executing program 5 (id=1538): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000340)=0x8, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000000)={0x0, 0xfff, 0x6, 0x1, 0x8fff, 0x8, 0x1000, 0x7, 0x0, 0x1, 0x8, 0x4}) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000001380)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3}], 0xc}) socket$inet6(0xa, 0x3, 0x9) 4m32.797335445s ago: executing program 9 (id=1540): socket(0x200000000000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900"], 0x110}}, 0x40040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5], 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140000000001400000011"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000dfff000000000100000a14000000020a05ffff00000000000000000000801400000011000100ffffffff00c47a0000000000000a"], 0x3c}, 0x1, 0x1200}, 0x4000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m32.316349011s ago: executing program 5 (id=1542): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000340)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x840, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000000)={0x0, 0xfff, 0x6, 0x1, 0x8fff, 0x8, 0x1000, 0x7, 0x0, 0x1, 0x8, 0x4}) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r7 = dup3(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000001380)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3}], 0xc}) socket$inet6(0xa, 0x3, 0x9) 4m30.98511989s ago: executing program 5 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xf, 0x0, &(0x7f0000000040)) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) getpriority(0x2, r1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 4m29.862346625s ago: executing program 5 (id=1545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}], 0x1, 0x100, 0x400005) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x7ff, 0x6}}) 4m17.508510907s ago: executing program 42 (id=1540): socket(0x200000000000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900"], 0x110}}, 0x40040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5], 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140000000001400000011"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000dfff000000000100000a14000000020a05ffff00000000000000000000801400000011000100ffffffff00c47a0000000000000a"], 0x3c}, 0x1, 0x1200}, 0x4000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m13.853285858s ago: executing program 43 (id=1545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}], 0x1, 0x100, 0x400005) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x7ff, 0x6}}) 2m8.484787087s ago: executing program 2 (id=1820): r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e843fbe2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fdc07a790b922ea0cdf7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES8], 0x11, 0x6e3, &(0x7f00000057c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) 2m6.732971071s ago: executing program 2 (id=1822): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@noload}, {@dioread_nolock}, {@grpquota}]}, 0x1, 0x4ee, &(0x7f0000000740)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./control\x00', 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000001c0)='./control\x00', 0xa2000396) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) close(r0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xff, 0x80000) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000200)={'\x00', 0xf, 0xfffffff8, 0x3, 0x2e, 0x401, r1}) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000001480)={0x10, 0x0, "efadd89a95dbcd173b03b36f7ba844b2"}) 2m3.572239626s ago: executing program 3 (id=1833): r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e843fbe2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fdc07a790b922ea0cdf7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES8], 0x11, 0x6e3, &(0x7f00000057c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) 2m2.439362411s ago: executing program 2 (id=1835): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4061, 0x29140) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) 1m59.455154692s ago: executing program 3 (id=1836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xf, 0x0, &(0x7f0000000040)) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) getpriority(0x2, r1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 1m58.718188062s ago: executing program 2 (id=1837): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m57.317936732s ago: executing program 2 (id=1841): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 1m56.476653804s ago: executing program 2 (id=1844): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x5, r1, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 1m55.636858505s ago: executing program 44 (id=1844): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x5, r1, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 1m55.623880015s ago: executing program 3 (id=1849): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000001880)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r1, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chmod(0x0, 0xa5) 1m55.26848378s ago: executing program 3 (id=1852): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m54.328427023s ago: executing program 3 (id=1854): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 1m53.788203991s ago: executing program 3 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xf, 0x0, &(0x7f0000000040)) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) getpriority(0x2, r1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 1m53.204958859s ago: executing program 45 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xf, 0x0, &(0x7f0000000040)) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) getpriority(0x2, r1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 18.788737249s ago: executing program 1 (id=2061): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xfffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000005680)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e8451be2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fd20ef229e56213246f7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x11, 0x6e3, &(0x7f00000057c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close(r0) io_setup(0x3, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 15.488787505s ago: executing program 1 (id=2065): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001980)="d527cf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784db4600a1b79ec37b13575abaf52a8afe4"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 13.593540621s ago: executing program 0 (id=2073): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.25842488s ago: executing program 6 (id=2074): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 11.948115244s ago: executing program 7 (id=2075): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xfffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000005680)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e8451be2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fd20ef229e56213246f7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x11, 0x6e3, &(0x7f00000057c0)="$eJzs3c1vHGcdB/DvrNeON0TBaZM2QkVYiQRIURPHVgrhgkEI5VChqhx6thKnsbpJqsRFaYXABQQnJA79AwqSbxwQEvegcOFSbr36WAmJS8QhioQWzezsetdevyWxncDnE43neeZ5md8888yMd53VBvi/deVcmvdT5Mq5N++V+bXVufba6tyRuridpEw3kmZ3leJWUjxI5svyYmDJwHqTT5Yuv/35w7UvurlmvVT1x7ZrN8KIuiv1kum6v+mRLcd3u4uVOrwcS3K1Xg+b2G1fQxXLQTtbr+HQdTZZ2UvzvVy3wHOm93QqHnfGRpVPJUeTTNa/B6S+OzQOLsL9sae7HAAAALygPrt92BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAi6dIxrqramnU60yn6H3//0RvW5Lm4Ua7lfld17y/r3EAAAAAAAAAwMH42qM8yr0c7+U7RfU3/zNV5mQed5Iv5YPczWLu5HzuZSHLWc6dXEwyNdDRxL2F5eU7F/stS6Nbzo5sOTs6vsa+HDUAAAAAAAAA/M/5RVrrf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnQZGMdVfVcrJeZyqNZtbLspL8I8nEYce7B8WojffLH0cOPBYAAAB4YpNP0ObLj/Io93K8l+8U1Wv+V6rXy5P5ILeynKUsp53FXKtfQ5ev+htrq3PttdW5m+VS5of7/d6/9hTGRN3DWJUbtefTVY1Wrmep2nI+V6tgrqXR3ffZ5HQvnoG4BnxcxlR8t7bLyJr1sJY7+91W7yI8E/eHco1tarbWg0v6IzJTx1a2PNEdgaJ6oybZOBI7np3mUG6q6nW8v6eLafTf+Tm5D2N+tF6Xx/PrfR3zYbM71uiPRCPVSMz2Zl95zWw/Esk3/vLHd260b7134/rdcwd1SE9tbIvtG+fE3MBIvPpCj0Rzj/VnqpE41c9fyQ/z45zLdN7KnSzlJ1nIchbTqcsX6vlc/pzafqTmh3Jv7RTJRH1euudsNzFN5wdVaiFnqrbHs5Qit3Mti3mj+jebi/lWLuVSLg+c4VNbxl0dW3XVNzZe9b0z/deRwZ/9Zp0o726/Wb/LzW93xFvNzmele+8vx/XEwLh2Z/3Dfq0TA9fBzMAovdQbnfGRnT/JvbH5lTpR7uOXOzwnDtZUPRLlBdR7SvSie7k7Es3qWbR5nv++U7ZL+1anc2Ph/S36XxnO/qfTVU2r1a/uULtv9Kl4tsr58lIm6zvJwOw4PlaVvdy/ywyUddbncrds+IlbtjtVlRVF70r9UW5XE2DzlVrWfqX/a8JgT7NV2asj9zJXlZ0eKBv6fSu30861geN8/dgBDCYAu/T3d/rJqRydaP2z9Vnr09avWjdab05+/8i3j7w2kfG/jX+nOTP29cZrxZ/zaX62/vofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4cnc//Oi9hXZ78c7oRGProqFEKxu37NTzhkRRf0/U3lo9v4nJJENbqu85OvAwWr0wxreq0/l5cuDj0/sSwdF1flsmmptm1KjE/NCWP23u8OM9Rljs7rrYx0QjB7vTsYyeAId4UwIOxIXlm+9fuPvhR68v3Vx4d/HdxVvjly5dnrl86Y25C9eX2osz3Z+HHSWwH9Yf+ocdCQAAAAAAAAAAALBboz4YcObYhs+uPNlnPPzPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZuHIuzfspcnHm/EyZX1uda5dLL71es5mk0UiKnybFg2Q+3SVTA90V+cODdEbs55Oly29//nDti/W+mt36SaNeb2370iQr9ZLpJGP1+ikM9Xf1qfsr/t07hnLAHnc6nfmniw+ejf8GAAD//9co/r0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close(r0) io_setup(0x3, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 10.177208939s ago: executing program 7 (id=2077): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.691017975s ago: executing program 1 (id=2079): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x9, 0x6}], 0x10, 0x71, @void, @value}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x3, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r3, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000"], 0x1c}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101e3ffffffffffffff000200000004001700240001801400018008000100e000000108000200e00000010c000280"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30}, 0x30) 9.136269683s ago: executing program 1 (id=2080): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) 8.727794509s ago: executing program 0 (id=2081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', '', [{}, {0x20, '@@\xe4x\xbbd\xe5\xfaP\xd3\xb5g\xba(\xa7\x94|@\xbe\x81~L\xa2\x8dD\xa1\x8b-\x01\xb8\xa5\xc8~\x9fb\xc0\xabEt\xa6l\xae\x9f{h\\X\x8b+(\xa2\xedvc\xday\xf5\x06\xa8;B\"\x1d\x9d=\x00\x00\x00\x00i#u\x01q\xa4\x17\f\f?\x91D\x95\xe7;\xe3\xc5TlO$D\x86\xf2\xa0J\xcfl\x82\xc3W\x81\x02\xb3\xccac\x18\x97yCZ\xe0^\x10\xb9\xa9^\xa0\xed\x85x\x0e\xcb\xc600\xa6\xa9\xadV@\x81\x12b\xfa0\x04\xfa\xa8\xc3R4\xd2\a\xf7\xb4\xc4ho\xf2\xeb\xfdE\t\xc8\xcdD'}], 0xa, "e077d37729ad424a91f94cbe06fffe000200ccc24a3cfaa0d55af9d98e1c57bb867e98606f84bbf0fbac19fada494c0000010052af76dbc0be844e7b21768ba889a4eef5e313769ec1e12e0e66aa00"}, 0xf2) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r0, &(0x7f0000000140)=[{&(0x7f0000003600)="e109ad5fecff2759123ba1ec0f71ea523a7fc23a818fdb7052ddc60c0c05e2ed4a13552be7f4bd12fbe84b7f03c1dbbc4ba544224eed35bfc5cfaaf8c764cb56a9f526e4e07bbf4e05a0654abea0a875619daee8b1454a29dbc74748685076899f7a1a2563556efd4d005582e30d72856c77a41e58ea51a24ffb530ccb96cf239f8d225325804d68b0de360d0a8a2f533058f3130dd531f4dfc1bec11bdc45799f767a4d119d5b6749458eaa323e97332ac3f9cd5b1bb26d7ad86f56966ba2fac94e8bf310375d73d1e3e0ba59798306f278283acb86aff08a0e9b35a70eb9cc1ac8e070ef43ea4ad849b6ef188c128106f3e08a8e2f69582419e1746fe6c23d9353cf8fdd7104c5ba9f68674d9e149346821622f4fbed14a40b471dca5ef4f3a21d9814929d0e9b7fafee7d9c932dade104a0be403bedcb3a52ece60ef99513fe1fea52c286675c49b60be5c6a24d6280a03d09761a50b05c7b2df3dbd6a5be076f6f38b734c974e76a12b3c714f0faa46d88687eab1e155ddb2a42a0c4c4f8c8e233ffffbd372694a5d72d78eeb55943f9988bfcc4d3bdc47b281babea4064d9e90b0661a325f476b268a62a013afe83e62fc557f3cbedfef98770f6607e60c215c00c30f52162b32ec1981e088111531825a9916c06b71d5b6fbb8eeec1fe7352dc435038c7811086fcde99b2f4df26f7afb72650438c75a5b0b684b5ac409cbbe96f46e9a19857f96009bc4f44d47cdd7e9cf36e56f77bd404c48a2216c4e644d3082ee46bcca3c586ae08abdc1d976c9163b19135641787f3bc280ab4046e745821ab9467c95ec2ce4a98402c987c5318f0900b9c1c53c0d0d62f6bf72e6c2d002a089e7463ecfe673c64c529e03dc9aaf0c892a41b51ae771fb8a9023b0dfa98705c3bbe1afea95a2d037b80109e0c0582ec347cfdf53f9e9e9243455f4f69de7907bb12d85d2ac6e6bb5360a10187d2bc4babcd00bcbdfbd1f7a18bd9789d0c921bc6f019ee547c6a7d69e5ebd7663319f68298715e073a8d2eee2c209f766c4a2adfd5b79654687945be42f1576765e919822ca742ce4818badf2c9355a144c05581b78dd2044fe2f51be8d7039589448af9561b71c650f6745e490d2208d08fd350e128da5b8f5e3d0d29083c0f7e9e8eded4f6db3efb2dbcc187f6e578dd80a79bdb0eaece770c493b8bbaf84ffee75014ed8ce340373d305b7dc0eb4be2f56195d057bcbb271e7443fe3db1824ff425f6b3196e331b319a59b9cbfdd5dd3c8dd72e23cb402b14b2e657e33fadb8d9ab4a07f86ceb8f6926998e7f30885fc7085390c6b300246541dfa6c5ff8d725494576b6f538b1da1bd6112671170c089f0151fb46bcf70c3e6e79b304600058a3e39dc4ef418961c2e4261aece0b6633d62ea82d173534b37ce3486f1a3801680ffd9c9a33be6f136486221bdb626ec68c3e76a35aab75721af5ddaf7a85669cb4206fb6865a744642737cabecc4a2b93aac5b0a49325e6efff56f9d2648b262fbda08ff8349161e4dfe0c9c5a1852ced6565fe57cd81c95dfb1a19fed952f03d1ea2851b45f85fcc1f67b2776e1bf44d1f2ad44864349f38d752ffa9d6ae7d663b78c4b2cc17fb1408a07e582848a7ed891c256def4e124dd767650378f398fcdc33c46abbffc541e66ebc65898cf646d121366bb3a3528a953310ad24878efd2a570e48684d753d0380e12f3ffb77bf308ba576ebac88267e6414f31bb60891c94317163e2ee296de822a82bdf7062c6fd53daf84f459a97af53ffbbd38e5267522c9e6cb5d3c6f6c14298d8f8b1082322d6fac4f9a42b67c52823a3ad1eb9715a3f3361567c6c13a6ce554d87188262a5395d0b02c5f1af285f541220dd983bd21eba1284c08d5d2c160f149293dc41d1919e53ecc35cdc8ff06304bf026c5003fda2b4c4f1d7740c45f740325684858978fa5503417a17aacd7fbd0026493e280e1e0bd63abe51d78252026ef9bb2645e067a6bb1fbdbf6a9344f40023195dad879e95da219ee5556d5cc91410e02aa9d1eb1422cb458fa921e316567f20785b9ff6a6f278668427131d56b53ed984a3fc2ca0aea24c97a721298b89ec62dc20b13f250ef8ee614bb7fdb18ef6a10fc4cc6256e4b91caccdf5c0c588b86b33252f83881a9b96a5f819e09f911a14a69d8742254b4d45608f922985e29b618c7a2d399464370ecf900eaa02d1196254afd61556521156bb3ff42e75a11ff43411d72d607853b3c7e4ff35ef47373c70a59b314716fba2dadd6bc45cc30028e2ffabcbc672868faac7a7584d29370bcc51bbbf7ca7ce0aa5f440ff55c94a84ee9455b9435fb960f6993358516a443ab4c175a99ab4d1f5952f4563b0bdda6cbbcc06ed5d47cffa6fbc930476b16f015087f55bf1f918e2cb53fb854a991e8c3b0ad198c5d59b501226a0253af0e505dbb321b1873e8ba29111ef28ed1f60e3d79eb5f84520c1cd6e34fdff1d6dadcad95371e9cf5e9dc6b19d9162bcaee31508fb8b24fb2548262fc034b0fafbb062bf643001cc000a6d3b16dc9f6476e5eb4db5af7b42dcc6414e1ae700e44d650348cec95ef5f5ee54a30002718df1fb874b775801f4c7b5d8540f19ec7dbb3bb6a487119301eecabb06f3826cebc30e2efeb33d742af81e1ec5b1d830be01ef68ed0b234f79e42cf7e9e9fa08aeca964bb19ba70847952931afde524b021abbf9ad4de967d920f8f533145345dc12f7a166cbd0893b2d9112c627cd994f7419b7fbac300bad5fb320fd6d5f47c86889e30e957f358d477e9d6c434d50898c143636098a8e98eb1fd9782144abfb75af37dc5e06232080fab2e7717895e40cdc204d6ae3aaf968391e7bf5d392d93f0c932047af3afedf3fc86f8388a68587f372be2adea17b7b46c082ceb7daa272613489d28187b70ada8f1138427c4d07c27cbbc37644be36b938e86f447389d1b04124f90def6dede34f9f5afdb30084920b4c17daaee5ade361a649cfdf7436266edcd30b99ae9c8570b31fd321fd05d8b5cb86f663c0783e7fae57da5d135a637ce21b44b7b3b1f3fb88f794fcdac82deafa88b0fd5b58ece570a40cc8ed210eef0b847b49e02dd4bfd93349438d144e684702fc179f36d06cf032eb2a5c509cfcb6a778f67d33ee5ee8a5c5ad7100735534c955fcdd5b522392ac42a21ad41002ca8cc3cdee524cf772ab79961640af63f95107a1d7f17590e12dd52953be7998ec545840f2c962a8db0ef94a4449415c1b15a2a13317c20a1b6b09d340a3142f7d90c3a37716cc58e722f3f1cb88783de8aa8408c543ad6ca00061309caeeb991b71bbbb647f04286ce66f61e0379b8a9595e3dd4e0bb394ec31bdba61e3999b06d73cd5d42dd41222dafacada2599e5d30dd5d79ab80ac18690bf3897e3f1256b7b01384086b98c9a9658bfab785dab4aac793aaca10596fc8a6921edd54f78625389a5c4103140f58990898328d7b2771c177c37aae8dbb35b9f34079b434d1c84772710be55951dc862a92c4cb88a07daf6f1dba92bd747e2ad7377084b25f1dcd29c91078d0201e4f845bdd6cdbd50b3f49deee6477f29c7f156a80ee2162fc9db42cf69043bb7afc6259d6d7675441d5f059fa5e960163a56c2b2cd2c4ff29a4b2fe9b1b52e4e69bb935f54da4b38071f5c8f96ef45792cceef667ac0559beecea589c0f594dd1996463d79ce3804fe1bb4249e9e7f1d3f7949a1edcabbd144d0e2bc8dd4231875d74241555558c5e579b7501aee56e0d9b49d3d3c5922b854948ce175481bf9c90d0d3f5a5fade8e1bfbf6ff9bfa2fcde09e2905bba81a5589be7288ff0a5f1fa3e69a580e09b903c016f53a872d789c46904c0a997b48582b5c519bc1b9cfa877d9d3adf500ed312e7379f4f3d04edf72676038fc89aa54c91aaa3cfa5b4cedcdf873ca4f246ada1d92ef57dedfda60dade566cbc6d842cbfdd4cac3a621b2730a7e6bf77629182ce17a799fd5f56da2d922753a692c1cbc14dd398d03d105dbe8c8c3252361194796288b3cd447da910cd6676f57a5d7fcd50daedbab62f1f3c2e42f16deb9a7a290a696fe50d7c2b342e905b612ba8d5c3e0d7e86477a8e178abd92e34ae6d073e603f97e97ef8e214817e65585d3e88888f0cd1c73d679d4cb8025b57942cd3d5d5acf8ee1e81c5bf9aabb2af47a1ea49c243f73222c886b40ea192be64f168935e9f2dc24ddd7afb49f4c3f1be773cc11d69d28bb95b1838e432a598f6ac15a594f7e247ea12dbabf15802c05bc89d44a28be59dcd79a45b6d2ef613b12461e863e4ba866a13e37fdcd5d8b1d559936479e3f26bde2873797300e3e7e3df55a48357fb39e597d52a7111aae4492ae8f53f239ce35f2bed04c056f2dc4710612aef08664644bb4b24e5fd00f4a143dece42830183ed62cd3d6c9ac352da759cc99c4f3f65ad52ae2496af2122c0d8282e55f0f9b3a078688d8e0567b2b57d7ed61deb367e75db5e5da3c8bbe333c801ba3cfb5aeade5594ab4a76cc1a1beda07e41887bd61ed0247c331fae50b15319be2e61ac523bf02b2a136248963f8793a59c0c3def33f6c01b4e1d7e4e6b794e76bf276c6ff3c52aff2f6f5a297e0cced8462f08c7e9c6e6620cb7f847c48be55e73bc4c63f776b3bc8fe6fe0d9ee9d4993ba227dfbd8b5a427472ea9e2e16be105afce3c4e579c7ca1a34e3d27ad919ba69a47b1fe47a6f03c58daa5f203c0aa2062f29a4f99e1faf0e2f16bbc17a596c6f24276d322eae446509537c769bd98bd51bf2b183327943a8b04c356f7b6161ad9a61d15e5e3d9b83c95730d707356a063879a170d483461b461693b453964fd5fffe490a8aa5fab4d1ac0a74713ecca9a6bb739ec389dad9d61af1f4c8417442e0b8af6877666211b17c36678baaf1593f3322052e0c42cf248d99eb3b8c14279e46a9ce672459ca6ed3644f155b847d7470a588257f6bf46c522cab72b7bea65710eb68e5e9bc6d84c7a757f6954de527e6462f87039e74681f8c64a851cb0b6caa6af5cd364e68329645bf8923a6ed32e44aa8444f68e417214f9f96aa1cbf88bf31a2606511ceee269259b7aa27143c20246b0cb353366b16a0fb45e1afa9e86703b7d53a00f710ef62746ecefbe854c1e4e6d68a1b635b2d14a0e8844d709fa26cd576b256197172118ef2efdb5590064ff9c1c7a0ac67b13b103cabc8b1f1625f4945ff0467b62a6fcead48c57362e34d64e78f7651a7bde31ae5ac2dc51ffd002ee9f87fc7eadacc35c39684075464a60225b4d2fce50456bbf455373098a4e084a352a2f1f0474e621369d2151141e72226e4a26f221188d1cdeb696fb3f2e670d6831324b05f85e4bd3ce4ba0131ef410d91242339aed3850874e6d6510e051643f336be22c8d0ef8e56802ca7cee65b20e749b0a", 0xf00}], 0x1) 8.550438821s ago: executing program 0 (id=2083): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d"], 0x0) close(0x3) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) 8.149849177s ago: executing program 6 (id=2084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 7.970624049s ago: executing program 6 (id=2085): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, 0x0, &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 7.790667372s ago: executing program 6 (id=2086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioprio_get$uid(0x3, 0x0) 7.459734837s ago: executing program 7 (id=2087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xf, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) getpriority(0x2, r1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 6.410778391s ago: executing program 1 (id=2088): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xfffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000005680)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e8451be2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fd20ef229e56213246f7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x11, 0x6e3, &(0x7f00000057c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close(r0) io_setup(0x3, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 6.321301712s ago: executing program 7 (id=2089): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/90, 0x5a}, 0x10100) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 4.758214774s ago: executing program 8 (id=2090): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001980)="d527cf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784db4600a1b79ec37b13575abaf52a8afe4"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 4.682975455s ago: executing program 0 (id=2091): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x9, 0x6}], 0x10, 0x71, @void, @value}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x3, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r3, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000"], 0x1c}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101e3ffffffffffffff000200000004001700240001801400018008000100e000000108000200e00000010c000280"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30}, 0x30) 4.587236906s ago: executing program 1 (id=2092): r0 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r2 = syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = syz_io_uring_setup(0x1e, &(0x7f0000000300)={0x0, 0x402, 0x20, 0x1000001, 0xf7fffffd, 0x0, r4}, 0x0, &(0x7f0000000680)) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r6, 0x40096102, &(0x7f0000000180)={{}, 0x55}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x140, 0x0, 0x0, 0x4) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x9, 0x2, @thr={&(0x7f0000000580)="13ad2e7a412fe17f82b84ced453a59a734a237724a3f42fd3ea0e7736d424eef99ec448ef903ef638f070ca82c8fee6d57ecdea20bc24c9944b592d079ebe6724b3538625b554c3c1facc83f9f2efb378ccb2d77485779b32f7996427bc36aba4bee784daa6426df9209d88ceba1df1d79efcd5624db5c43686ef1d222a26225995feac135ad298fce157f6104ac9d8ecd680fd12ab255e3b65342244e1862f300bba10d9e96e42e8272c21cb5a9ae567e9b7f2dff", &(0x7f0000000740)="588decc425d95859f53cfc3b628ff6429f1e39dadc15be503c0febe78c193f7c1e9dbef5c5819f57c66f37837750a7592d12d14ab74b029f124d1238e78541a714222df8a404e801233f2cc1c50984628ea0d40af78f2f276b4dbc737f0e9d86ff5dff06003f6f3aebcf6f175865ad604a547fd0c294d6e424e929a6cc1a2457e3b5bcdcb7170c33695c71e945508f85975a10b1e71231f6d24793cfff9979998992ccadb65a79477d44deb8a44640d0468df906078bc86f82d63999d984733a70227f11b8a1b2087d0b7c854ef39f69de"}}, &(0x7f00000002c0)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYRES64=r4, @ANYRES64, @ANYRESHEX, @ANYRES64=r2, @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x40400}, 0x80c0) r8 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) fcntl$dupfd(r8, 0x0, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r10 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) readv(r9, &(0x7f0000000280)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/177, 0xb1}, {&(0x7f0000000a40)=""/247, 0xf7}, {&(0x7f0000000240)=""/36, 0x24}], 0x4) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x1, 0xf0000000, 0x7681, 0xfb}}, 0x11c) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) 4.407896259s ago: executing program 0 (id=2093): mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x0, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000640)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r4, 0x5423, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r5) 4.406728639s ago: executing program 7 (id=2094): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 4.192300402s ago: executing program 8 (id=2095): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.842999217s ago: executing program 8 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 3.527613871s ago: executing program 8 (id=2097): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="043e63020401"], 0x66) geteuid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='ext4_discard_blocks\x00', 0xffffffffffffffff, 0x0, 0x5e}, 0x18) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x10, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@mcast1, 0x3, 0xe, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x40000) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) 3.004167068s ago: executing program 6 (id=2098): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) 2.255826039s ago: executing program 8 (id=2099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xf, 0x0, &(0x7f0000000040)) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rmdir(0x0) getpriority(0x2, r1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 1.350449891s ago: executing program 8 (id=2100): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xee, 0x97, 0x8a, 0x40, 0x16ca, 0x1502, 0xa925, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0x24, 0x5}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0) syz_io_uring_setup(0x6aa2, 0x0, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x33}, 0x4000a100) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) socket$nl_netfilter(0x10, 0x3, 0xc) 645.237001ms ago: executing program 0 (id=2101): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d"], 0x0) close(0x3) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) 139.156548ms ago: executing program 6 (id=2102): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xfffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000005680)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e8451be2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fd20ef229e56213246f7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x11, 0x6e3, &(0x7f00000057c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close(r0) io_setup(0x3, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 0s ago: executing program 7 (id=2103): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x9, 0x6}], 0x10, 0x71, @void, @value}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x3, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r3, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000"], 0x1c}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101e3ffffffffffffff000200000004001700240001801400018008000100e000000108000200e00000010c000280"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30}, 0x30) kernel console output (not intermixed with test programs): batadv0: Interface activated: batadv_slave_0 [ 914.965604][T11851] loop1: detected capacity change from 0 to 32768 [ 915.250219][T11851] JBD2: Ignoring recovery information on journal [ 915.446998][T11851] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 915.653971][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 915.682760][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 915.713509][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.733705][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.763193][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.785915][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.805928][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.829003][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.853646][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.883145][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.904755][T11477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.932119][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 915.954739][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 915.997850][T11477] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.025894][T11477] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.068047][T11477] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.103268][T11477] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.297032][ T7633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.329814][T10565] ocfs2: Unmounting device (7,1) on (node local) [ 917.373199][ T7633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.432784][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 917.433489][ T4750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.503744][ T4750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.519616][ T7633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.551840][ T7633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.575846][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 917.613789][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 917.669001][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.691037][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.710849][T11910] loop2: detected capacity change from 0 to 4096 [ 917.759558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 917.808422][T11910] NILFS (loop2): invalid segment: Checksum error in segment payload [ 917.840276][T11910] NILFS (loop2): trying rollback from an earlier position [ 917.939079][T11910] NILFS (loop2): recovery complete [ 918.023155][T11918] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 918.124378][T11910] overlayfs: failed to resolve './file0': -2 [ 918.714540][T11931] fuse: Bad value for 'fd' [ 919.105432][ T4660] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 919.763916][ T4660] usb 8-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 919.773817][ T4660] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.782068][ T4660] usb 8-1: Product: syz [ 919.788388][ T4660] usb 8-1: Manufacturer: syz [ 919.793357][ T4660] usb 8-1: SerialNumber: syz [ 919.799982][ T4660] usb 8-1: config 0 descriptor?? [ 920.060870][T11920] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 920.073446][T11920] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 920.127316][T11941] loop1: detected capacity change from 0 to 64 [ 920.250866][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.264470][T11924] vivid-004: disconnect [ 920.292105][T11947] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.299437][T11947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.329736][T11949] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 921.773521][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 921.773541][ T26] audit: type=1326 audit(1746833606.090:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7fc00000 [ 921.949690][T10101] usb 8-1: USB disconnect, device number 2 [ 921.965939][T11917] vivid-004: reconnect [ 922.134536][T11967] rdma_rxe: rxe_register_device failed with error -23 [ 922.303813][T11967] rdma_rxe: failed to add syz_tun [ 922.379481][T11974] loop3: detected capacity change from 0 to 2048 [ 922.498419][T11974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 923.180603][T11965] loop0: detected capacity change from 0 to 32768 [ 923.290380][T11965] JBD2: Ignoring recovery information on journal [ 923.308888][T11496] EXT4-fs (loop3): unmounting filesystem. [ 923.320354][T11965] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 923.330344][T11965] JBD2: bad block at offset 32 [ 923.360593][T11965] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 923.961108][T11997] binder_alloc: 11996: binder_alloc_buf, no vma [ 925.951041][ T4252] ocfs2: Unmounting device (7,0) on (node local) [ 926.527686][T12019] rdma_rxe: rxe_register_device failed with error -23 [ 926.568765][T12019] rdma_rxe: failed to add syz_tun [ 926.680485][T11999] loop3: detected capacity change from 0 to 32768 [ 926.739581][T11999] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1659 (11999) [ 926.806731][T11999] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 926.843748][T11999] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 926.883355][T11999] BTRFS info (device loop3): force zlib compression, level 3 [ 926.911600][T11999] BTRFS info (device loop3): force clearing of disk cache [ 926.959581][T11999] BTRFS info (device loop3): setting nodatasum [ 926.989027][T11999] BTRFS info (device loop3): allowing degraded mounts [ 927.020949][T11999] BTRFS info (device loop3): enabling disk space caching [ 927.063667][T11999] BTRFS info (device loop3): disk space caching is enabled [ 927.155373][T11999] BTRFS error (device loop3): open_ctree failed: -12 [ 927.299994][ T4411] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by udevd (4411) [ 927.663003][T12055] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 928.403278][T10101] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 929.144705][T12078] binder: BINDER_SET_CONTEXT_MGR already set [ 929.151488][T12078] binder: 12077:12078 ioctl 4018620d 200000000040 returned -16 [ 929.258464][T10101] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 929.283169][T10101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.340463][T10101] usb 3-1: Product: syz [ 930.016244][T10101] usb 3-1: Manufacturer: syz [ 930.021671][T10101] usb 3-1: SerialNumber: syz [ 930.289377][T10101] usb 3-1: config 0 descriptor?? [ 930.692582][T12059] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 930.732759][T12059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 931.005981][ T4741] usb 3-1: USB disconnect, device number 16 [ 931.015781][ T26] audit: type=1326 audit(1746833615.340:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.084044][ T26] audit: type=1326 audit(1746833615.340:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.192485][ T26] audit: type=1326 audit(1746833615.340:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.244205][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.252003][T12103] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.259254][T12103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.319786][ T26] audit: type=1326 audit(1746833615.340:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.424838][ T26] audit: type=1326 audit(1746833615.340:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.429584][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.454673][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.535868][T12105] rdma_rxe: rxe_register_device failed with error -23 [ 931.558199][T12105] rdma_rxe: failed to add syz_tun [ 931.564848][ T26] audit: type=1326 audit(1746833615.340:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.681279][ T26] audit: type=1326 audit(1746833615.340:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.763358][ T26] audit: type=1326 audit(1746833615.340:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.874013][ T26] audit: type=1326 audit(1746833615.340:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 931.957125][ T26] audit: type=1326 audit(1746833615.340:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de998e969 code=0x7fc00000 [ 933.466562][T12127] loop1: detected capacity change from 0 to 1024 [ 933.557654][T12127] hfsplus: invalid btree flag [ 933.562590][T12127] hfsplus: failed to load attributes file [ 935.044478][ T4265] Bluetooth: hci4: command 0x1003 tx timeout [ 935.054882][T11736] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 937.041967][T12154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1691'. [ 937.084475][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 937.335667][T12159] rdma_rxe: rxe_register_device failed with error -23 [ 937.366613][T12159] rdma_rxe: failed to add syz_tun [ 937.680839][T12165] fuse: Bad value for 'fd' [ 938.544404][T12173] binder: BINDER_SET_CONTEXT_MGR already set [ 938.550482][T12173] binder: 12170:12173 ioctl 4018620d 200000000040 returned -16 [ 940.184011][T12205] loop7: detected capacity change from 0 to 512 [ 940.233209][T12205] EXT4-fs: Mount option(s) incompatible with ext3 [ 940.655897][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 940.680418][ T26] audit: type=1326 audit(1746833624.940:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 941.127711][ T26] audit: type=1326 audit(1746833624.940:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 941.227751][ T26] audit: type=1326 audit(1746833624.940:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 941.250786][ T26] audit: type=1326 audit(1746833624.940:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 941.306995][T12208] loop2: detected capacity change from 0 to 4096 [ 941.328683][ T26] audit: type=1326 audit(1746833624.940:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 941.382822][T12208] NILFS (loop2): invalid segment: Checksum error in segment payload [ 941.427160][T12208] NILFS (loop2): trying rollback from an earlier position [ 941.432479][ T26] audit: type=1326 audit(1746833624.950:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f750778d2d0 code=0x7ffc0000 [ 941.528986][T12208] NILFS (loop2): recovery complete [ 941.578841][T12219] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 941.755774][ T26] audit: type=1326 audit(1746833624.950:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7507790197 code=0x7ffc0000 [ 941.791349][T12208] overlayfs: upper fs does not support tmpfile. [ 941.896228][T12208] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 941.951040][T12208] overlayfs: failed to set xattr on upper [ 941.958019][ T26] audit: type=1326 audit(1746833624.950:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 942.033219][T12208] overlayfs: ...falling back to index=off,metacopy=off. [ 942.114372][ T26] audit: type=1326 audit(1746833624.950:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7507790197 code=0x7ffc0000 [ 942.226213][ T26] audit: type=1326 audit(1746833624.960:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.7.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f750778d5ca code=0x7ffc0000 [ 943.746682][T12249] loop7: detected capacity change from 0 to 512 [ 943.825896][T12249] EXT4-fs: Mount option(s) incompatible with ext3 [ 945.508771][ T4499] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 945.895296][ T4499] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 945.923128][ T4499] usb 8-1: config 0 interface 0 has no altsetting 0 [ 945.935955][ T4499] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 945.980113][ T4499] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.005856][ T4499] usb 8-1: Product: syz [ 946.010295][ T4499] usb 8-1: Manufacturer: syz [ 946.019270][ T4499] usb 8-1: SerialNumber: syz [ 946.816415][T12280] lo speed is unknown, defaulting to 1000 [ 946.822569][T12280] lo speed is unknown, defaulting to 1000 [ 946.835221][T12280] lo speed is unknown, defaulting to 1000 [ 946.883861][T12280] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 946.911243][T12280] lo speed is unknown, defaulting to 1000 [ 946.918507][T12280] lo speed is unknown, defaulting to 1000 [ 947.045873][T12280] lo speed is unknown, defaulting to 1000 [ 947.052384][ T4499] usb 8-1: config 0 descriptor?? [ 947.052698][T12280] lo speed is unknown, defaulting to 1000 [ 947.066228][T12280] lo speed is unknown, defaulting to 1000 [ 947.094011][ T4499] usb 8-1: selecting invalid altsetting 0 [ 947.347679][ T4499] usb 8-1: USB disconnect, device number 3 [ 947.669587][T12288] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 947.804839][T12288] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 948.413464][T12306] loop0: detected capacity change from 0 to 512 [ 948.473337][T12306] EXT4-fs: Mount option(s) incompatible with ext3 [ 948.905249][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 948.911600][ T26] audit: type=1326 audit(1746833633.180:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 949.434650][ T26] audit: type=1326 audit(1746833633.180:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 949.473168][ T26] audit: type=1326 audit(1746833633.180:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 950.471263][ T26] audit: type=1326 audit(1746833633.180:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 950.471891][T12321] fuse: Bad value for 'fd' [ 950.500489][ T26] audit: type=1326 audit(1746833633.190:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 950.543317][ T26] audit: type=1326 audit(1746833633.190:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7e458d2d0 code=0x7ffc0000 [ 950.727423][ T26] audit: type=1326 audit(1746833633.190:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd7e4590197 code=0x7ffc0000 [ 950.807378][ T26] audit: type=1326 audit(1746833633.190:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 950.916988][ T26] audit: type=1326 audit(1746833633.200:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd7e4590197 code=0x7ffc0000 [ 950.966229][ T26] audit: type=1326 audit(1746833633.200:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd7e458d5ca code=0x7ffc0000 [ 951.297372][T12347] loop1: detected capacity change from 0 to 512 [ 951.350091][T12347] EXT4-fs: Mount option(s) incompatible with ext3 [ 952.565221][T12355] loop1: detected capacity change from 0 to 512 [ 952.669452][T12355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 952.709521][T12355] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.737176][T12363] loop7: detected capacity change from 0 to 512 [ 952.834573][T12363] EXT4-fs: Mount option(s) incompatible with ext3 [ 953.095501][T12367] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 953.110352][T12367] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 953.122807][T12367] EXT4-fs (loop1): This should not happen!! Data will be lost [ 953.122807][T12367] [ 953.132594][T12367] EXT4-fs (loop1): Total free blocks count 0 [ 953.138776][T12367] EXT4-fs (loop1): Free/Dirty block details [ 953.144842][T12367] EXT4-fs (loop1): free_blocks=65280 [ 953.151262][T12367] EXT4-fs (loop1): dirty_blocks=33 [ 953.156735][T12367] EXT4-fs (loop1): Block reservation details [ 953.162827][T12367] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 954.085229][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 954.085246][ T26] audit: type=1326 audit(1746833638.040:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 954.886315][T10565] EXT4-fs (loop1): unmounting filesystem. [ 955.336959][ T26] audit: type=1326 audit(1746833638.040:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 955.478063][T12379] binder_alloc: 12378: binder_alloc_buf, no vma [ 955.594363][T12381] binder_alloc: 12378: binder_alloc_buf, no vma [ 955.631920][ T26] audit: type=1326 audit(1746833638.140:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 955.827776][ T26] audit: type=1326 audit(1746833638.140:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 955.887045][ T26] audit: type=1326 audit(1746833638.140:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 955.978165][ T26] audit: type=1326 audit(1746833638.240:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 956.022467][ T26] audit: type=1326 audit(1746833638.240:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 956.057481][ T26] audit: type=1326 audit(1746833638.240:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 956.130253][ T26] audit: type=1326 audit(1746833638.340:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f750778d2d0 code=0x7ffc0000 [ 956.211139][ T26] audit: type=1326 audit(1746833638.340:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.7.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7507790197 code=0x7ffc0000 [ 958.314964][T12411] loop2: detected capacity change from 0 to 512 [ 958.390460][T12411] EXT4-fs: Mount option(s) incompatible with ext3 [ 959.181841][T12416] loop3: detected capacity change from 0 to 512 [ 959.284921][T12416] EXT4-fs: Mount option(s) incompatible with ext3 [ 959.826184][ T4265] Bluetooth: hci4: command 0x1003 tx timeout [ 959.913799][T11736] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 959.921953][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 959.929539][ T26] audit: type=1326 audit(1746833643.990:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3098e969 code=0x7ffc0000 [ 960.234499][ T26] audit: type=1326 audit(1746833643.990:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc3098e969 code=0x7ffc0000 [ 960.258135][ T26] audit: type=1326 audit(1746833644.000:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3098e969 code=0x7ffc0000 [ 960.323111][ T26] audit: type=1326 audit(1746833644.000:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fbc3098e969 code=0x7ffc0000 [ 960.981208][ T26] audit: type=1326 audit(1746833644.000:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3098e969 code=0x7ffc0000 [ 961.005390][ T26] audit: type=1326 audit(1746833644.000:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3098d2d0 code=0x7ffc0000 [ 961.052584][ T26] audit: type=1326 audit(1746833644.000:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbc30990197 code=0x7ffc0000 [ 961.070854][T12437] loop1: detected capacity change from 0 to 1024 [ 961.224192][ T26] audit: type=1326 audit(1746833644.010:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc3098e969 code=0x7ffc0000 [ 961.252731][ T26] audit: type=1326 audit(1746833644.010:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbc30990197 code=0x7ffc0000 [ 961.403213][ T26] audit: type=1326 audit(1746833644.010:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbc3098d5ca code=0x7ffc0000 [ 961.460040][T12440] loop7: detected capacity change from 0 to 512 [ 961.725059][T12440] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 961.775825][T12440] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.795411][ T4324] hfsplus: b-tree write err: -5, ino 4 [ 962.074934][T12452] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 962.327901][T12460] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 962.342546][T12460] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 962.355320][T12460] EXT4-fs (loop7): This should not happen!! Data will be lost [ 962.355320][T12460] [ 962.365401][T12460] EXT4-fs (loop7): Total free blocks count 0 [ 962.371413][T12460] EXT4-fs (loop7): Free/Dirty block details [ 962.377533][T12460] EXT4-fs (loop7): free_blocks=65280 [ 962.382896][T12460] EXT4-fs (loop7): dirty_blocks=33 [ 962.388489][T12460] EXT4-fs (loop7): Block reservation details [ 962.394667][T12460] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 963.224416][T11477] EXT4-fs (loop7): unmounting filesystem. [ 963.270677][T12459] loop1: detected capacity change from 0 to 4096 [ 963.400660][T12459] NILFS (loop1): invalid segment: Checksum error in segment payload [ 963.467231][T12459] NILFS (loop1): trying rollback from an earlier position [ 963.524909][T12466] loop7: detected capacity change from 0 to 512 [ 963.574853][T12466] EXT4-fs: Mount option(s) incompatible with ext3 [ 963.610051][T12459] NILFS (loop1): recovery complete [ 963.655479][T12470] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 964.716750][T12459] overlayfs: upper fs does not support tmpfile. [ 964.800926][T12459] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 964.951030][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 964.951046][ T26] audit: type=1326 audit(1746833649.270:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 964.983420][T12459] overlayfs: failed to set xattr on upper [ 964.993309][T12459] overlayfs: ...falling back to index=off,metacopy=off. [ 965.057019][ T26] audit: type=1326 audit(1746833649.300:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 965.126369][ T26] audit: type=1326 audit(1746833649.300:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 965.158479][ T26] audit: type=1326 audit(1746833649.300:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 965.197814][ T26] audit: type=1326 audit(1746833649.310:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 965.292216][ T26] audit: type=1326 audit(1746833649.310:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 965.372008][ T26] audit: type=1326 audit(1746833649.310:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 967.754811][T12516] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 967.770309][T12515] binder: BINDER_SET_CONTEXT_MGR already set [ 967.817607][T12515] binder: 12514:12515 ioctl 4018620d 200000000040 returned -16 [ 969.093154][T10099] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 969.290570][T12539] 9pnet_fd: Insufficient options for proto=fd [ 970.333307][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'. [ 971.013737][T10099] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 971.033141][T10099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.053228][T10099] usb 3-1: Product: syz [ 971.057653][T10099] usb 3-1: Manufacturer: syz [ 971.091422][T10099] usb 3-1: SerialNumber: syz [ 971.115839][T10099] usb 3-1: config 0 descriptor?? [ 971.252147][T12551] fuse: Bad value for 'fd' [ 971.737102][T12060] usb 3-1: USB disconnect, device number 17 [ 971.891432][T12559] loop7: detected capacity change from 0 to 512 [ 971.944009][T12559] EXT4-fs: Mount option(s) incompatible with ext3 [ 972.006013][ T26] audit: type=1326 audit(1746833656.330:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 972.196108][ T26] audit: type=1326 audit(1746833656.350:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 972.230430][ T26] audit: type=1326 audit(1746833656.350:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 973.193278][ T26] audit: type=1326 audit(1746833656.360:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 973.420434][ T26] audit: type=1326 audit(1746833656.360:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 973.890725][ T26] audit: type=1326 audit(1746833656.360:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 973.985500][T12580] loop3: detected capacity change from 0 to 1024 [ 974.099936][T12580] hfsplus: invalid btree flag [ 974.107935][T12580] hfsplus: failed to load attributes file [ 974.926628][ T26] audit: type=1326 audit(1746833656.360:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 975.287899][ T26] audit: type=1326 audit(1746833656.360:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 975.402906][ T26] audit: type=1326 audit(1746833656.360:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 975.512711][ T26] audit: type=1326 audit(1746833656.360:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 975.749567][T12596] loop1: detected capacity change from 0 to 4096 [ 976.144288][T12596] NILFS (loop1): invalid segment: Checksum error in segment payload [ 976.182054][T12596] NILFS (loop1): trying rollback from an earlier position [ 976.364393][T12596] NILFS (loop1): recovery complete [ 976.394825][T12606] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 976.423151][ T4487] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 976.645595][ T4487] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 976.673242][ T4487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.709246][ T4487] usb 4-1: Product: syz [ 976.742987][ T4487] usb 4-1: Manufacturer: syz [ 976.753341][ T4487] usb 4-1: SerialNumber: syz [ 976.781768][ T4487] usb 4-1: config 0 descriptor?? [ 977.005833][T12598] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 977.033309][T12598] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 977.100398][T12614] binder: BINDER_SET_CONTEXT_MGR already set [ 977.122888][T12614] binder: 12612:12614 ioctl 4018620d 200000000040 returned -16 [ 977.180204][T12619] loop0: detected capacity change from 0 to 512 [ 977.269501][T12621] fuse: Bad value for 'fd' [ 977.710329][T12602] vivid-001: disconnect [ 977.718413][T12619] EXT4-fs: Mount option(s) incompatible with ext3 [ 978.832164][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 978.832180][ T26] audit: type=1326 audit(1746833663.150:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3098e969 code=0x7fc00000 [ 978.896472][T12627] binder: BINDER_SET_CONTEXT_MGR already set [ 978.939565][T12627] binder: 12624:12627 ioctl 4018620d 200000000040 returned -16 [ 979.042748][T10099] usb 4-1: USB disconnect, device number 4 [ 979.067566][T12597] vivid-001: reconnect [ 979.229888][T12633] loop7: detected capacity change from 0 to 1024 [ 979.301959][T12633] hfsplus: invalid btree flag [ 979.319696][T12633] hfsplus: failed to load attributes file [ 981.070070][T12644] loop1: detected capacity change from 0 to 4096 [ 981.140710][T12644] NILFS (loop1): invalid segment: Checksum error in segment payload [ 981.192921][T12644] NILFS (loop1): trying rollback from an earlier position [ 981.283956][T12644] NILFS (loop1): recovery complete [ 981.305949][T12650] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 982.088457][T12672] binder: BINDER_SET_CONTEXT_MGR already set [ 982.114517][ T26] audit: type=1326 audit(1746833666.440:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 982.196081][T12672] binder: 12670:12672 ioctl 4018620d 200000000040 returned -16 [ 982.242885][ T26] audit: type=1326 audit(1746833666.450:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 982.402741][ T26] audit: type=1326 audit(1746833666.450:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 982.542079][ T26] audit: type=1326 audit(1746833666.500:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 982.679128][ T26] audit: type=1326 audit(1746833666.500:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 982.712677][ T26] audit: type=1326 audit(1746833666.510:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 982.824044][ T26] audit: type=1326 audit(1746833666.510:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 982.962173][T12695] fuse: Bad value for 'fd' [ 983.463390][ T26] audit: type=1326 audit(1746833666.510:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 983.497113][ T26] audit: type=1326 audit(1746833666.510:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 983.977214][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 983.977230][ T26] audit: type=1326 audit(1746833668.300:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 984.703158][T11736] Bluetooth: hci5: command 0x0406 tx timeout [ 986.278938][ T26] audit: type=1326 audit(1746833668.330:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 986.311549][ T26] audit: type=1326 audit(1746833668.330:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 986.334837][ T4487] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 986.475174][ T26] audit: type=1326 audit(1746833668.330:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 986.552067][ T26] audit: type=1326 audit(1746833668.330:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 986.657348][ T4487] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 986.682794][ T4487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.690491][ T26] audit: type=1326 audit(1746833668.390:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 986.711547][ T4487] usb 4-1: Product: syz [ 986.723132][ T4487] usb 4-1: Manufacturer: syz [ 986.754825][ T4487] usb 4-1: SerialNumber: syz [ 986.784395][ T4487] usb 4-1: config 0 descriptor?? [ 986.905136][ T26] audit: type=1326 audit(1746833668.390:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 987.043829][T12706] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 987.052844][T12706] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 987.149118][ T4487] usb 4-1: USB disconnect, device number 5 [ 987.213235][ T26] audit: type=1326 audit(1746833668.420:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 987.288535][T12714] loop2: detected capacity change from 0 to 1024 [ 987.326559][T12714] hfsplus: invalid btree flag [ 987.331481][T12714] hfsplus: failed to load attributes file [ 987.333475][ T26] audit: type=1326 audit(1746833668.460:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 987.399146][T12716] 9pnet_fd: Insufficient options for proto=fd [ 987.400755][ T26] audit: type=1326 audit(1746833668.460:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 989.057427][T12724] loop1: detected capacity change from 0 to 1024 [ 989.391149][T12727] loop3: detected capacity change from 0 to 4096 [ 989.491989][T12727] NILFS (loop3): invalid segment: Checksum error in segment payload [ 989.523182][T12727] NILFS (loop3): trying rollback from an earlier position [ 989.584949][T12727] NILFS (loop3): recovery complete [ 989.630374][T12732] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 989.703700][T12734] binder: BINDER_SET_CONTEXT_MGR already set [ 989.751680][T12734] binder: 12733:12734 ioctl 4018620d 200000000040 returned -16 [ 990.455434][T12746] fuse: Bad value for 'fd' [ 990.482175][T11736] Bluetooth: hci3: command 0x0406 tx timeout [ 990.556299][ T4476] hfsplus: b-tree write err: -5, ino 4 [ 990.744428][T12748] loop3: detected capacity change from 0 to 512 [ 990.838650][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 990.850236][T12752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.010972][T12748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 991.050947][T12748] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.059292][ T26] kauditd_printk_skb: 132 callbacks suppressed [ 991.059311][ T26] audit: type=1326 audit(1746833675.380:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 991.310097][T12766] loop2: detected capacity change from 0 to 512 [ 991.391288][T12767] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 991.406037][T12767] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 991.418452][T12767] EXT4-fs (loop3): This should not happen!! Data will be lost [ 991.418452][T12767] [ 991.428165][T12767] EXT4-fs (loop3): Total free blocks count 0 [ 991.434252][T12767] EXT4-fs (loop3): Free/Dirty block details [ 991.440203][T12767] EXT4-fs (loop3): free_blocks=65280 [ 991.445693][T12767] EXT4-fs (loop3): dirty_blocks=33 [ 991.450896][T12767] EXT4-fs (loop3): Block reservation details [ 991.457043][T12767] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 991.883388][T12766] EXT4-fs: Mount option(s) incompatible with ext3 [ 991.893913][T11496] EXT4-fs (loop3): unmounting filesystem. [ 991.938447][ T4411] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 992.866737][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.873443][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.891289][ T26] audit: type=1326 audit(1746833675.620:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 993.403330][ T4359] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 993.511016][ T26] audit: type=1326 audit(1746833675.620:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 993.689013][ T4359] usb 8-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 993.789714][ T4359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.851868][T12773] loop3: detected capacity change from 0 to 1024 [ 993.962827][ T4359] usb 8-1: Product: syz [ 994.059626][ T26] audit: type=1326 audit(1746833675.620:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 994.131890][ T4359] usb 8-1: Manufacturer: syz [ 994.224607][T12773] hfsplus: invalid btree flag [ 994.231403][ T4359] usb 8-1: SerialNumber: syz [ 994.310788][T12773] hfsplus: failed to load attributes file [ 994.425786][ T4359] usb 8-1: config 0 descriptor?? [ 994.560680][ T26] audit: type=1326 audit(1746833675.620:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 994.584241][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.726229][T12774] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 994.735313][T12774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 996.231116][ T26] audit: type=1326 audit(1746833675.620:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 996.254514][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.744541][ T26] audit: type=1326 audit(1746833675.620:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 996.767530][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.264718][ T26] audit: type=1326 audit(1746833675.620:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 997.288272][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.680061][ T26] audit: type=1326 audit(1746833675.620:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 997.702698][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.770636][ T4359] usb 8-1: USB disconnect, device number 4 [ 997.943199][ T26] audit: type=1326 audit(1746833675.620:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 998.053127][ T26] audit: type=1326 audit(1746833675.620:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 998.160824][ T26] audit: type=1326 audit(1746833675.630:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 998.183375][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.243458][ T26] audit: type=1326 audit(1746833681.940:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7fc00000 [ 998.265981][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.327307][T12795] loop1: detected capacity change from 0 to 1024 [ 999.108518][ T7597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.329059][ T7662] hfsplus: b-tree write err: -5, ino 4 [ 999.392706][T12811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.419884][ T26] audit: type=1326 audit(1746833683.740:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3098e969 code=0x7ffc0000 [ 999.491190][ T26] audit: type=1326 audit(1746833683.740:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3098e969 code=0x7ffc0000 [ 999.548690][ T7597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.794782][ T7597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.877721][T12817] tipc: Failed to remove unknown binding: 66,1,1/0:951474359/951474361 [ 999.889338][T12817] tipc: Failed to remove unknown binding: 66,1,1/0:951474359/951474361 [ 999.956869][ T7597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.439409][T12840] loop7: detected capacity change from 0 to 512 [ 1001.560852][T12840] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1001.591341][T12840] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.675184][T11736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1001.691882][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1001.701388][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1001.715171][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1001.723466][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1001.731376][ T4262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1001.934191][T12850] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1001.948883][T12850] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1001.961319][T12850] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1001.961319][T12850] [ 1001.971048][T12850] EXT4-fs (loop7): Total free blocks count 0 [ 1001.977106][T12850] EXT4-fs (loop7): Free/Dirty block details [ 1001.983219][T12850] EXT4-fs (loop7): free_blocks=65280 [ 1001.988547][T12850] EXT4-fs (loop7): dirty_blocks=33 [ 1001.994125][T12850] EXT4-fs (loop7): Block reservation details [ 1002.000154][T12850] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 1002.240539][T12855] loop1: detected capacity change from 0 to 1024 [ 1002.346002][T11477] EXT4-fs (loop7): unmounting filesystem. [ 1002.600697][T12861] loop7: detected capacity change from 0 to 512 [ 1002.646656][T12861] EXT4-fs: Mount option(s) incompatible with ext3 [ 1002.924370][T12848] lo speed is unknown, defaulting to 1000 [ 1003.603094][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1003.603114][ T26] audit: type=1326 audit(1746833687.320:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1004.026314][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 1004.251233][ T26] audit: type=1326 audit(1746833687.320:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1004.400935][ T26] audit: type=1326 audit(1746833687.320:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1004.543141][ T26] audit: type=1326 audit(1746833687.330:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1004.623184][ T26] audit: type=1326 audit(1746833687.330:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1004.755068][ T26] audit: type=1326 audit(1746833687.330:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f750778d2d0 code=0x7ffc0000 [ 1004.777517][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.825725][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1004.842127][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1004.851514][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1004.863129][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1004.872279][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1004.881522][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1004.930090][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 1005.056890][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1866'. [ 1005.092869][ T26] audit: type=1326 audit(1746833687.330:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7507790197 code=0x7ffc0000 [ 1005.154403][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 1005.160112][ T26] audit: type=1326 audit(1746833687.340:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1005.191801][ T26] audit: type=1326 audit(1746833687.340:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7507790197 code=0x7ffc0000 [ 1005.939346][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 1005.984765][ T26] audit: type=1326 audit(1746833687.340:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f750778d5ca code=0x7ffc0000 [ 1006.063385][T11736] Bluetooth: hci2: command 0x041b tx timeout [ 1006.144430][ T7633] hfsplus: b-tree write err: -5, ino 4 [ 1006.228534][T12890] loop0: detected capacity change from 0 to 512 [ 1006.356812][T12890] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1006.412582][T12890] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.790197][T12897] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1006.805078][T12897] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1006.817794][T12897] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1006.817794][T12897] [ 1006.827541][T12897] EXT4-fs (loop0): Total free blocks count 0 [ 1006.833646][T12897] EXT4-fs (loop0): Free/Dirty block details [ 1006.839617][T12897] EXT4-fs (loop0): free_blocks=65280 [ 1006.845024][T12897] EXT4-fs (loop0): dirty_blocks=33 [ 1006.850167][T12897] EXT4-fs (loop0): Block reservation details [ 1006.856340][T12897] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 1006.984030][T11736] Bluetooth: hci3: command 0x0409 tx timeout [ 1007.742977][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 1007.961366][T12875] lo speed is unknown, defaulting to 1000 [ 1008.143177][T11736] Bluetooth: hci2: command 0x040f tx timeout [ 1008.349288][T12848] chnl_net:caif_netlink_parms(): no params data found [ 1008.886187][ T7597] device hsr_slave_0 left promiscuous mode [ 1008.892740][ T7597] device hsr_slave_1 left promiscuous mode [ 1008.899822][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.907643][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.917446][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.925183][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.933347][ T7597] device bridge_slave_1 left promiscuous mode [ 1008.939653][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.956343][ T7597] device bridge_slave_0 left promiscuous mode [ 1008.962904][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.023163][T11736] Bluetooth: hci3: command 0x041b tx timeout [ 1009.158872][T12930] loop7: detected capacity change from 0 to 1024 [ 1009.200963][ T7597] device veth1_macvtap left promiscuous mode [ 1009.213262][ T7597] device veth0_macvtap left promiscuous mode [ 1009.219426][ T7597] device veth1_vlan left promiscuous mode [ 1009.259845][ T7597] device veth0_vlan left promiscuous mode [ 1009.374440][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'. [ 1009.383396][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 1009.392405][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 1009.401431][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 1009.753930][T12942] loop1: detected capacity change from 0 to 512 [ 1009.810082][T12942] EXT4-fs: Mount option(s) incompatible with ext3 [ 1010.212815][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1010.223166][T11736] Bluetooth: hci2: command 0x0419 tx timeout [ 1010.229713][ T26] audit: type=1326 audit(1746833694.490:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1010.545312][ T26] audit: type=1326 audit(1746833694.490:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1010.659559][ T26] audit: type=1326 audit(1746833694.490:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1010.734027][ T7662] hfsplus: b-tree write err: -5, ino 4 [ 1010.746842][ T26] audit: type=1326 audit(1746833694.490:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1010.769383][ T26] audit: type=1326 audit(1746833694.490:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1010.791987][ T26] audit: type=1326 audit(1746833694.500:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b9cf8d2d0 code=0x7ffc0000 [ 1010.814804][ T26] audit: type=1326 audit(1746833694.500:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8b9cf90197 code=0x7ffc0000 [ 1010.837326][ T26] audit: type=1326 audit(1746833694.510:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1010.859913][ T26] audit: type=1326 audit(1746833694.510:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8b9cf90197 code=0x7ffc0000 [ 1010.883942][ T26] audit: type=1326 audit(1746833694.510:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8b9cf8d5ca code=0x7ffc0000 [ 1011.105865][T11736] Bluetooth: hci3: command 0x040f tx timeout [ 1012.350324][ T7597] team0 (unregistering): Port device team_slave_1 removed [ 1012.462620][ T7597] team0 (unregistering): Port device team_slave_0 removed [ 1012.561692][ T7597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.757454][ T7597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.967939][T12960] loop0: detected capacity change from 0 to 4096 [ 1013.050904][T12960] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1013.064634][T12960] NILFS (loop0): trying rollback from an earlier position [ 1013.111255][T12960] NILFS (loop0): recovery complete [ 1013.119721][T12962] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1013.183271][T11736] Bluetooth: hci3: command 0x0419 tx timeout [ 1013.765436][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 1013.775190][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'. [ 1013.828120][T12969] loop7: detected capacity change from 0 to 1024 [ 1016.183656][ T7597] bond0 (unregistering): Released all slaves [ 1016.280255][ T4485] hfsplus: b-tree write err: -5, ino 4 [ 1016.402917][T12848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.410226][T12848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.419792][T12848] device bridge_slave_0 entered promiscuous mode [ 1016.449683][ T4359] lo speed is unknown, defaulting to 1000 [ 1016.475936][T12848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.483546][T12848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.514388][T12848] device bridge_slave_1 entered promiscuous mode [ 1016.633143][ T4359] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1016.654631][T12848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.696505][T12848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.798508][ T4359] usb 8-1: device descriptor read/64, error -71 [ 1016.830813][T12848] team0: Port device team_slave_0 added [ 1016.859715][T12848] team0: Port device team_slave_1 added [ 1017.054583][T12875] chnl_net:caif_netlink_parms(): no params data found [ 1017.073140][ T4359] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1017.092964][T12991] loop1: detected capacity change from 0 to 4096 [ 1017.104545][T12848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.131947][T12848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.165126][T12991] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1017.199785][T12991] NILFS (loop1): trying rollback from an earlier position [ 1017.223523][T12848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.243332][ T4359] usb 8-1: device descriptor read/64, error -71 [ 1017.300956][T12991] NILFS (loop1): recovery complete [ 1017.363441][ T4359] usb usb8-port1: attempt power cycle [ 1017.380134][T13000] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1017.405049][T12848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.422294][T12848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.510685][T12848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.723924][T12848] device hsr_slave_0 entered promiscuous mode [ 1017.743955][T12848] device hsr_slave_1 entered promiscuous mode [ 1018.140272][ T4359] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1018.185429][ T4359] usb 8-1: device descriptor read/8, error -71 [ 1018.453541][ T4359] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1018.533962][ T4359] usb 8-1: device descriptor read/8, error -71 [ 1018.629215][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.646807][T12875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.668242][T12875] device bridge_slave_0 entered promiscuous mode [ 1018.693693][ T4359] usb usb8-port1: unable to enumerate USB device [ 1018.743353][T12875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.751019][T12875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.780876][T12875] device bridge_slave_1 entered promiscuous mode [ 1020.001080][T12875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.167115][ T4485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.235316][T12875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.370706][ T4485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.551387][T13035] loop1: detected capacity change from 0 to 4096 [ 1021.070632][T13035] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1021.209277][T13035] NILFS (loop1): trying rollback from an earlier position [ 1021.307679][T13035] NILFS (loop1): recovery complete [ 1021.423202][T13042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1021.563480][ T4485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.689323][T12875] team0: Port device team_slave_0 added [ 1021.792093][ T4485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.825262][T12875] team0: Port device team_slave_1 added [ 1021.999166][T12875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.067906][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.153522][T12875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.157314][T13057] loop0: detected capacity change from 0 to 1024 [ 1022.189889][T12875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.218755][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.277567][T12875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.466539][T12875] device hsr_slave_0 entered promiscuous mode [ 1022.479659][T12875] device hsr_slave_1 entered promiscuous mode [ 1022.493300][T12875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.508725][T12875] Cannot create hsr debugfs directory [ 1022.802792][T12848] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1022.855558][T12848] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1023.246873][T12848] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1023.791894][T12848] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1023.958738][ T4488] hfsplus: b-tree write err: -5, ino 4 [ 1024.121364][T13073] loop1: detected capacity change from 0 to 512 [ 1024.444373][T13073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1024.793380][T13073] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.567489][T13083] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1025.582120][T13083] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1025.594588][T13083] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1025.594588][T13083] [ 1025.604280][T13083] EXT4-fs (loop1): Total free blocks count 0 [ 1025.610289][T13083] EXT4-fs (loop1): Free/Dirty block details [ 1025.616277][T13083] EXT4-fs (loop1): free_blocks=65280 [ 1025.621628][T13083] EXT4-fs (loop1): dirty_blocks=33 [ 1025.626821][T13083] EXT4-fs (loop1): Block reservation details [ 1025.632826][T13083] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 1025.858645][T10565] EXT4-fs (loop1): unmounting filesystem. [ 1026.049686][T12848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.162106][T12848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.376405][T13094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.403486][ T7662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1026.411706][ T7662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1026.477149][T13102] Illegal XDP return value 4294967274 on prog (id 331) dev N/A, expect packet loss! [ 1026.650664][T13104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.310019][T12848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1027.320479][T12848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1027.338247][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1027.388856][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1027.452222][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.459453][ T4947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.596014][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1027.768443][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1028.047073][T13120] fuse: Bad value for 'fd' [ 1028.293201][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.300415][ T4947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.344892][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1028.355426][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1028.365057][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1028.377488][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1028.386939][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1028.404465][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1028.416879][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1028.428792][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1028.467469][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1028.482417][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1028.649268][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1028.660894][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1028.678762][T13126] loop7: detected capacity change from 0 to 512 [ 1028.680434][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1028.799485][T13126] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1028.830795][T13126] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.160714][T13136] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1029.175663][T13136] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1029.188121][T13136] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1029.188121][T13136] [ 1029.197874][T13136] EXT4-fs (loop7): Total free blocks count 0 [ 1029.203914][T13136] EXT4-fs (loop7): Free/Dirty block details [ 1029.209861][T13136] EXT4-fs (loop7): free_blocks=65280 [ 1029.215361][T13136] EXT4-fs (loop7): dirty_blocks=33 [ 1029.220495][T13136] EXT4-fs (loop7): Block reservation details [ 1029.226593][T13136] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 1029.616346][T11477] EXT4-fs (loop7): unmounting filesystem. [ 1029.736079][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1029.750369][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1029.902808][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 1029.905985][T12848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.956864][T13148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.222452][T12875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1030.267773][T12875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1030.297612][T12875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1030.442004][T12875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1030.953654][ T4485] device hsr_slave_0 left promiscuous mode [ 1031.129719][ T4485] device hsr_slave_1 left promiscuous mode [ 1031.193435][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.204749][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.263933][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.271404][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.385178][ T4485] device bridge_slave_1 left promiscuous mode [ 1031.563278][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.593191][ T4485] device bridge_slave_0 left promiscuous mode [ 1031.613374][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.106234][T13174] fuse: Bad value for 'fd' [ 1032.184207][ T4485] device veth1_macvtap left promiscuous mode [ 1032.206167][ T4485] device veth0_macvtap left promiscuous mode [ 1032.231211][ T4485] device veth1_vlan left promiscuous mode [ 1032.256101][ T4485] device veth0_vlan left promiscuous mode [ 1033.593667][ T4741] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1033.753306][ T4741] usb 8-1: device descriptor read/64, error -71 [ 1033.955604][T13185] loop1: detected capacity change from 0 to 4096 [ 1033.983152][T13185] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1034.010618][T13185] NILFS (loop1): trying rollback from an earlier position [ 1034.033311][ T4741] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1034.069933][T13185] NILFS (loop1): recovery complete [ 1034.086671][T13187] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1034.151848][T13185] overlayfs: upper fs does not support tmpfile. [ 1034.168684][T13185] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1034.185990][T13185] overlayfs: failed to set xattr on upper [ 1034.191773][T13185] overlayfs: ...falling back to index=off,metacopy=off. [ 1034.233544][ T4741] usb 8-1: device descriptor read/64, error -71 [ 1034.353839][ T4741] usb usb8-port1: attempt power cycle [ 1034.928466][ T4741] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1034.972150][ T4741] usb 8-1: device descriptor read/8, error -71 [ 1035.120518][ T4485] team0 (unregistering): Port device team_slave_1 removed [ 1035.245113][ T4485] team0 (unregistering): Port device team_slave_0 removed [ 1035.308685][ T4485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.436171][ T4485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.303114][ T4741] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1036.705459][ T4741] usb 8-1: device descriptor read/8, error -71 [ 1037.421057][ T4741] usb usb8-port1: unable to enumerate USB device [ 1037.559346][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1938'. [ 1037.619245][T13209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1037.727835][ T4485] bond0 (unregistering): Released all slaves [ 1038.206550][T12875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.252576][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1038.271444][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1038.302680][T12875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.340729][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1038.361707][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.375668][ T7633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.382873][ T7633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.445079][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.455612][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.475171][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.496452][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.503644][ T7633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.572341][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1038.586298][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.624317][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1038.664919][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1038.685675][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1038.758630][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1038.806915][T12848] device veth0_vlan entered promiscuous mode [ 1038.826122][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1038.836338][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1038.851630][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1038.893918][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.934368][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.980662][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.004766][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.023441][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1039.043503][ T7633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1039.072847][T13226] loop7: detected capacity change from 0 to 512 [ 1039.080980][T12848] device veth1_vlan entered promiscuous mode [ 1039.128206][T12875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1039.167671][T13226] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1039.189808][T12875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1039.203370][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1039.222295][T13226] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.225135][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1039.330393][T12848] device veth0_macvtap entered promiscuous mode [ 1039.340975][T12848] device veth1_macvtap entered promiscuous mode [ 1039.360125][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.381245][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.447944][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.479479][T13226] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1039.494213][T13226] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1039.506832][T13226] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1039.506832][T13226] [ 1039.516602][T13226] EXT4-fs (loop7): Total free blocks count 0 [ 1039.522632][T13226] EXT4-fs (loop7): Free/Dirty block details [ 1039.528688][T13226] EXT4-fs (loop7): free_blocks=65280 [ 1039.534072][T13226] EXT4-fs (loop7): dirty_blocks=33 [ 1039.539212][T13226] EXT4-fs (loop7): Block reservation details [ 1039.545305][T13226] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 1039.703610][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.743218][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.768417][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.921955][T11477] EXT4-fs (loop7): unmounting filesystem. [ 1039.953582][T12848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.072169][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.123251][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.173962][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.238199][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.303712][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.325685][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.383311][T12848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.421964][T12848] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.458775][T12848] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.559592][T12848] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.592819][T12848] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.643442][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1040.652296][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1040.749595][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1040.793959][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1040.834184][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1040.869589][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.893921][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1041.055810][T13253] fuse: Bad value for 'fd' [ 1041.109381][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1041.273598][T10100] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1041.624924][ T4485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.648109][ T4485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.663727][T10100] usb 8-1: device descriptor read/64, error -71 [ 1041.676933][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1041.708029][ T7597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.781407][ T7597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.858090][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1042.060424][T10100] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1042.546606][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1042.590143][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1042.736795][T13264] loop8: detected capacity change from 0 to 1024 [ 1042.756219][T12875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.893572][T13264] hfsplus: invalid btree flag [ 1042.898505][T13264] hfsplus: failed to load attributes file [ 1042.923096][T10100] usb 8-1: device descriptor read/64, error -71 [ 1043.043775][T10100] usb usb8-port1: attempt power cycle [ 1043.426131][T13275] loop1: detected capacity change from 0 to 512 [ 1043.890535][T13275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1043.928187][T13275] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.100309][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1950'. [ 1045.144830][T13287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.204923][T10565] EXT4-fs (loop1): unmounting filesystem. [ 1045.452356][T13292] capability: warning: `syz.1.1951' uses deprecated v2 capabilities in a way that may be insecure [ 1045.548524][T13293] netlink: 'syz.1.1951': attribute type 3 has an invalid length. [ 1045.889251][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1045.919774][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1046.007313][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1046.035705][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1046.056047][T13297] loop8: detected capacity change from 0 to 4096 [ 1046.089810][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1046.130212][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1046.165196][T13297] NILFS (loop8): invalid segment: Checksum error in segment payload [ 1046.194491][T12875] device veth0_vlan entered promiscuous mode [ 1046.242223][T13297] NILFS (loop8): trying rollback from an earlier position [ 1046.294193][T12875] device veth1_vlan entered promiscuous mode [ 1046.433745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1046.462087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1046.508576][T13297] NILFS (loop8): recovery complete [ 1046.510870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1046.688391][T13307] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1046.700339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1047.118555][T12875] device veth0_macvtap entered promiscuous mode [ 1047.461455][T12875] device veth1_macvtap entered promiscuous mode [ 1047.544998][T13288] loop7: detected capacity change from 0 to 32768 [ 1047.567298][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.629614][T13288] JBD2: Ignoring recovery information on journal [ 1047.744693][T13319] fuse: Bad value for 'fd' [ 1047.811908][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.012546][T13288] JBD2: recovery failed [ 1048.033416][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.044290][T13288] (syz.7.1950,13288,0):ocfs2_journal_load:1112 ERROR: Failed to load journal! [ 1048.063095][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.084370][T13288] (syz.7.1950,13288,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -5 [ 1048.109225][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.160767][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.204616][T13288] (syz.7.1950,13288,0):ocfs2_check_volume:2486 ERROR: status = -5 [ 1048.253178][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.263716][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.273664][T13288] (syz.7.1950,13288,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 1048.912542][T12875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.052688][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1049.067395][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.094241][T13288] (syz.7.1950,13288,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1049.120256][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.160616][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.303127][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.323125][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.423167][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.453095][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.493359][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.533238][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.594164][T12875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.602648][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1050.618905][T13334] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1050.780553][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1050.848458][T12875] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.896539][T12875] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.126092][T12875] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.203475][T12875] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.063411][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.083079][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.102595][T13353] loop7: detected capacity change from 0 to 512 [ 1052.187060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1052.247928][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.279806][T13353] EXT4-fs: Mount option(s) incompatible with ext3 [ 1052.306516][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.637765][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1052.644085][ T26] audit: type=1326 audit(1746833736.920:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1053.089765][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1053.161961][ T26] audit: type=1326 audit(1746833736.920:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1053.323276][ T26] audit: type=1326 audit(1746833736.930:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1053.583712][ T26] audit: type=1326 audit(1746833736.930:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1053.760209][ T26] audit: type=1326 audit(1746833736.930:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1053.866677][ T26] audit: type=1326 audit(1746833736.930:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f750778d2d0 code=0x7ffc0000 [ 1053.938863][T13373] loop0: detected capacity change from 0 to 256 [ 1053.966780][ T26] audit: type=1326 audit(1746833736.930:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7507790197 code=0x7ffc0000 [ 1054.033519][ T26] audit: type=1326 audit(1746833736.930:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1054.060005][T13376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.176842][ T26] audit: type=1326 audit(1746833736.940:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7507790197 code=0x7ffc0000 [ 1054.240609][T13376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.307820][T13376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.317920][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.325073][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.362937][ T26] audit: type=1326 audit(1746833736.940:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.7.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f750778d5ca code=0x7ffc0000 [ 1054.712944][T13378] loop1: detected capacity change from 0 to 4096 [ 1054.842337][T13378] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1055.102144][T13378] NILFS (loop1): trying rollback from an earlier position [ 1055.309944][T13378] NILFS (loop1): recovery complete [ 1055.396982][T13392] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1055.534736][T13378] overlayfs: upper fs does not support tmpfile. [ 1055.602523][T13378] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1056.003350][T13378] overlayfs: failed to set xattr on upper [ 1056.012350][T13378] overlayfs: ...falling back to index=off,metacopy=off. [ 1057.836340][T13406] loop6: detected capacity change from 0 to 512 [ 1059.355730][T13406] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1059.403230][T13406] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.306886][T13406] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1061.321627][T13406] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1061.334030][T13406] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1061.334030][T13406] [ 1061.343764][T13406] EXT4-fs (loop6): Total free blocks count 0 [ 1061.349739][T13406] EXT4-fs (loop6): Free/Dirty block details [ 1061.355660][T13406] EXT4-fs (loop6): free_blocks=65280 [ 1061.360940][T13406] EXT4-fs (loop6): dirty_blocks=33 [ 1061.366072][T13406] EXT4-fs (loop6): Block reservation details [ 1061.372043][T13406] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 1061.629544][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 1061.629605][ T26] audit: type=1326 audit(1746833745.950:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1062.214921][T13429] loop1: detected capacity change from 0 to 512 [ 1062.260048][T12875] EXT4-fs (loop6): unmounting filesystem. [ 1062.293296][ T26] audit: type=1326 audit(1746833745.980:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1062.384554][T13429] EXT4-fs: Mount option(s) incompatible with ext3 [ 1062.662867][ T26] audit: type=1326 audit(1746833745.990:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1062.880580][ T26] audit: type=1326 audit(1746833745.990:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1062.909251][ T26] audit: type=1326 audit(1746833745.990:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1063.334371][ T26] audit: type=1326 audit(1746833745.990:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1063.627399][ T26] audit: type=1326 audit(1746833745.990:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1063.748778][ T26] audit: type=1326 audit(1746833745.990:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1063.829469][T13439] binder: 13438:13439 ioctl c0306201 200000001a80 returned -11 [ 1063.842641][ T26] audit: type=1326 audit(1746833745.990:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1063.899293][T13443] loop6: detected capacity change from 0 to 1024 [ 1063.956615][ T26] audit: type=1326 audit(1746833745.990:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.7.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1065.426280][ T4750] hfsplus: b-tree write err: -5, ino 4 [ 1065.754806][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1984'. [ 1065.763742][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1984'. [ 1067.676314][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 1067.676331][ T26] audit: type=1326 audit(1746833752.000:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1067.878913][ T26] audit: type=1326 audit(1746833752.000:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1068.073067][ T26] audit: type=1326 audit(1746833752.030:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1068.179209][T13477] loop6: detected capacity change from 0 to 512 [ 1068.185671][ T26] audit: type=1326 audit(1746833752.030:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1068.255106][T13477] EXT4-fs: Mount option(s) incompatible with ext3 [ 1068.323076][ T26] audit: type=1326 audit(1746833752.030:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1069.273222][T13486] binder: 13485:13486 ioctl c0306201 200000001a80 returned -11 [ 1069.303425][ T26] audit: type=1326 audit(1746833752.030:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1069.423162][ T26] audit: type=1326 audit(1746833752.030:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1070.455175][ T26] audit: type=1326 audit(1746833752.030:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1070.553233][ T26] audit: type=1326 audit(1746833752.030:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1070.669003][ T26] audit: type=1326 audit(1746833752.030:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.6.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e198e969 code=0x7ffc0000 [ 1070.773125][T12060] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1070.913992][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1998'. [ 1070.969708][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1998'. [ 1070.994904][T12060] usb 7-1: config 0 has no interfaces? [ 1071.003560][T12060] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1071.053073][T12060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.103420][T12060] usb 7-1: Product: syz [ 1071.107639][T12060] usb 7-1: Manufacturer: syz [ 1071.132801][T12060] usb 7-1: SerialNumber: syz [ 1071.163868][T12060] usb 7-1: config 0 descriptor?? [ 1071.367256][T13509] loop7: detected capacity change from 0 to 1024 [ 1071.381187][T13509] hfsplus: invalid btree flag [ 1071.386103][T13509] hfsplus: failed to load attributes file [ 1071.394928][T12057] usb 7-1: USB disconnect, device number 8 [ 1073.155709][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 1073.155722][ T26] audit: type=1326 audit(1746833757.480:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1073.280115][ T26] audit: type=1326 audit(1746833757.480:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1073.421934][ T26] audit: type=1326 audit(1746833757.480:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1073.484380][ T26] audit: type=1326 audit(1746833757.480:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1073.723151][ T26] audit: type=1326 audit(1746833757.480:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1073.882390][ T26] audit: type=1326 audit(1746833757.510:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1073.972609][ T26] audit: type=1326 audit(1746833757.510:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1074.036643][ T26] audit: type=1326 audit(1746833757.510:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1074.087956][ T26] audit: type=1326 audit(1746833757.510:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1074.137144][ T26] audit: type=1326 audit(1746833757.510:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1074.387893][T13534] loop6: detected capacity change from 0 to 512 [ 1074.405568][T13537] binder: 13536:13537 ioctl c0306201 200000001a80 returned -11 [ 1074.418366][T13534] EXT4-fs: Mount option(s) incompatible with ext3 [ 1076.426698][T13553] loop8: detected capacity change from 0 to 1024 [ 1076.435993][T13553] hfsplus: invalid btree flag [ 1076.441297][T13553] hfsplus: failed to load attributes file [ 1076.526769][ T4411] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1078.067865][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 1078.077004][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 1078.461194][T13565] loop6: detected capacity change from 0 to 4096 [ 1078.582387][T13565] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1078.668723][T13565] NILFS (loop6): trying rollback from an earlier position [ 1078.745344][T13565] NILFS (loop6): recovery complete [ 1078.789204][T13572] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1078.880275][T13565] overlayfs: failed to resolve './file0': -2 [ 1079.416710][T13578] binder: 13577:13578 ioctl c0306201 200000001a80 returned -11 [ 1079.592536][T13585] loop0: detected capacity change from 0 to 512 [ 1079.721042][T13585] EXT4-fs: Mount option(s) incompatible with ext3 [ 1079.770031][T13589] loop7: detected capacity change from 0 to 512 [ 1080.450375][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 1080.450392][ T26] audit: type=1326 audit(1746833764.590:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1080.504756][T13589] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1080.543894][T13589] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.828489][ T26] audit: type=1326 audit(1746833764.590:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1080.939417][T13603] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1080.960126][ T26] audit: type=1326 audit(1746833764.650:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1081.031620][ T26] audit: type=1326 audit(1746833764.650:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1081.073795][T13603] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1081.140426][T13603] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1081.140426][T13603] [ 1081.155457][ T26] audit: type=1326 audit(1746833764.650:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1081.243274][T13603] EXT4-fs (loop7): Total free blocks count 0 [ 1081.250371][T13603] EXT4-fs (loop7): Free/Dirty block details [ 1081.272894][ T26] audit: type=1326 audit(1746833764.670:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1081.312392][T13603] EXT4-fs (loop7): free_blocks=65280 [ 1081.323627][T13603] EXT4-fs (loop7): dirty_blocks=33 [ 1081.328798][T13603] EXT4-fs (loop7): Block reservation details [ 1081.359131][ T26] audit: type=1326 audit(1746833764.670:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1081.443424][T13603] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 1081.477365][ T26] audit: type=1326 audit(1746833764.670:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e458e969 code=0x7ffc0000 [ 1081.582508][ T26] audit: type=1326 audit(1746833764.680:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7e458d2d0 code=0x7ffc0000 [ 1081.678803][ T26] audit: type=1326 audit(1746833764.680:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.0.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd7e4590197 code=0x7ffc0000 [ 1082.763037][T13623] loop0: detected capacity change from 0 to 1024 [ 1082.780628][T13623] hfsplus: invalid btree flag [ 1082.785725][T13623] hfsplus: failed to load attributes file [ 1084.265981][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 1084.363957][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'. [ 1085.950443][T13645] binder: 13644:13645 ioctl c0306201 200000001a80 returned -11 [ 1086.386152][T11477] EXT4-fs (loop7): unmounting filesystem. [ 1086.828281][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 1086.828298][ T26] audit: type=1326 audit(1746833771.150:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1087.269852][ T26] audit: type=1326 audit(1746833771.150:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1087.622372][T13679] fuse: Bad value for 'fd' [ 1088.065447][ T26] audit: type=1326 audit(1746833771.210:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1088.543239][ T26] audit: type=1326 audit(1746833771.210:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1088.565677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.612100][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 1088.621089][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 1088.683953][ T26] audit: type=1326 audit(1746833771.210:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1088.706728][ T26] audit: type=1326 audit(1746833771.210:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1088.724581][T13688] loop6: detected capacity change from 0 to 1024 [ 1088.754969][T13688] hfsplus: invalid btree flag [ 1088.759945][T13688] hfsplus: failed to load attributes file [ 1088.777561][ T26] audit: type=1326 audit(1746833771.210:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1088.900997][ T26] audit: type=1326 audit(1746833771.210:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1090.223637][ T26] audit: type=1326 audit(1746833771.210:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1090.246630][ T26] audit: type=1326 audit(1746833771.210:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.7.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1090.920585][T13702] binder: 13700:13702 ioctl c0306201 200000001a80 returned -11 [ 1091.480130][T13713] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2042'. [ 1093.131892][T13742] loop8: detected capacity change from 0 to 1024 [ 1093.158139][T13742] hfsplus: invalid btree flag [ 1093.163181][T13742] hfsplus: failed to load attributes file [ 1094.403473][ T4743] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1094.636624][ T4743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.656857][ T4743] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1094.693121][ T4743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.707460][ T4743] usb 2-1: Product: syz [ 1094.712289][ T4743] usb 2-1: Manufacturer: syz [ 1094.719700][ T4743] usb 2-1: SerialNumber: syz [ 1094.742190][ T4743] usb 2-1: config 0 descriptor?? [ 1094.932796][ T4743] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1095.009880][T10100] usb 2-1: USB disconnect, device number 13 [ 1095.206013][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2050'. [ 1095.215019][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2050'. [ 1095.283939][ T4443] udevd[4443]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.479066][T13756] binder: 13755:13756 ioctl 4018620d 0 returned -22 [ 1095.511794][T13756] binder: 13755:13756 ioctl c0306201 200000001a80 returned -11 [ 1096.109375][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1096.109392][ T26] audit: type=1326 audit(1746833780.430:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1096.163825][ T26] audit: type=1326 audit(1746833780.430:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1096.188858][ T26] audit: type=1326 audit(1746833780.460:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1096.388111][T13771] binder: 13770:13771 ioctl 4018620d 0 returned -22 [ 1096.403310][ T26] audit: type=1326 audit(1746833780.460:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1096.598582][ T26] audit: type=1326 audit(1746833780.460:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1096.702810][ T26] audit: type=1326 audit(1746833780.460:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1096.929213][ T26] audit: type=1326 audit(1746833780.460:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1096.952337][ T26] audit: type=1326 audit(1746833780.460:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1096.974945][ T4743] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1096.994490][T13783] loop1: detected capacity change from 0 to 1024 [ 1097.078026][T13783] hfsplus: invalid btree flag [ 1097.083135][T13783] hfsplus: failed to load attributes file [ 1097.306365][ T26] audit: type=1326 audit(1746833780.460:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1097.595447][ T26] audit: type=1326 audit(1746833780.460:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9cf8e969 code=0x7ffc0000 [ 1097.754916][ T4411] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1097.828025][ T4743] usb 8-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 1097.854457][ T4743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.931904][ T4743] usb 8-1: Product: syz [ 1097.958132][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2051'. [ 1098.084158][ T4743] usb 8-1: Manufacturer: syz [ 1098.090176][ T4743] usb 8-1: SerialNumber: syz [ 1098.134327][ T4743] usb 8-1: config 0 descriptor?? [ 1099.353334][T13776] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1099.362230][T13776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1099.475655][T10101] usb 8-1: USB disconnect, device number 16 [ 1099.734488][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1099.964905][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1100.543525][ T4743] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1100.742249][ T4743] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.770747][ T4743] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1100.780862][ T4743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.804647][ T4743] usb 9-1: Product: syz [ 1100.809155][ T4743] usb 9-1: Manufacturer: syz [ 1100.834356][ T4743] usb 9-1: SerialNumber: syz [ 1100.859884][ T4743] usb 9-1: config 0 descriptor?? [ 1100.978515][ T4743] snd-usb-audio: probe of 9-1:0.0 failed with error -22 [ 1101.112058][ T4743] usb 9-1: USB disconnect, device number 3 [ 1101.114987][ T4411] udevd[4411]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.193312][ T26] kauditd_printk_skb: 233 callbacks suppressed [ 1102.193332][ T26] audit: type=1326 audit(1746833786.500:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7ffc0000 [ 1103.357979][ T26] audit: type=1326 audit(1746833786.510:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7ffc0000 [ 1103.634069][T13845] loop7: detected capacity change from 0 to 1024 [ 1103.671527][T13845] hfsplus: invalid btree flag [ 1103.676933][T13845] hfsplus: failed to load attributes file [ 1105.571824][T13856] binder: 13855:13856 ioctl 4018620d 0 returned -22 [ 1105.603590][T13856] binder: 13855:13856 ioctl c0306201 200000001a80 returned -11 [ 1105.853231][ T4743] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1105.871092][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 1105.880170][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 1106.066748][ T4743] usb 9-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 1106.096216][ T4743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.130277][ T4743] usb 9-1: Product: syz [ 1106.147224][ T4743] usb 9-1: Manufacturer: syz [ 1106.187594][ T4743] usb 9-1: SerialNumber: syz [ 1106.274068][ T4743] usb 9-1: config 0 descriptor?? [ 1106.502236][T13854] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1106.511383][T13854] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1108.149705][ T26] audit: type=1326 audit(1746833792.470:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1108.303236][ T26] audit: type=1326 audit(1746833792.470:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1108.473538][T11736] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1108.474700][ T4265] Bluetooth: hci4: command 0x1003 tx timeout [ 1108.996519][ T26] audit: type=1326 audit(1746833792.470:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1109.043920][ T4743] usb 9-1: USB disconnect, device number 4 [ 1109.133144][ T26] audit: type=1326 audit(1746833792.470:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1109.196586][T13909] loop1: detected capacity change from 0 to 1024 [ 1109.219359][T13909] hfsplus: invalid btree flag [ 1109.224600][T13909] hfsplus: failed to load attributes file [ 1110.650833][ T26] audit: type=1326 audit(1746833792.470:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1110.676917][ T26] audit: type=1326 audit(1746833792.470:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1110.857685][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 1110.866975][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'. [ 1110.896633][ T26] audit: type=1326 audit(1746833792.470:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1111.043223][T13920] binder: 13919:13920 ioctl c0306201 200000001a80 returned -11 [ 1111.053301][ T26] audit: type=1326 audit(1746833792.470:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1111.144175][ T26] audit: type=1326 audit(1746833792.470:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1111.378171][ T26] audit: type=1326 audit(1746833792.470:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.7.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750778e969 code=0x7ffc0000 [ 1111.690196][T13932] 9pnet_virtio: no channels available for device syz [ 1114.523058][ T4743] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1114.703117][T11736] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1114.703176][ T4265] Bluetooth: hci4: command 0x1003 tx timeout [ 1115.037586][ T4743] usb 9-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 1115.169055][ T4743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.177623][ T4743] usb 9-1: Product: syz [ 1115.181988][ T4743] usb 9-1: Manufacturer: syz [ 1115.186983][ T4743] usb 9-1: SerialNumber: syz [ 1115.194010][ T4743] usb 9-1: config 0 descriptor?? [ 1115.406488][T13962] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1115.415539][T13962] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1115.611943][T13969] loop6: detected capacity change from 0 to 1024 [ 1115.738630][T13966] [ 1115.741003][T13966] ====================================================== [ 1115.746582][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.748014][T13966] WARNING: possible circular locking dependency detected [ 1115.754820][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.761539][T13966] 6.1.138-syzkaller #0 Not tainted [ 1115.761556][T13966] ------------------------------------------------------ [ 1115.761564][T13966] syz.1.2092/13966 is trying to acquire lock: [ 1115.786040][T13966] ffff88801e2f2220 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 1115.796754][T13966] [ 1115.796754][T13966] but task is already holding lock: [ 1115.804118][T13966] ffff88807beedb58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 1115.814151][T13966] [ 1115.814151][T13966] which lock already depends on the new lock. [ 1115.814151][T13966] [ 1115.824551][T13966] [ 1115.824551][T13966] the existing dependency chain (in reverse order) is: [ 1115.833565][T13966] [ 1115.833565][T13966] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1115.841132][T13966] down_read_killable+0x4c/0x340 [ 1115.846615][T13966] mmap_read_lock_killable+0x1d/0x60 [ 1115.852440][T13966] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1115.858166][T13966] do_user_addr_fault+0x2db/0xb10 [ 1115.863722][T13966] exc_page_fault+0x60/0x100 [ 1115.868845][T13966] asm_exc_page_fault+0x22/0x30 [ 1115.874236][T13966] fault_in_readable+0x13e/0x1f0 [ 1115.879716][T13966] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1115.885889][T13966] generic_perform_write+0x1d2/0x560 [ 1115.891710][T13966] __generic_file_write_iter+0x172/0x430 [ 1115.897891][T13966] generic_file_write_iter+0xab/0x2e0 [ 1115.903811][T13966] vfs_write+0x44c/0x960 [ 1115.908575][T13966] ksys_write+0x143/0x240 [ 1115.913424][T13966] do_syscall_64+0x4c/0xa0 [ 1115.918367][T13966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1115.924800][T13966] [ 1115.924800][T13966] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1115.933496][T13966] __lock_acquire+0x2cf8/0x7c50 [ 1115.938895][T13966] lock_acquire+0x1b4/0x490 [ 1115.943941][T13966] down_write+0x36/0x60 [ 1115.948647][T13966] process_measurement+0x33c/0x1a10 [ 1115.954400][T13966] ima_file_mmap+0x104/0x150 [ 1115.959522][T13966] __se_sys_remap_file_pages+0x53e/0x770 [ 1115.965692][T13966] do_syscall_64+0x4c/0xa0 [ 1115.970693][T13966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1115.977160][T13966] [ 1115.977160][T13966] other info that might help us debug this: [ 1115.977160][T13966] [ 1115.987415][T13966] Possible unsafe locking scenario: [ 1115.987415][T13966] [ 1115.994871][T13966] CPU0 CPU1 [ 1116.000226][T13966] ---- ---- [ 1116.005593][T13966] lock(&mm->mmap_lock); [ 1116.009954][T13966] lock(&sb->s_type->i_mutex_key#12); [ 1116.017944][T13966] lock(&mm->mmap_lock); [ 1116.024800][T13966] lock(&sb->s_type->i_mutex_key#12); [ 1116.030262][T13966] [ 1116.030262][T13966] *** DEADLOCK *** [ 1116.030262][T13966] [ 1116.038401][T13966] 1 lock held by syz.1.2092/13966: [ 1116.043501][T13966] #0: ffff88807beedb58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 1116.053972][T13966] [ 1116.053972][T13966] stack backtrace: [ 1116.059864][T13966] CPU: 1 PID: 13966 Comm: syz.1.2092 Not tainted 6.1.138-syzkaller #0 [ 1116.068021][T13966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1116.078081][T13966] Call Trace: [ 1116.081358][T13966] [ 1116.084289][T13966] dump_stack_lvl+0x168/0x22e [ 1116.088980][T13966] ? load_image+0x3b0/0x3b0 [ 1116.093511][T13966] ? show_regs_print_info+0x12/0x12 [ 1116.098724][T13966] ? print_circular_bug+0x12b/0x1a0 [ 1116.103950][T13966] check_noncircular+0x274/0x310 [ 1116.108917][T13966] ? add_chain_block+0x940/0x940 [ 1116.113974][T13966] ? lockdep_lock+0xdc/0x1e0 [ 1116.118578][T13966] ? _find_first_zero_bit+0xcf/0x100 [ 1116.123871][T13966] __lock_acquire+0x2cf8/0x7c50 [ 1116.128785][T13966] ? ima_match_policy+0x104/0x2100 [ 1116.133907][T13966] ? verify_lock_unused+0x140/0x140 [ 1116.139110][T13966] ? ima_match_policy+0x207a/0x2100 [ 1116.144327][T13966] ? __schedule+0x10b7/0x40d0 [ 1116.149019][T13966] lock_acquire+0x1b4/0x490 [ 1116.153530][T13966] ? process_measurement+0x33c/0x1a10 [ 1116.158906][T13966] ? __might_sleep+0xd0/0xd0 [ 1116.163504][T13966] ? __schedule+0x10f1/0x40d0 [ 1116.168187][T13966] ? read_lock_is_recursive+0x10/0x10 [ 1116.173567][T13966] ? ima_get_action+0x71/0xa0 [ 1116.178245][T13966] down_write+0x36/0x60 [ 1116.182402][T13966] ? process_measurement+0x33c/0x1a10 [ 1116.187785][T13966] process_measurement+0x33c/0x1a10 [ 1116.193007][T13966] ? ima_file_mmap+0x150/0x150 [ 1116.197783][T13966] ? aa_file_perm+0x117/0xec0 [ 1116.202470][T13966] ? mtree_load+0xeb/0xa40 [ 1116.206886][T13966] ? mtree_load+0x90a/0xa40 [ 1116.211387][T13966] ? aa_get_current_label+0x110/0x1d0 [ 1116.216757][T13966] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1116.222908][T13966] ima_file_mmap+0x104/0x150 [ 1116.227496][T13966] ? ima_file_free+0x3e0/0x3e0 [ 1116.232256][T13966] ? common_file_perm+0x171/0x1c0 [ 1116.237281][T13966] ? bpf_lsm_mmap_file+0x5/0x10 [ 1116.242126][T13966] ? security_mmap_file+0x11b/0x180 [ 1116.247327][T13966] __se_sys_remap_file_pages+0x53e/0x770 [ 1116.252970][T13966] ? __se_sys_futex+0x14a/0x440 [ 1116.257848][T13966] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1116.263573][T13966] ? lock_chain_count+0x20/0x20 [ 1116.268426][T13966] ? lockdep_hardirqs_on+0x94/0x140 [ 1116.273630][T13966] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1116.279355][T13966] do_syscall_64+0x4c/0xa0 [ 1116.283793][T13966] ? clear_bhb_loop+0x45/0xa0 [ 1116.288465][T13966] ? clear_bhb_loop+0x45/0xa0 [ 1116.293141][T13966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.299055][T13966] RIP: 0033:0x7f8b9cf8e969 [ 1116.303476][T13966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.323104][T13966] RSP: 002b:00007f8b9de60038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1116.331520][T13966] RAX: ffffffffffffffda RBX: 00007f8b9d1b6240 RCX: 00007f8b9cf8e969 [ 1116.339496][T13966] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 1116.347469][T13966] RBP: 00007f8b9d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1116.355463][T13966] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 1116.363431][T13966] R13: 0000000000000000 R14: 00007f8b9d1b6240 R15: 00007ffd3c82a9e8 [ 1116.371426][T13966] [ 1116.387518][T13969] hfsplus: invalid btree flag [ 1116.392405][T13969] hfsplus: failed to load attributes file [ 1116.445202][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1116.445218][ T26] audit: type=1326 audit(1746833800.770:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1116.507061][ T26] audit: type=1326 audit(1746833800.770:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1116.536490][ T4487] usb 9-1: USB disconnect, device number 5 [ 1116.582102][ T4411] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1117.468604][ T26] audit: type=1326 audit(1746833800.770:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1117.491138][ T26] audit: type=1326 audit(1746833800.770:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1117.528314][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2103'. [ 1117.537242][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2103'. [ 1117.706181][ T26] audit: type=1326 audit(1746833800.770:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1117.756570][ T26] audit: type=1326 audit(1746833800.770:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1117.840343][ T26] audit: type=1326 audit(1746833800.770:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1117.887972][ T26] audit: type=1326 audit(1746833800.770:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1117.933063][ T26] audit: type=1326 audit(1746833800.770:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000 [ 1117.973738][ T26] audit: type=1326 audit(1746833800.770:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.8.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88978e969 code=0x7fc00000