last executing test programs: 12m46.133705404s ago: executing program 0 (id=1): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') lseek(r3, 0xef, 0x1) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000140), 0x8, 0x0) 12m44.748919527s ago: executing program 0 (id=8): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x46ac01, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 12m40.476804229s ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @empty, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuacct.usage\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 12m36.474838473s ago: executing program 0 (id=15): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_nanosleep(0x2, 0xfcfd, &(0x7f0000000040)={0x0, 0x989680}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x23, 0x37, 0x2, {0x2, 0x1, 0x0, r0, 0x5, '\xaa\xaa\xaa\xaa\xaa'}}, 0x23) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x901}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12m34.638888871s ago: executing program 0 (id=16): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 12m17.421564215s ago: executing program 32 (id=16): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 7m45.081603094s ago: executing program 1 (id=299): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$eJzs3U+IXHcdAPDvezuZ3Ymw3bRpGkXI0kDRBpPdHWoiCI0isocgQS+9LsmmWTJJy+5GtkXMxFoFT56kBw8VWQ8VQUSEeirWsyB48bT3gDcPOagr79/s/MtmNpvd2bafD7x9v9/8/n3ft++9+dcwAXxmLb4Wx9qRxOK5KxtZfWuz2drabN6uyhExGRFpRK3YRdKISD6OuBzFFp/PHiynSx61zisPPkxq733QLGq1csv7p7uNGzC0ZztiqlOZiIjZovifkacdmC/f8nmu7cz3hJJO3FnCzlaJg3HbHtDeaUwfO3z06xY4su4Vz5sDZiKOR/Hsmr0OiPLu8Pg7wzg0emq73pvaBx0LAAAAHLyh7+W7PfMwHsZGTB9OOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDpkBS/GZiUW1qVZyOpfv+/3vWb+vUxh7tP797Id999ZtyBAAAAAAAAAMC+nHkYD2Mjpqv6dpJ/5/9iXjmZ//1c3I21WI7VOB8bsRTrsR6rE1nLTNdE9Y2l9fXV+cGRv4hs5Pb29r1iZCwMHbnQG1e7P9Bh/6fBQCcAAAAAAAAA+Mz6USzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHQRIxUezy7WRVnom0FhFTEVFPZjvd62MNdl+K0D8adxgAAABweKaT/xWF7SR/z38qf98/FXfjTqzHSqxHK5bjev5ZQPHWOf17u9na2mzezrbBCb/xrz2tn88YxWcPw1eey3s83xmxGN+O78W5mI2rsRor8f1YivVYjtn4Vl5aiiRmyk8vZrY2G1HFOhjv5Z7a1f7YznSVs/hO55E04kas5LGdj2v1KvS07He6s1o0/1SP6Fvxfpad5NXSiDm6Xu6zI/p5uT8aZvIjPxZJmZG5MvdZNk50530w93s8T6qVqtzPR9r5DOrkzipZtX+lJ8r58XJ/CLne40dpvZlo/yyrVWffqd1zHvHlf/zl6s30zq2bN9bOHZ3T6An1nxPNrky8MFImWlkm2vvIxNR+4n966mU2irvo3u6WL+Zjp2MlvhNvxPVYjosxF/NxKebia7EQzVjoyuvzu+c1v9bSvV1rZ79UFhoR8dNyf6gmH9WQ5fVEV153zrW5PN8neh7ZydKzI2QpqUcnS3e7I/jn0FBqXygL2RrvdD3jjF9/Jua7MvHc7pn41X+3I2KtdefW6s2lN0dc76Vyn1227/beo3/9VA5o78rDzc6XZ7P/WFnlJ9FzdmRtz1Vtffmql9+41MrJetrqkV/PRdvjrtRsplP3h81UtL0wdJVm3na6q63nVU68Ea3OqxAAjqw0jr98vN540Phb4/3Gjxs3G1emvjl5afKL9Tj219qfJ36f/ib9evJyvB8/jOlxxwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8Ga2+9fWup1VpePYKFSEfo/LsYfcL7Q5uqVBSP1A/6uIrFPvrt2NP7VAvViTS52xn1h4jYZZ76OIJvFD/bdIBLnBmtc9QO4ZAnY0jTlc4jjYi0E09E3DoiP3AHHIQL67ffvLD21ttfWbm99Pry68t3Fi5dfPVi86vz9y7cWGktzxV/xx0lcBD6X5cCAAAAAAAAAAAAR99h/CuLIcsm7TEcKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDJtPhaHGtHEvNz5+ey+tZms5VtVXmnZy0i0ohIfhCRfBxxOYotZrqmSx61zisPPvzlS+990NyZq1b1T/vG/fHf29ujBf9ONa5dbjEbERPl/vEmH9XQM9+1rvnaowXWJ+kcYZaws1XiYNz+HwAA//+INALe") mkdir(0x0, 0x6526befdc9551232) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r1, 0x0, 0x0, 0xc806, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) unlink(0x0) socket$inet6(0xa, 0x803, 0x6) pread64(r0, &(0x7f000001d5c0)=""/102400, 0x19000, 0x400) 7m40.05926046s ago: executing program 1 (id=304): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x40804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x104) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r7}, 0x3f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) 7m37.947172905s ago: executing program 1 (id=305): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x2, 0x0, 0x8) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x90, 0xcb, r6}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7m31.98266463s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xffea, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2e2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_QUANTUM={0x7, 0x6, 0x7fffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x12101497}]}, 0x78}}, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') 7m29.890241145s ago: executing program 1 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x2, 0x2}, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$cont(0x15, 0x0, 0x800006, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406"], 0x0) 7m23.156281514s ago: executing program 1 (id=319): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040810) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setresgid(0xee00, 0xee01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0xb, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000200)={r5, 0x1, 0x0, 0x9e0}) 7m6.50191973s ago: executing program 33 (id=319): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040810) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setresgid(0xee00, 0xee01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0xb, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000200)={r5, 0x1, 0x0, 0x9e0}) 6m57.606639957s ago: executing program 4 (id=346): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x2, 0x5d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x7c, 0x70, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x100, 0x2, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x92d, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x4, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x4e, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xb9, 0x7, 0xf}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7, 0x9, 0x0, 0xff, 0x1}, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="052357183fe3009d900f08000103100be56464ccd95a4a86fb1c76d55c5e"], 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_disconnect(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x290, 0x1a0, 0x1a0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff, 0xffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'tunl0\x00', 'vcan0\x00', {}, {}, 0x87, 0x3, 0x2, 0x60}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x290}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) dup3(0xffffffffffffffff, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) 6m51.728661689s ago: executing program 4 (id=345): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x800) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c0009"], 0x3c}, 0x1, 0x11}, 0x0) socket(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x10}) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) 6m48.769919421s ago: executing program 4 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6m39.338549453s ago: executing program 4 (id=360): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x152302, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000006c0)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57ff]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) keyctl$revoke(0x3, r5) add_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000180), &(0x7f0000000540), 0x0, r5) 6m33.228424983s ago: executing program 4 (id=365): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x40804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x104) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r7}, 0x3f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) 6m29.44700426s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6m12.898567864s ago: executing program 34 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6m2.647449932s ago: executing program 3 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x40, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) keyctl$clear(0x7, r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 5m46.963887948s ago: executing program 3 (id=397): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x2, 0x5d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x7c, 0x70, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x100, 0x2, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x92d, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x4, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x4e, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xb9, 0x7, 0xf}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7, 0x9, 0x0, 0xff, 0x1}, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="052357183fe3009d900f08000103100be56464ccd95a4a86fb1c76d55c5e"], 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_disconnect(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x290, 0x1a0, 0x1a0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff, 0xffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'tunl0\x00', 'vcan0\x00', {}, {}, 0x87, 0x3, 0x2, 0x60}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x290}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) 5m41.292023324s ago: executing program 3 (id=401): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x808453, &(0x7f0000000380)={[{@utf8no}, {@fat=@showexec}, {@fat=@errors_continue}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x2a, 0x37b, &(0x7f0000000800)="$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") r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008412, &(0x7f0000000180)={[{@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x81}}, {@nogrpid}, {@auto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b2}}, {@dioread_nolock}, {@nouid32}, {@quota}, {@user_xattr}, {@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x5, 0x567, &(0x7f0000000f00)="$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") open_tree(0xffffffffffffffff, 0x0, 0x8101) 5m35.715533217s ago: executing program 3 (id=406): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0xfd338641414bfd63, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000080)=0x81) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x578410eb) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x220000, 0x0) 5m32.657483652s ago: executing program 3 (id=411): lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x361, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) io_uring_setup(0x763c, &(0x7f0000000040)={0x0, 0x411e, 0x2, 0x2, 0x15}) creat(&(0x7f0000000180)='./file0\x00', 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=@deltaction={0x18, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20048840) 5m31.475280299s ago: executing program 3 (id=413): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x40000122, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x40c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001d00)={0x2020}, 0x2020) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) select(0x40, &(0x7f0000003cc0)={0x2, 0xfffffffffffffff9, 0x401, 0xfffffffffffffffa, 0xffffffff, 0x5, 0x1e545919}, &(0x7f0000003d00)={0x8, 0x9, 0x1, 0xd, 0x80, 0x4, 0x9, 0x6}, 0x0, 0x0) 5m15.146251056s ago: executing program 35 (id=413): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x40000122, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x40c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001d00)={0x2020}, 0x2020) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) select(0x40, &(0x7f0000003cc0)={0x2, 0xfffffffffffffff9, 0x401, 0xfffffffffffffffa, 0xffffffff, 0x5, 0x1e545919}, &(0x7f0000003d00)={0x8, 0x9, 0x1, 0xd, 0x80, 0x4, 0x9, 0x6}, 0x0, 0x0) 4m38.296256629s ago: executing program 2 (id=455): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x8, 0x4) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x200001d, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000004c0)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fff214000780080011400000000005001500d3000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x1010, r3, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000300)={0x101, 0x80000, r3}) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9, r4, &(0x7f0000000200)="2283c071a131ae2058f1825750a227a6086436f071346d1622bbc477f289cd429d6e9d320baa8a397db8d219167ad252fae9ff51619915bb1be6c90b31059f629dde29c91e279d3614eb388c26eb3ca474b227252be099d2aa382bc8738a4090e3086952bf82ba641c11667114b0ddcbfe15a93390e61a6fa5f7c58d3d1d9a248782ea851a925d22d658afedf53ecffd0b20dff32dc3e5bad3c0ee92d578023d61478bc205f5c10a45cda09f8b4158fd6bd72d8258a05eee896ef0dbb5900fe75daf67cd3c9ce9c4d61c797c6ad9e490e5f1a5fbd6ebdb32f46bbbf3557c08ef641942c10c6199615c968c8057cfa12a2fa197", 0xf3, 0xb, 0x0, 0x2, r6}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], 0x0, 0x26, 0x0, 0xa}, 0x28) 4m32.637934364s ago: executing program 2 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c3cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d000000000000085a503e8c5bc4ce3741ffde3e70575204f9c29aa139fe99b6a37bf29061f58689241e45d049e6dc7d2b32276d164a60bce615bb239f1cb27366a1c82dd85e8af4efabb69679acd3276998e63a8b59d15c9d012a634cd1d35a432140f05f7111894ed493e8d8e9a95fd24939e3e31ec3bc3df385f122adb388aef7e2c2c0ad33df8c3c5dc340881a", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r4, 0x0, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 4m17.389851149s ago: executing program 2 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r6, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c3cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d000000000000085a503e8c5bc4ce3741ffde3e70575204f9c29aa139fe99b6a37bf29061f58689241e45d049e6dc7d2b32276d164a60bce615bb239f1cb27366a1c82dd85e8af4efabb69679acd3276998e63a8b59d15c9d012a634cd1d35a432140f05f7111894ed493e8d8e9a95fd24939e3e31ec3bc3df385f122adb388aef7e2c2c0ad33df8c3c5dc340881a", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r4, 0x0, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 4m14.992034892s ago: executing program 2 (id=481): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$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") mkdir(0x0, 0x6526befdc9551232) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0xc806, 0x0, 0x0) 4m14.012072272s ago: executing program 2 (id=484): lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x361, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[], 0x48) io_uring_setup(0x763c, &(0x7f0000000040)={0x0, 0x411e, 0x2, 0x2, 0x15}) creat(&(0x7f0000000180)='./file0\x00', 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=@deltaction={0x18, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20048840) 4m11.509013708s ago: executing program 2 (id=485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="19050000080000000000000003000000b7080000000000007b8aa8364c7100345fca21edf81436f43a00b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r6, @ANYBLOB="0000000000000000b7040000080000008500000095000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) ioctl$TCFLSH(r3, 0x540b, 0x2) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 3m54.799574096s ago: executing program 36 (id=485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="19050000080000000000000003000000b7080000000000007b8aa8364c7100345fca21edf81436f43a00b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r6, @ANYBLOB="0000000000000000b7040000080000008500000095000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) ioctl$TCFLSH(r3, 0x540b, 0x2) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 34.435767154s ago: executing program 5 (id=685): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x198, 0xffffff7a, 0xffffffff, 0x198, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r4, &(0x7f00000000c0)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xd0, &(0x7f0000000000)=0xffffffa4, 0x4) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 29.266268391s ago: executing program 5 (id=689): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$eJzs3U+IXHcdAPDvezuZ3Ymw3bRpGkXI0kDRBpPdHWoiCI0isocgQS+9LsmmWTJJy+5GtkXMxFoFT56kBw8VWQ8VQUSEeirWsyB48bT3gDcPOagr79/s/MtmNpvd2bafD7x9v9/8/n3ft++9+dcwAXxmLb4Wx9qRxOK5KxtZfWuz2drabN6uyhExGRFpRK3YRdKISD6OuBzFFp/PHiynSx61zisPPkxq733QLGq1csv7p7uNGzC0ZztiqlOZiIjZovifkacdmC/f8nmu7cz3hJJO3FnCzlaJg3HbHtDeaUwfO3z06xY4su4Vz5sDZiKOR/Hsmr0OiPLu8Pg7wzg0emq73pvaBx0LAAAAHLyh7+W7PfMwHsZGTB9OOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDpkBS/GZiUW1qVZyOpfv+/3vWb+vUxh7tP797Id999ZtyBAAAAAAAAAMC+nHkYD2Mjpqv6dpJ/5/9iXjmZ//1c3I21WI7VOB8bsRTrsR6rE1nLTNdE9Y2l9fXV+cGRv4hs5Pb29r1iZCwMHbnQG1e7P9Bh/6fBQCcAAAAAAAAA+Mz6USzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHQRIxUezy7WRVnom0FhFTEVFPZjvd62MNdl+K0D8adxgAAABweKaT/xWF7SR/z38qf98/FXfjTqzHSqxHK5bjev5ZQPHWOf17u9na2mzezrbBCb/xrz2tn88YxWcPw1eey3s83xmxGN+O78W5mI2rsRor8f1YivVYjtn4Vl5aiiRmyk8vZrY2G1HFOhjv5Z7a1f7YznSVs/hO55E04kas5LGdj2v1KvS07He6s1o0/1SP6Fvxfpad5NXSiDm6Xu6zI/p5uT8aZvIjPxZJmZG5MvdZNk50530w93s8T6qVqtzPR9r5DOrkzipZtX+lJ8r58XJ/CLne40dpvZlo/yyrVWffqd1zHvHlf/zl6s30zq2bN9bOHZ3T6An1nxPNrky8MFImWlkm2vvIxNR+4n966mU2irvo3u6WL+Zjp2MlvhNvxPVYjosxF/NxKebia7EQzVjoyuvzu+c1v9bSvV1rZ79UFhoR8dNyf6gmH9WQ5fVEV153zrW5PN8neh7ZydKzI2QpqUcnS3e7I/jn0FBqXygL2RrvdD3jjF9/Jua7MvHc7pn41X+3I2KtdefW6s2lN0dc76Vyn1227/beo3/9VA5o78rDzc6XZ7P/WFnlJ9FzdmRtz1Vtffmql9+41MrJetrqkV/PRdvjrtRsplP3h81UtL0wdJVm3na6q63nVU68Ea3OqxAAjqw0jr98vN540Phb4/3Gjxs3G1emvjl5afKL9Tj219qfJ36f/ib9evJyvB8/jOlxxwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8Ga2+9fWup1VpePYKFSEfo/LsYfcL7Q5uqVBSP1A/6uIrFPvrt2NP7VAvViTS52xn1h4jYZZ76OIJvFD/bdIBLnBmtc9QO4ZAnY0jTlc4jjYi0E09E3DoiP3AHHIQL67ffvLD21ttfWbm99Pry68t3Fi5dfPVi86vz9y7cWGktzxV/xx0lcBD6X5cCAAAAAAAAAAAAR99h/CuLIcsm7TEcKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDJtPhaHGtHEvNz5+ey+tZms5VtVXmnZy0i0ohIfhCRfBxxOYotZrqmSx61zisPPvzlS+990NyZq1b1T/vG/fHf29ujBf9ONa5dbjEbERPl/vEmH9XQM9+1rvnaowXWJ+kcYZaws1XiYNz+HwAA//+INALe") mkdir(0x0, 0x6526befdc9551232) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r1, 0x0, 0x0, 0xc806, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) unlink(0x0) socket$inet6(0xa, 0x803, 0x6) pread64(r0, &(0x7f000001d5c0)=""/102400, 0x19000, 0x400) r7 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) 26.112248787s ago: executing program 5 (id=694): ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x4, 0x400]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$int_in(r2, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102384, 0x18ff0) syz_open_dev$video(0x0, 0xa7, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') getdents64(r6, 0x0, 0x0) getdents(r6, 0xfffffffffffffffd, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 20.964187173s ago: executing program 7 (id=698): r0 = syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x5) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x483}]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa5) 19.537101956s ago: executing program 7 (id=699): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x198, 0xffffff7a, 0xffffffff, 0x198, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r4, &(0x7f00000000c0)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xd0, &(0x7f0000000000)=0xffffffa4, 0x4) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 17.79506454s ago: executing program 8 (id=701): syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="04131505"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) unshare(0x2c020400) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r0}}, 0x18) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x80000031}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.964241035s ago: executing program 5 (id=703): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x4) sendfile(r0, r1, &(0x7f0000000140), 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0xffffffffffffff2f, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r4) read$FUSE(0xffffffffffffffff, &(0x7f0000008300)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x800) getpgid(r3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 14.755148201s ago: executing program 7 (id=704): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() r3 = openat(0xffffffffffffff9c, 0x0, 0x204000, 0x4b) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r3, 0xffffffffffffffff, 0xc, 0x0, 0x0, @void, @value=0x0}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) recvmsg(r0, &(0x7f0000000740)={0x0, 0x700df6df844ba292, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x2041) 14.613311126s ago: executing program 6 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r3, 0x0, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 12.640140966s ago: executing program 7 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r3, 0x0, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 9.273396788s ago: executing program 7 (id=707): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 9.272580408s ago: executing program 6 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r4, 0x0, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 9.271778319s ago: executing program 5 (id=708): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[], 0x1, 0x1506, &(0x7f0000002ac0)="$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") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r2 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) futex(0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, 0x4002) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x4, 0x1d, 0xe, 0xa, "2804e192056d2b088acc95aef8728cca7b1c63fe9da2f9ae99eeec0a293adb58"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 9.271525648s ago: executing program 8 (id=709): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x2, 0x5d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x7c, 0x70, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x100, 0x2, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x92d, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x4, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x4e, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xb9, 0x7, 0xf}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7, 0x9, 0x0, 0xff, 0x1}, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="052357183fe3009d900f08000103100be56464ccd95a4a86fb1c76d55c5e"], 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_disconnect(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x290, 0x1a0, 0x1a0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff, 0xffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'tunl0\x00', 'vcan0\x00', {}, {}, 0x87, 0x3, 0x2, 0x60}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x290}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) dup3(0xffffffffffffffff, r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) 6.317912558s ago: executing program 6 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x20002884) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = getpgrp(r2) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x5, 0x4}, &(0x7f0000000140)) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0x9, 0x5, "7d2fe763523b7b43af6b8a3bd1c31a3d2825ef8654330114cac0207e5446e266"}) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 5.662278458s ago: executing program 7 (id=711): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$eJzs3U+IXHcdAPDvezuZ3Ymw3bRpGkXI0kDRBpPdHWoiCI0isocgQS+9LsmmWTJJy+5GtkXMxFoFT56kBw8VWQ8VQUSEeirWsyB48bT3gDcPOagr79/s/MtmNpvd2bafD7x9v9/8/n3ft++9+dcwAXxmLb4Wx9qRxOK5KxtZfWuz2drabN6uyhExGRFpRK3YRdKISD6OuBzFFp/PHiynSx61zisPPkxq733QLGq1csv7p7uNGzC0ZztiqlOZiIjZovifkacdmC/f8nmu7cz3hJJO3FnCzlaJg3HbHtDeaUwfO3z06xY4su4Vz5sDZiKOR/Hsmr0OiPLu8Pg7wzg0emq73pvaBx0LAAAAHLyh7+W7PfMwHsZGTB9OOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDpkBS/GZiUW1qVZyOpfv+/3vWb+vUxh7tP797Id999ZtyBAAAAAAAAAMC+nHkYD2Mjpqv6dpJ/5/9iXjmZ//1c3I21WI7VOB8bsRTrsR6rE1nLTNdE9Y2l9fXV+cGRv4hs5Pb29r1iZCwMHbnQG1e7P9Bh/6fBQCcAAAAAAAAA+Mz6USzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHQRIxUezy7WRVnom0FhFTEVFPZjvd62MNdl+K0D8adxgAAABweKaT/xWF7SR/z38qf98/FXfjTqzHSqxHK5bjev5ZQPHWOf17u9na2mzezrbBCb/xrz2tn88YxWcPw1eey3s83xmxGN+O78W5mI2rsRor8f1YivVYjtn4Vl5aiiRmyk8vZrY2G1HFOhjv5Z7a1f7YznSVs/hO55E04kas5LGdj2v1KvS07He6s1o0/1SP6Fvxfpad5NXSiDm6Xu6zI/p5uT8aZvIjPxZJmZG5MvdZNk50530w93s8T6qVqtzPR9r5DOrkzipZtX+lJ8r58XJ/CLne40dpvZlo/yyrVWffqd1zHvHlf/zl6s30zq2bN9bOHZ3T6An1nxPNrky8MFImWlkm2vvIxNR+4n966mU2irvo3u6WL+Zjp2MlvhNvxPVYjosxF/NxKebia7EQzVjoyuvzu+c1v9bSvV1rZ79UFhoR8dNyf6gmH9WQ5fVEV153zrW5PN8neh7ZydKzI2QpqUcnS3e7I/jn0FBqXygL2RrvdD3jjF9/Jua7MvHc7pn41X+3I2KtdefW6s2lN0dc76Vyn1227/beo3/9VA5o78rDzc6XZ7P/WFnlJ9FzdmRtz1Vtffmql9+41MrJetrqkV/PRdvjrtRsplP3h81UtL0wdJVm3na6q63nVU68Ea3OqxAAjqw0jr98vN540Phb4/3Gjxs3G1emvjl5afKL9Tj219qfJ36f/ib9evJyvB8/jOlxxwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8Ga2+9fWup1VpePYKFSEfo/LsYfcL7Q5uqVBSP1A/6uIrFPvrt2NP7VAvViTS52xn1h4jYZZ76OIJvFD/bdIBLnBmtc9QO4ZAnY0jTlc4jjYi0E09E3DoiP3AHHIQL67ffvLD21ttfWbm99Pry68t3Fi5dfPVi86vz9y7cWGktzxV/xx0lcBD6X5cCAAAAAAAAAAAAR99h/CuLIcsm7TEcKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDJtPhaHGtHEvNz5+ey+tZms5VtVXmnZy0i0ohIfhCRfBxxOYotZrqmSx61zisPPvzlS+990NyZq1b1T/vG/fHf29ujBf9ONa5dbjEbERPl/vEmH9XQM9+1rvnaowXWJ+kcYZaws1XiYNz+HwAA//+INALe") mkdir(0x0, 0x6526befdc9551232) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) pread64(r0, &(0x7f000001d5c0)=""/102400, 0x19000, 0x400) 5.404279465s ago: executing program 8 (id=712): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x78}, 0x1, 0x7}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 4.811054154s ago: executing program 5 (id=713): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$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") mkdir(0x0, 0x6526befdc9551232) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r1, 0x0, 0x0, 0xc806, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) unlink(0x0) socket$inet6(0xa, 0x803, 0x6) pread64(r0, &(0x7f000001d5c0)=""/102400, 0x19000, 0x400) r5 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) 3.680722138s ago: executing program 8 (id=714): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)=""/24, 0x0) r0 = dup(0xffffffffffffffff) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000240)=0x101, 0x4) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000760003000000000000000000080000000000000005000d80"], 0x20}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/129, 0x4a, 0x81, 0x1}, 0x28) 3.540224933s ago: executing program 6 (id=716): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$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") mkdir(0x0, 0x6526befdc9551232) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r1, 0x0, 0x0, 0xc806, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) unlink(0x0) socket$inet6(0xa, 0x803, 0x6) pread64(r0, &(0x7f000001d5c0)=""/102400, 0x19000, 0x400) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) 2.113581596s ago: executing program 6 (id=717): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = userfaultfd(0x801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYBLOB="00000000001400001c00128009000100626f"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) 1.725595348s ago: executing program 8 (id=718): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xffff0000}}]}, {0x0, [0x61]}}, 0x0, 0x33}, 0x28) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigqueueinfo(r1, 0x1c, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000834000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x8000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x60840, 0x2) unshare(0x28000600) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) 278.88µs ago: executing program 8 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x24000000000000}}]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) futex(&(0x7f0000000000)=0x2, 0xb, 0x1, &(0x7f00000000c0), &(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0xfffffd12}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x34, 0x62, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bf0a478e4811c0de7af30e94937920fcba1334c5465aeaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffff9c, 0x0, 0x89001) umount2(&(0x7f0000000040)='.\x00', 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002c80)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x1000000, 0x1, 0x9}}], 0x18}, 0x140) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 6 (id=720): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4800) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) epoll_wait(r4, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) kernel console output (not intermixed with test programs): =0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd059ce59 code=0x7ffc0000 [ 392.216810][ T28] audit: type=1326 audit(1778850392.448:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fbdd059ce59 code=0x7ffc0000 [ 392.306018][ T28] audit: type=1326 audit(1778850392.448:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd059ce59 code=0x7ffc0000 [ 392.356155][ T7539] loop1: detected capacity change from 0 to 1024 [ 392.422600][ T28] audit: type=1326 audit(1778850392.448:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fbdd059ce59 code=0x7ffc0000 [ 392.476933][ T28] audit: type=1326 audit(1778850392.457:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd059ce59 code=0x7ffc0000 [ 392.638918][ T7544] loop4: detected capacity change from 0 to 16 [ 393.001414][ T7544] erofs: (device loop4): mounted with root inode @ nid 36. [ 394.069469][ T28] audit: type=1326 audit(1778850392.457:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdd059ce59 code=0x7ffc0000 [ 394.550584][ T6153] hfsplus: b-tree write err: -5, ino 25 [ 394.556439][ T6153] hfsplus: b-tree write err: -5, ino 4 [ 394.596061][ T28] audit: type=1326 audit(1778850392.457:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd059ce59 code=0x7ffc0000 [ 394.620483][ T6153] hfsplus: b-tree write err: -5, ino 2 [ 396.177668][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 396.187476][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 396.197715][ T51] Bluetooth: hci4: hardware error 0x00 [ 396.206385][ T28] audit: type=1326 audit(1778850392.466:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd059ce59 code=0x7ffc0000 [ 398.728949][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 398.864063][ T7562] loop2: detected capacity change from 0 to 8 [ 399.662159][ T7562] SQUASHFS error: xz decompression failed, data probably corrupt [ 399.670586][ T7562] SQUASHFS error: Failed to read block 0x108: -5 [ 399.676987][ T7562] SQUASHFS error: Unable to read metadata cache entry [106] [ 399.685668][ T7562] SQUASHFS error: Unable to read inode 0x11f [ 400.067308][ T7567] loop3: detected capacity change from 0 to 16 [ 400.080348][ T7567] erofs: (device loop3): mounted with root inode @ nid 36. [ 400.106830][ T7567] bio_check_eod: 23 callbacks suppressed [ 400.106873][ T7567] syz.3.307: attempt to access beyond end of device [ 400.106873][ T7567] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 400.497722][ T7567] syz.3.307: attempt to access beyond end of device [ 400.497722][ T7567] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 400.512579][ T7567] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 400.555895][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 400.555947][ T28] audit: type=1800 audit(1778850400.945:134): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.307" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 401.374852][ T7572] loop2: detected capacity change from 0 to 16 [ 402.186987][ T7572] erofs: (device loop2): mounted with root inode @ nid 36. [ 402.207118][ T7570] syz.2.316: attempt to access beyond end of device [ 402.207118][ T7570] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 402.245060][ T7570] syz.2.316: attempt to access beyond end of device [ 402.245060][ T7570] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 402.259593][ T7570] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 402.331935][ T28] audit: type=1800 audit(1778850402.573:135): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.316" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 402.992222][ T28] audit: type=1326 audit(1778850403.237:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 403.112927][ T28] audit: type=1326 audit(1778850403.275:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 403.137550][ T28] audit: type=1326 audit(1778850403.275:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 403.200479][ T28] audit: type=1326 audit(1778850403.434:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 403.514031][ T28] audit: type=1326 audit(1778850403.443:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 403.706208][ T28] audit: type=1326 audit(1778850403.443:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 403.783589][ T28] audit: type=1326 audit(1778850403.443:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 403.839410][ T7586] netlink: 43 bytes leftover after parsing attributes in process `syz.1.305'. [ 404.345219][ T28] audit: type=1326 audit(1778850403.443:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 405.590893][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 405.599931][ T7596] netlink: 'syz.1.310': attribute type 6 has an invalid length. [ 406.134401][ T28] audit: type=1326 audit(1778850403.443:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 406.347682][ T28] audit: type=1326 audit(1778850403.443:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 406.374974][ T28] audit: type=1326 audit(1778850403.443:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 406.585530][ T28] audit: type=1326 audit(1778850403.443:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 406.614461][ T28] audit: type=1326 audit(1778850403.443:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 406.644059][ T28] audit: type=1326 audit(1778850403.443:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 406.682874][ T28] audit: type=1326 audit(1778850403.443:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 407.528611][ T7609] loop2: detected capacity change from 0 to 512 [ 408.151776][ T7609] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 408.212357][ T7609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 408.220894][ T7609] System zones: 1-12 [ 408.224982][ T7609] EXT4-fs (loop2): orphan cleanup on readonly fs [ 408.250429][ T7609] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.312: invalid block [ 408.273712][ T7609] EXT4-fs (loop2): Remounting filesystem read-only [ 408.281377][ T7609] EXT4-fs (loop2): 1 truncate cleaned up [ 408.288727][ T7609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 408.292385][ T28] audit: type=1326 audit(1778850403.443:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 408.491894][ T28] audit: type=1326 audit(1778850403.443:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 408.516790][ T28] audit: type=1326 audit(1778850403.443:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.3.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72619ce59 code=0x7ffc0000 [ 408.657698][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 409.160001][ T5809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 409.369087][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.832862][ T5809] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 409.867551][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.616465][ T5809] usb 2-1: config 0 descriptor?? [ 411.665997][ T5809] usb 2-1: bad CDC descriptors [ 411.700385][ T5809] usb 2-1: bad CDC descriptors [ 412.995786][ T5809] usb 2-1: USB disconnect, device number 4 [ 415.319847][ T7639] netlink: 344 bytes leftover after parsing attributes in process `syz.2.320'. [ 416.420174][ T7648] netlink: 344 bytes leftover after parsing attributes in process `syz.4.331'. [ 417.819368][ T7652] loop4: detected capacity change from 0 to 512 [ 419.001053][ T7652] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.324: corrupted in-inode xattr: e_value size too large [ 419.017172][ T7652] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.324: couldn't read orphan inode 15 (err -117) [ 419.030397][ T7652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.150589][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.012006][ T7671] loop2: detected capacity change from 0 to 1024 [ 426.265192][ T6153] hfsplus: b-tree write err: -5, ino 25 [ 426.273690][ T6153] hfsplus: b-tree write err: -5, ino 4 [ 426.280118][ T6153] hfsplus: b-tree write err: -5, ino 2 [ 427.045549][ T7680] netlink: 43 bytes leftover after parsing attributes in process `syz.2.330'. [ 430.292067][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.305866][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.317339][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.326016][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.344182][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 430.352820][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.996873][ T7693] vxcan1 speed is unknown, defaulting to 1000 [ 431.541592][ T7693] chnl_net:caif_netlink_parms(): no params data found [ 431.710836][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.726891][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.734317][ T7693] bridge_slave_0: entered allmulticast mode [ 431.757387][ T7693] bridge_slave_0: entered promiscuous mode [ 431.778292][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.787020][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.800305][ T7693] bridge_slave_1: entered allmulticast mode [ 431.811806][ T7693] bridge_slave_1: entered promiscuous mode [ 431.874319][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.890530][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.023139][ T7693] team0: Port device team_slave_0 added [ 432.034931][ T7693] team0: Port device team_slave_1 added [ 432.061500][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.069702][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.096411][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.108910][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.116405][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.142768][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.192836][ T7693] hsr_slave_0: entered promiscuous mode [ 432.200038][ T7693] hsr_slave_1: entered promiscuous mode [ 432.346254][ T7693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 432.356072][ T7693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 432.367484][ T7693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 432.378478][ T7693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 432.409173][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.417336][ T7693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.425985][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.433233][ T7693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.551155][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.580419][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.589050][ T51] Bluetooth: hci0: command tx timeout [ 432.604601][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.637814][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.651530][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.658799][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.680633][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.687909][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.013203][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.296381][ T7693] veth0_vlan: entered promiscuous mode [ 433.312394][ T7693] veth1_vlan: entered promiscuous mode [ 433.346407][ T7693] veth0_macvtap: entered promiscuous mode [ 433.356717][ T7693] veth1_macvtap: entered promiscuous mode [ 433.376343][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.388482][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.398666][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.409377][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.419326][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.429790][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.443948][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.454508][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.466351][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.478406][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.489304][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.500076][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.510665][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.520530][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.532189][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.542439][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.553009][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.564566][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.583729][ T7693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.592688][ T7693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.604276][ T7693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.614890][ T7693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.694095][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.711641][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.741621][ T6141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.749717][ T6141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.991263][ T7721] loop4: detected capacity change from 0 to 1024 [ 434.825100][ T51] Bluetooth: hci0: command tx timeout [ 434.837895][ T23] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 436.348516][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 436.357598][ T23] usb 6-1: not running at top speed; connect to a high speed hub [ 436.368406][ T23] usb 6-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.381739][ T23] usb 6-1: config 1 interface 0 has no altsetting 0 [ 436.613170][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.622631][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.631419][ T23] usb 6-1: Product: ᐁ [ 436.635785][ T23] usb 6-1: Manufacturer: у [ 436.640332][ T23] usb 6-1: SerialNumber: syz [ 436.662270][ T7722] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.069922][ T51] Bluetooth: hci0: command tx timeout [ 437.264440][ T23] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 437.266647][ T59] hfsplus: b-tree write err: -5, ino 25 [ 437.275646][ T23] usb 6-1: USB disconnect, device number 2 [ 437.385505][ T59] hfsplus: b-tree write err: -5, ino 4 [ 437.441803][ T59] hfsplus: b-tree write err: -5, ino 2 [ 440.407461][ T51] Bluetooth: hci0: command tx timeout [ 441.266832][ T7745] input: syz1 as /devices/virtual/input/input12 [ 441.324042][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.336'. [ 442.402721][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 442.810791][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.819515][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 443.632779][ T8] usb 5-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.645959][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 444.506507][ T8] usb 5-1: string descriptor 0 read error: -71 [ 444.539647][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.549801][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.646386][ T8] usb 5-1: can't set config #1, error -71 [ 444.684502][ T8] usb 5-1: USB disconnect, device number 2 [ 445.753146][ T7773] infiniband syz2: set active [ 445.766826][ T7773] bridge_slave_0: left allmulticast mode [ 445.772796][ T7773] bridge_slave_0: left promiscuous mode [ 445.779384][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.179977][ T7773] bridge_slave_1: left allmulticast mode [ 447.185755][ T7773] bridge_slave_1: left promiscuous mode [ 447.191632][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.244471][ T7773] bond0: (slave bond_slave_0): Releasing backup interface [ 447.258270][ T7773] bond0: (slave bond_slave_1): Releasing backup interface [ 447.325273][ T7773] team0: Port device team_slave_0 removed [ 447.352988][ T7773] team0: Port device team_slave_1 removed [ 447.359339][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.366873][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.381617][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.389893][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.433443][ T7773] team0: Port device netdevsim0 removed [ 447.471139][ T5842] vxcan1 speed is unknown, defaulting to 1000 [ 447.480339][ T7775] bridge0: port 3(syz_tun) entered blocking state [ 447.487215][ T7775] bridge0: port 3(syz_tun) entered disabled state [ 447.494313][ T7775] syz_tun: entered allmulticast mode [ 447.503434][ T7775] syz_tun: entered promiscuous mode [ 447.509854][ T7775] bridge0: port 3(syz_tun) entered blocking state [ 447.516939][ T7775] bridge0: port 3(syz_tun) entered forwarding state [ 450.422674][ T7794] loop2: detected capacity change from 0 to 16 [ 451.162314][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.171113][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.201275][ T7794] erofs: (device loop2): mounted with root inode @ nid 36. [ 451.214984][ T7792] syz.2.339: attempt to access beyond end of device [ 451.214984][ T7792] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 451.252904][ T7792] syz.2.339: attempt to access beyond end of device [ 451.252904][ T7792] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 451.266729][ T7792] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 451.306220][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 451.306235][ T28] audit: type=1800 audit(1778850448.437:209): pid=7792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.339" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 452.334279][ T7797] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 452.432459][ T7797] overlayfs: failed to look up (tracing) for ino (-66) [ 453.468857][ T7803] loop5: detected capacity change from 0 to 16 [ 453.491094][ T7803] erofs: (device loop5): mounted with root inode @ nid 36. [ 453.517945][ T7803] syz.5.356: attempt to access beyond end of device [ 453.517945][ T7803] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 453.560911][ T7803] syz.5.356: attempt to access beyond end of device [ 453.560911][ T7803] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 453.575893][ T7803] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 453.602626][ T28] audit: type=1800 audit(1778850450.589:210): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.356" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 455.393550][ T7808] loop5: detected capacity change from 0 to 1024 [ 456.563681][ T59] hfsplus: b-tree write err: -5, ino 25 [ 456.569523][ T59] hfsplus: b-tree write err: -5, ino 4 [ 456.577069][ T59] hfsplus: b-tree write err: -5, ino 2 [ 456.927819][ T7816] smc: net device vcan0 applied user defined pnetid SYZ1 [ 457.010009][ T5809] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 457.494394][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 457.718732][ T5809] usb 4-1: not running at top speed; connect to a high speed hub [ 457.730418][ T5809] usb 4-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.747276][ T5809] usb 4-1: config 1 interface 0 has no altsetting 0 [ 457.765699][ T5809] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.775033][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.789974][ T5809] usb 4-1: Product: ᐁ [ 457.799727][ T5809] usb 4-1: Manufacturer: у [ 457.804683][ T5809] usb 4-1: SerialNumber: syz [ 457.815969][ T7814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 458.072090][ T5809] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 458.096486][ T5809] usb 4-1: USB disconnect, device number 6 [ 461.195794][ T7824] loop4: detected capacity change from 0 to 7 [ 461.339301][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 461.405235][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.414676][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 461.424633][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.433938][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 461.449942][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.459349][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 461.521850][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.531130][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 461.545663][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 461.554917][ T7834] openvswitch: netlink: Flow key attr not present in new flow. [ 461.573890][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.583178][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.849342][ T5842] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 464.054582][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.971071][ T5842] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 465.013921][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.169184][ T5842] usb 6-1: config 0 descriptor?? [ 466.777785][ T5842] usb 6-1: bad CDC descriptors [ 466.937748][ T5842] usb 6-1: bad CDC descriptors [ 466.985342][ T5842] usb 6-1: USB disconnect, device number 3 [ 468.291312][ T7859] loop2: detected capacity change from 0 to 1024 [ 470.657567][ T59] hfsplus: b-tree write err: -5, ino 25 [ 470.663418][ T59] hfsplus: b-tree write err: -5, ino 4 [ 470.685255][ T59] hfsplus: b-tree write err: -5, ino 2 [ 475.503406][ T7889] Device name cannot be null; rc = [-22] [ 479.002086][ T5809] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 480.212257][ T5809] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.234259][ T5809] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 480.252195][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.283434][ T5809] usb 6-1: config 0 descriptor?? [ 480.391559][ T5809] usb 6-1: bad CDC descriptors [ 480.397934][ T5809] usb 6-1: bad CDC descriptors [ 480.544195][ T5832] usb 6-1: USB disconnect, device number 4 [ 485.063872][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 485.083671][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 485.106349][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 485.126869][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 485.141611][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 485.149174][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.235095][ T7920] vxcan1 speed is unknown, defaulting to 1000 [ 487.381783][ T51] Bluetooth: hci3: command tx timeout [ 488.138131][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.260014][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.288289][ T7920] chnl_net:caif_netlink_parms(): no params data found [ 488.460184][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.588260][ T48] team0: Port device netdevsim0 removed [ 488.609058][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.767739][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.783065][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.794695][ T7920] bridge_slave_0: entered allmulticast mode [ 488.802742][ T7920] bridge_slave_0: entered promiscuous mode [ 488.848972][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.913745][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.940003][ T7920] bridge_slave_1: entered allmulticast mode [ 488.970317][ T7920] bridge_slave_1: entered promiscuous mode [ 489.049252][ T7939] loop5: detected capacity change from 0 to 1024 [ 489.092721][ T7920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.363292][ T7920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.603679][ T51] Bluetooth: hci3: command tx timeout [ 490.035709][ T2980] hfsplus: b-tree write err: -5, ino 25 [ 490.071413][ T2980] hfsplus: b-tree write err: -5, ino 4 [ 490.083503][ T2980] hfsplus: b-tree write err: -5, ino 2 [ 490.156864][ T7920] team0: Port device team_slave_0 added [ 490.203891][ T7920] team0: Port device team_slave_1 added [ 490.273636][ T7944] loop5: detected capacity change from 0 to 1024 [ 491.534028][ T59] hfsplus: b-tree write err: -5, ino 25 [ 491.558844][ T59] hfsplus: b-tree write err: -5, ino 4 [ 491.564486][ T59] hfsplus: b-tree write err: -5, ino 2 [ 491.900607][ T51] Bluetooth: hci3: command tx timeout [ 492.137322][ T5807] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 493.312993][ T5807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.314817][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.332097][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.336877][ T5807] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 493.374799][ T7920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.392835][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.423531][ T5807] usb 6-1: config 0 descriptor?? [ 493.450005][ T5807] usb 6-1: bad CDC descriptors [ 493.474968][ T5807] usb 6-1: bad CDC descriptors [ 493.586439][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.611398][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.681639][ T5832] usb 6-1: USB disconnect, device number 5 [ 493.730985][ T7920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.962040][ T7920] hsr_slave_0: entered promiscuous mode [ 493.984951][ T7920] hsr_slave_1: entered promiscuous mode [ 493.995822][ T7920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.007657][ T7920] Cannot create hsr debugfs directory [ 494.047856][ T51] Bluetooth: hci3: command tx timeout [ 496.397096][ T7920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 496.698351][ T7920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 496.734874][ T7920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 496.816511][ T7920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 497.275832][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 497.348729][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.443510][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.481483][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.530857][ T8] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 497.548048][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.556540][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.574235][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.597833][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.605040][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.629016][ T8] usb 6-1: config 0 descriptor?? [ 497.646461][ T8] usb 6-1: bad CDC descriptors [ 497.664736][ T8] usb 6-1: bad CDC descriptors [ 497.805102][ T48] hsr_slave_0: left promiscuous mode [ 497.980057][ T48] hsr_slave_1: left promiscuous mode [ 498.096125][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.122248][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.156277][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.169840][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.185782][ T48] bridge_slave_1: left allmulticast mode [ 498.192902][ T48] bridge_slave_1: left promiscuous mode [ 498.205716][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.251932][ T48] bridge_slave_0: left allmulticast mode [ 498.258929][ T48] bridge_slave_0: left promiscuous mode [ 498.267042][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.358692][ T48] veth1_macvtap: left promiscuous mode [ 498.366124][ T48] veth0_macvtap: left promiscuous mode [ 498.374394][ T48] veth1_vlan: left promiscuous mode [ 498.400762][ T48] veth0_vlan: left promiscuous mode [ 498.491326][ T23] usb 6-1: USB disconnect, device number 6 [ 499.746648][ T8008] Device name cannot be null; rc = [-22] [ 503.338870][ T48] team0 (unregistering): Port device team_slave_1 removed [ 503.427987][ T48] team0 (unregistering): Port device team_slave_0 removed [ 503.926559][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.652070][ T8024] loop5: detected capacity change from 0 to 1024 [ 504.682614][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.713555][ T2117] hfsplus: b-tree write err: -5, ino 25 [ 505.721859][ T2117] hfsplus: b-tree write err: -5, ino 4 [ 505.731046][ T2117] hfsplus: b-tree write err: -5, ino 2 [ 506.098117][ T48] bond0 (unregistering): Released all slaves [ 506.232593][ T7920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 506.259882][ T7920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.066530][ T8034] syz.5.394: attempt to access beyond end of device [ 507.066530][ T8034] nbd5: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 507.080155][ T8034] gfs2: error 10 reading superblock [ 508.648041][ T48] IPVS: stop unused estimator thread 0... [ 508.736600][ T7920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.608261][ T7920] veth0_vlan: entered promiscuous mode [ 509.636566][ T7920] veth1_vlan: entered promiscuous mode [ 509.639146][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 509.708866][ T7920] veth0_macvtap: entered promiscuous mode [ 509.728385][ T7920] veth1_macvtap: entered promiscuous mode [ 509.802397][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.814389][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.824693][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.835946][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.846250][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.857354][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.871281][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.887504][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 509.902591][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 509.903367][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.922607][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.933052][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.943793][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.944183][ T8] usb 4-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 509.954180][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.982031][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.993511][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 510.003651][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.023059][ T7920] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.032536][ T7920] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.033910][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.051351][ T7920] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.066125][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.077149][ T7920] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.085057][ T8] usb 4-1: Product: ᐁ [ 510.097543][ T8] usb 4-1: Manufacturer: у [ 510.116072][ T8] usb 4-1: SerialNumber: syz [ 510.152931][ T8058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.303099][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.320127][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.399065][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.418844][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.573440][ T8] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 510.622111][ T8] usb 4-1: USB disconnect, device number 7 [ 510.835216][ T8075] loop6: detected capacity change from 0 to 16 [ 510.859924][ T8075] erofs: (device loop6): mounted with root inode @ nid 36. [ 510.881092][ T8075] syz.6.380: attempt to access beyond end of device [ 510.881092][ T8075] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 510.968051][ T8075] syz.6.380: attempt to access beyond end of device [ 510.968051][ T8075] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 510.984486][ T8075] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 511.018827][ T28] audit: type=1800 audit(1778850504.323:211): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.380" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 512.691581][ T8085] input: syz1 as /devices/virtual/input/input13 [ 512.749265][ T8087] netlink: 16 bytes leftover after parsing attributes in process `syz.6.399'. [ 514.054082][ T5761] IPVS: starting estimator thread 0... [ 515.025979][ T8093] IPVS: using max 34 ests per chain, 81600 per kthread [ 517.243031][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.252961][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.732953][ T8108] loop3: detected capacity change from 0 to 2048 [ 518.188810][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.404'. [ 518.847007][ T8108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.417631][ T8135] Trying to write to read-only block-device nullb0 [ 520.499723][ T8126] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 520.578291][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.863311][ T28] audit: type=1326 audit(1778850515.356:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.007302][ T28] audit: type=1326 audit(1778850515.356:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.316883][ T28] audit: type=1326 audit(1778850515.356:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.374060][ T28] audit: type=1326 audit(1778850515.449:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.409196][ T28] audit: type=1326 audit(1778850515.449:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.466245][ T28] audit: type=1326 audit(1778850515.459:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.497221][ T28] audit: type=1326 audit(1778850515.459:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.521888][ T28] audit: type=1326 audit(1778850515.459:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.553663][ T28] audit: type=1326 audit(1778850515.468:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.594684][ T28] audit: type=1326 audit(1778850515.468:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.6.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9236b9ce59 code=0x7ffc0000 [ 523.733603][ T23] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 525.009286][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 525.081439][ T8179] loop6: detected capacity change from 0 to 16 [ 527.982622][ T8179] erofs: (device loop6): mounted with root inode @ nid 36. [ 528.109656][ T8176] syz.6.412: attempt to access beyond end of device [ 528.109656][ T8176] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 528.150967][ T8176] syz.6.412: attempt to access beyond end of device [ 528.150967][ T8176] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 528.179649][ T8176] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 528.221340][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 528.221777][ T28] audit: type=1800 audit(1778850520.409:284): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.412" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 529.793506][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 529.801162][ T23] usb 3-1: can't read configurations, error -71 [ 530.193590][ T8198] loop6: detected capacity change from 0 to 16 [ 530.211592][ T8198] erofs: (device loop6): mounted with root inode @ nid 36. [ 530.223811][ T8198] syz.6.418: attempt to access beyond end of device [ 530.223811][ T8198] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 530.256386][ T8198] syz.6.418: attempt to access beyond end of device [ 530.256386][ T8198] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 530.270289][ T8198] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 530.479583][ T28] audit: type=1800 audit(1778850522.365:285): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.418" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 531.525896][ T8207] loop6: detected capacity change from 0 to 1024 [ 533.058175][ T6153] hfsplus: b-tree write err: -5, ino 25 [ 533.065107][ T6153] hfsplus: b-tree write err: -5, ino 4 [ 533.554474][ T8219] syz.5.415: attempt to access beyond end of device [ 533.554474][ T8219] nbd5: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 533.567878][ T8219] gfs2: error 10 reading superblock [ 534.011667][ T6153] hfsplus: b-tree write err: -5, ino 2 [ 542.664957][ T8278] loop5: detected capacity change from 0 to 16 [ 542.976625][ T8278] erofs: (device loop5): mounted with root inode @ nid 36. [ 543.000375][ T8278] syz.5.427: attempt to access beyond end of device [ 543.000375][ T8278] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 543.175443][ T8278] syz.5.427: attempt to access beyond end of device [ 543.175443][ T8278] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 543.190268][ T8278] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 543.225663][ T28] audit: type=1800 audit(1778850534.446:286): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.427" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 543.639875][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.668988][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.686197][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.712011][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.720842][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 543.731721][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.923430][ T8280] vxcan1 speed is unknown, defaulting to 1000 [ 543.936826][ T8288] loop5: detected capacity change from 0 to 1024 [ 545.138429][ T6157] hfsplus: b-tree write err: -5, ino 25 [ 545.144300][ T6157] hfsplus: b-tree write err: -5, ino 4 [ 545.171127][ T6157] hfsplus: b-tree write err: -5, ino 2 [ 545.889056][ T8303] Device name cannot be null; rc = [-22] [ 546.844541][ T5779] Bluetooth: hci4: command tx timeout [ 546.895397][ T8299] loop5: detected capacity change from 0 to 1024 [ 549.112905][ T5779] Bluetooth: hci4: command tx timeout [ 549.169302][ T6157] hfsplus: b-tree write err: -5, ino 25 [ 549.175172][ T6157] hfsplus: b-tree write err: -5, ino 4 [ 549.235007][ T6157] hfsplus: b-tree write err: -5, ino 2 [ 549.383062][ T8280] chnl_net:caif_netlink_parms(): no params data found [ 550.401051][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.441249][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.473610][ T8280] bridge_slave_0: entered allmulticast mode [ 550.513661][ T8280] bridge_slave_0: entered promiscuous mode [ 550.550323][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.601292][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.608654][ T8280] bridge_slave_1: entered allmulticast mode [ 550.671402][ T8280] bridge_slave_1: entered promiscuous mode [ 550.855583][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.912140][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.105590][ T8280] team0: Port device team_slave_0 added [ 551.123043][ T8280] team0: Port device team_slave_1 added [ 551.164457][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.171526][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.199307][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.299009][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.346620][ T5779] Bluetooth: hci4: command tx timeout [ 551.352187][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.503395][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.234012][ T8280] hsr_slave_0: entered promiscuous mode [ 552.376119][ T8280] hsr_slave_1: entered promiscuous mode [ 552.492438][ T8280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.603122][ T8280] Cannot create hsr debugfs directory [ 553.211647][ T8351] loop6: detected capacity change from 0 to 1024 [ 553.551175][ T5779] Bluetooth: hci4: command tx timeout [ 554.018290][ T8280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 554.031217][ T8280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 554.042281][ T8280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 554.055482][ T8280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 554.072604][ T5761] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 554.216333][ T6157] hfsplus: b-tree write err: -5, ino 25 [ 554.228041][ T6157] hfsplus: b-tree write err: -5, ino 4 [ 554.242336][ T6157] hfsplus: b-tree write err: -5, ino 2 [ 554.309520][ T5761] usb 6-1: unable to get BOS descriptor or descriptor too short [ 554.329797][ T5761] usb 6-1: not running at top speed; connect to a high speed hub [ 554.333701][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.367941][ T8280] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.369278][ T5761] usb 6-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 554.400356][ T5761] usb 6-1: config 1 interface 0 has no altsetting 0 [ 554.411730][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.418919][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.454627][ T5761] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.469964][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.484252][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.491475][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.501299][ T5761] usb 6-1: Product: ᐁ [ 554.505516][ T5761] usb 6-1: Manufacturer: у [ 554.512017][ T5761] usb 6-1: SerialNumber: syz [ 554.578270][ T8355] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 554.623064][ T8362] loop6: detected capacity change from 0 to 1024 [ 554.828464][ T5761] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 554.945228][ T5761] usb 6-1: USB disconnect, device number 7 [ 555.984901][ T6131] hfsplus: b-tree write err: -5, ino 25 [ 556.048923][ T6131] hfsplus: b-tree write err: -5, ino 4 [ 556.100618][ T6131] hfsplus: b-tree write err: -5, ino 2 [ 557.151559][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.685454][ T8382] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 559.402687][ T8389] loop6: detected capacity change from 0 to 16 [ 559.464398][ T8389] erofs: (device loop6): mounted with root inode @ nid 36. [ 559.500474][ T8389] syz.6.442: attempt to access beyond end of device [ 559.500474][ T8389] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 559.527898][ T8389] syz.6.442: attempt to access beyond end of device [ 559.527898][ T8389] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 559.543070][ T8389] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 559.564975][ T28] audit: type=1800 audit(1778850549.756:287): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.442" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 562.127347][ T8402] loop6: detected capacity change from 0 to 1024 [ 562.281305][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 562.643722][ T6153] hfsplus: b-tree write err: -5, ino 25 [ 562.649574][ T6153] hfsplus: b-tree write err: -5, ino 4 [ 562.716464][ T6153] hfsplus: b-tree write err: -5, ino 2 [ 562.788330][ T8280] veth0_vlan: entered promiscuous mode [ 562.861335][ T8280] veth1_vlan: entered promiscuous mode [ 563.374565][ T8280] veth0_macvtap: entered promiscuous mode [ 563.615770][ T8280] veth1_macvtap: entered promiscuous mode [ 563.709036][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.730715][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.752335][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.784937][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.794849][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.867079][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.887937][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.979397][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.025915][ T8421] loop5: detected capacity change from 0 to 1024 [ 564.028442][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.249091][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.260729][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.271233][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.282373][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.211321][ T8423] loop6: detected capacity change from 0 to 16 [ 565.282504][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.304271][ T8423] erofs: (device loop6): mounted with root inode @ nid 36. [ 565.371708][ T8424] syz.6.446: attempt to access beyond end of device [ 565.371708][ T8424] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 565.374615][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.387150][ T8424] syz.6.446: attempt to access beyond end of device [ 565.387150][ T8424] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 565.409547][ T8424] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 565.443601][ T28] audit: type=1800 audit(1778850555.249:288): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.446" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 565.483872][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.513799][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.568343][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.568449][ T2117] hfsplus: b-tree write err: -5, ino 25 [ 565.581851][ T2117] hfsplus: b-tree write err: -5, ino 4 [ 565.587477][ T2117] hfsplus: b-tree write err: -5, ino 2 [ 565.627635][ T8280] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.730432][ T8280] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.761970][ T8280] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.787830][ T8280] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.792833][ T8439] loop6: detected capacity change from 0 to 16 [ 567.803166][ T8439] erofs: (device loop6): mounted with root inode @ nid 36. [ 567.817847][ T8437] syz.6.448: attempt to access beyond end of device [ 567.817847][ T8437] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 567.879985][ T8437] syz.6.448: attempt to access beyond end of device [ 567.879985][ T8437] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 567.893821][ T8437] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 569.264361][ T28] audit: type=1800 audit(1778850557.570:289): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.448" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 569.757640][ T8451] loop6: detected capacity change from 0 to 1024 [ 569.778767][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.810186][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.007197][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.148293][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.193213][ T48] hfsplus: b-tree write err: -5, ino 25 [ 570.239461][ T48] hfsplus: b-tree write err: -5, ino 4 [ 570.245098][ T48] hfsplus: b-tree write err: -5, ino 2 [ 570.896491][ T8466] loop6: detected capacity change from 0 to 16 [ 570.923224][ T8] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 571.870434][ T8466] erofs: (device loop6): mounted with root inode @ nid 36. [ 571.882256][ T8466] syz.6.459: attempt to access beyond end of device [ 571.882256][ T8466] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 571.930784][ T8466] syz.6.459: attempt to access beyond end of device [ 571.930784][ T8466] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 571.945168][ T8466] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 572.048822][ T28] audit: type=1800 audit(1778850561.369:290): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.459" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 572.252101][ T8] usb 8-1: unable to get BOS descriptor or descriptor too short [ 572.271716][ T8] usb 8-1: not running at top speed; connect to a high speed hub [ 572.315679][ T8] usb 8-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 572.348258][ T8] usb 8-1: config 1 interface 0 has no altsetting 0 [ 572.372288][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.391709][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.403505][ T8] usb 8-1: Product: ᐁ [ 572.407730][ T8] usb 8-1: Manufacturer: у [ 572.417132][ T8] usb 8-1: SerialNumber: syz [ 572.475957][ T8461] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 572.747422][ T8] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 572.818973][ T8] usb 8-1: USB disconnect, device number 2 [ 574.503160][ T28] audit: type=1326 audit(1778850563.737:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 574.876251][ T28] audit: type=1326 audit(1778850563.774:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 574.909231][ T23] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 575.010837][ T28] audit: type=1326 audit(1778850563.783:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 575.038215][ T28] audit: type=1326 audit(1778850563.793:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 575.129664][ T28] audit: type=1326 audit(1778850563.793:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 575.193653][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 575.223876][ T23] usb 7-1: not running at top speed; connect to a high speed hub [ 575.418402][ T8488] loop5: detected capacity change from 0 to 16 [ 576.615939][ T23] usb 7-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 576.681043][ T23] usb 7-1: config 1 interface 0 has no altsetting 0 [ 576.685939][ T8488] erofs: (device loop5): mounted with root inode @ nid 36. [ 576.694715][ T28] audit: type=1326 audit(1778850563.933:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 576.732118][ T8486] syz.5.450: attempt to access beyond end of device [ 576.732118][ T8486] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 576.753324][ T8486] syz.5.450: attempt to access beyond end of device [ 576.753324][ T8486] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 576.767266][ T8486] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 576.790915][ T23] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.814928][ T8490] loop2: detected capacity change from 0 to 1024 [ 576.845701][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.856503][ T23] usb 7-1: Product: ᐁ [ 576.860838][ T23] usb 7-1: Manufacturer: у [ 576.865975][ T23] usb 7-1: SerialNumber: syz [ 576.952379][ T8477] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 576.970644][ T28] audit: type=1326 audit(1778850563.942:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 577.109807][ T28] audit: type=1326 audit(1778850563.942:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 577.238202][ T28] audit: type=1326 audit(1778850563.942:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.7.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab9b9ce59 code=0x7ffc0000 [ 577.272717][ T23] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 577.304080][ T8494] loop5: detected capacity change from 0 to 1024 [ 580.166662][ T23] usb 7-1: USB disconnect, device number 2 [ 581.009063][ T6155] hfsplus: b-tree write err: -5, ino 25 [ 581.034603][ T8494] hfsplus: failed to load extents file [ 581.056209][ T6155] hfsplus: b-tree write err: -5, ino 4 [ 581.084128][ T6155] hfsplus: b-tree write err: -5, ino 2 [ 581.384232][ T8509] loop7: detected capacity change from 0 to 512 [ 581.465874][ T8509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 581.476666][ T8512] loop6: detected capacity change from 0 to 1024 [ 581.726088][ T8509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 581.843006][ T8509] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.865985][ T6146] hfsplus: b-tree write err: -5, ino 25 [ 582.467765][ T8522] Device name cannot be null; rc = [-22] [ 583.407517][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.414036][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.440157][ T6146] hfsplus: b-tree write err: -5, ino 4 [ 583.445790][ T6146] hfsplus: b-tree write err: -5, ino 2 [ 586.585161][ T8280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 587.533905][ T8550] netlink: 68 bytes leftover after parsing attributes in process `syz.6.466'. [ 587.928641][ T8554] loop6: detected capacity change from 0 to 1024 [ 588.252204][ T8562] loop7: detected capacity change from 0 to 16 [ 589.043236][ T8562] erofs: (device loop7): mounted with root inode @ nid 36. [ 589.068327][ T8562] syz.7.465: attempt to access beyond end of device [ 589.068327][ T8562] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 589.185117][ T8562] syz.7.465: attempt to access beyond end of device [ 589.185117][ T8562] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 589.200188][ T8562] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 589.306819][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 589.306840][ T28] audit: type=1800 audit(1778850577.511:336): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.465" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 589.442415][ T6157] hfsplus: b-tree write err: -5, ino 25 [ 589.466945][ T6157] hfsplus: b-tree write err: -5, ino 4 [ 589.494410][ T6157] hfsplus: b-tree write err: -5, ino 2 [ 589.634411][ T968] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 589.780078][ T8567] loop7: detected capacity change from 0 to 1024 [ 589.890906][ T968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 589.912755][ T968] usb 6-1: not running at top speed; connect to a high speed hub [ 589.925041][ T6146] hfsplus: b-tree write err: -5, ino 25 [ 589.931582][ T968] usb 6-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 589.944754][ T6146] hfsplus: b-tree write err: -5, ino 4 [ 589.951054][ T6146] hfsplus: b-tree write err: -5, ino 2 [ 589.957544][ T968] usb 6-1: config 1 interface 0 has no altsetting 0 [ 589.973980][ T968] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.473727][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.482357][ T968] usb 6-1: Product: ᐁ [ 591.487165][ T968] usb 6-1: Manufacturer: у [ 591.491723][ T968] usb 6-1: SerialNumber: syz [ 591.502421][ T8556] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 591.678371][ T968] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 591.703492][ T968] usb 6-1: USB disconnect, device number 8 [ 596.925055][ T8609] loop7: detected capacity change from 0 to 16 [ 596.935761][ T8609] erofs: (device loop7): mounted with root inode @ nid 36. [ 596.947999][ T8609] syz.7.478: attempt to access beyond end of device [ 596.947999][ T8609] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 596.999982][ T8609] syz.7.478: attempt to access beyond end of device [ 596.999982][ T8609] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 597.014462][ T8609] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 597.029102][ T28] audit: type=1800 audit(1778850584.829:337): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.478" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 598.011897][ T8620] loop2: detected capacity change from 0 to 16 [ 598.023486][ T8620] erofs: (device loop2): mounted with root inode @ nid 36. [ 598.034138][ T8620] syz.2.464: attempt to access beyond end of device [ 598.034138][ T8620] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 598.352308][ T8620] syz.2.464: attempt to access beyond end of device [ 598.352308][ T8620] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 598.367292][ T8620] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 598.405722][ T28] audit: type=1800 audit(1778850586.093:338): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.464" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 598.859630][ T8618] loop7: detected capacity change from 0 to 1024 [ 600.073925][ T8629] loop6: detected capacity change from 0 to 512 [ 600.255177][ T8631] loop2: detected capacity change from 0 to 16 [ 600.613579][ T8631] erofs: (device loop2): mounted with root inode @ nid 36. [ 600.634252][ T8631] syz.2.480: attempt to access beyond end of device [ 600.634252][ T8631] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 600.869733][ T28] audit: type=1800 audit(1778850588.423:339): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.480" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 600.929916][ T8629] EXT4-fs (loop6): 1 truncate cleaned up [ 600.938178][ T8629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.379768][ T7920] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.027213][ T8643] loop2: detected capacity change from 0 to 1024 [ 602.107792][ T2980] hfsplus: b-tree write err: -5, ino 25 [ 602.151086][ T2980] hfsplus: b-tree write err: -5, ino 4 [ 602.182432][ T6157] hfsplus: b-tree write err: -5, ino 25 [ 602.194651][ T6157] hfsplus: b-tree write err: -5, ino 4 [ 602.200265][ T6157] hfsplus: b-tree write err: -5, ino 2 [ 602.200701][ T2980] hfsplus: b-tree write err: -5, ino 2 [ 603.232699][ T23] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 606.707595][ T23] usb 6-1: device not accepting address 9, error -71 [ 607.766091][ T8672] syz.6.487: attempt to access beyond end of device [ 607.766091][ T8672] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 607.766140][ T8672] gfs2: error 10 reading superblock [ 611.205442][ T8688] loop6: detected capacity change from 0 to 1024 [ 612.339761][ T2117] hfsplus: b-tree write err: -5, ino 25 [ 612.358362][ T2117] hfsplus: b-tree write err: -5, ino 4 [ 612.383892][ T2117] hfsplus: b-tree write err: -5, ino 2 [ 614.184727][ T8710] loop6: detected capacity change from 0 to 1024 [ 615.439161][ T6146] hfsplus: b-tree write err: -5, ino 25 [ 615.673462][ T6146] hfsplus: b-tree write err: -5, ino 4 [ 615.698211][ T8721] 9pnet_fd: Insufficient options for proto=fd [ 615.760379][ T6146] hfsplus: b-tree write err: -5, ino 2 [ 616.270239][ T8724] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 616.353767][ T8724] overlayfs: failed to look up (tracing) for ino (-66) [ 617.176933][ T5809] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 617.257786][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 617.485320][ T5809] usb 8-1: unable to get BOS descriptor or descriptor too short [ 617.494958][ T5809] usb 8-1: not running at top speed; connect to a high speed hub [ 617.517190][ T5809] usb 8-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 618.839450][ T5809] usb 8-1: config 1 interface 0 has no altsetting 0 [ 618.890730][ T5809] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.914417][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.064939][ T5809] usb 8-1: Product: ᐁ [ 619.069421][ T5809] usb 8-1: Manufacturer: у [ 619.074010][ T5809] usb 8-1: SerialNumber: syz [ 619.091424][ T8726] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 619.115224][ T8732] loop6: detected capacity change from 0 to 16 [ 619.139782][ T8732] erofs: (device loop6): mounted with root inode @ nid 36. [ 619.150807][ T8732] syz.6.498: attempt to access beyond end of device [ 619.150807][ T8732] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 619.168580][ T8732] syz.6.498: attempt to access beyond end of device [ 619.168580][ T8732] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 619.183813][ T8732] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 619.197218][ T28] audit: type=1800 audit(1778850605.567:340): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.498" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 621.410027][ T5809] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 621.425921][ T5809] usb 8-1: USB disconnect, device number 3 [ 621.676035][ T8742] smc: net device vcan0 applied user defined pnetid SYZ1 [ 622.591517][ T8745] smc: net device vcan0 applied user defined pnetid SYZ1 [ 625.542411][ T8757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.553674][ T8757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 625.562335][ T8757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 625.572784][ T8757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 625.580718][ T8757] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 625.588674][ T8757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 625.776102][ T8755] vxcan1 speed is unknown, defaulting to 1000 [ 626.764814][ T8764] loop5: detected capacity change from 0 to 1024 [ 627.235798][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 627.492462][ T6153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.525592][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.536043][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.543548][ T8755] bridge_slave_0: entered allmulticast mode [ 627.561742][ T8755] bridge_slave_0: entered promiscuous mode [ 627.576566][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.588023][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.596131][ T8755] bridge_slave_1: entered allmulticast mode [ 627.611599][ T8755] bridge_slave_1: entered promiscuous mode [ 627.718851][ T6131] hfsplus: b-tree write err: -5, ino 25 [ 627.752769][ T6131] hfsplus: b-tree write err: -5, ino 4 [ 627.758407][ T6131] hfsplus: b-tree write err: -5, ino 2 [ 627.837852][ T51] Bluetooth: hci1: command tx timeout [ 627.899160][ T6153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.472615][ T51] Bluetooth: hci1: command tx timeout [ 630.497573][ T8790] loop6: detected capacity change from 0 to 16 [ 630.558517][ T8790] erofs: (device loop6): mounted with root inode @ nid 36. [ 630.579390][ T8788] syz.6.508: attempt to access beyond end of device [ 630.579390][ T8788] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 630.596003][ T8788] syz.6.508: attempt to access beyond end of device [ 630.596003][ T8788] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 630.610091][ T8788] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 630.622697][ T28] audit: type=1800 audit(1778850616.263:341): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.508" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 630.756087][ T6153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.800483][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.843002][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.938944][ T8755] team0: Port device team_slave_0 added [ 631.151602][ T6153] team0: Port device netdevsim0 removed [ 631.160063][ T6153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.308695][ T8755] team0: Port device team_slave_1 added [ 632.717675][ T51] Bluetooth: hci1: command tx timeout [ 633.557368][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.945278][ T51] Bluetooth: hci1: command tx timeout [ 634.964611][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.039336][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.066268][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.074204][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.101136][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.507736][ T8755] hsr_slave_0: entered promiscuous mode [ 636.443166][ T8755] hsr_slave_1: entered promiscuous mode [ 636.457708][ T8755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.467270][ T8755] Cannot create hsr debugfs directory [ 636.503370][ T5809] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 636.548478][ T6153] tipc: Left network mode [ 636.744133][ T5809] usb 6-1: unable to get BOS descriptor or descriptor too short [ 636.788209][ T5809] usb 6-1: not running at top speed; connect to a high speed hub [ 636.847864][ T5809] usb 6-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 636.877306][ T5809] usb 6-1: config 1 interface 0 has no altsetting 0 [ 636.925860][ T5809] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.937690][ T8824] loop6: detected capacity change from 0 to 1024 [ 636.962782][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.984156][ T5809] usb 6-1: Product: ᐁ [ 636.988456][ T5809] usb 6-1: Manufacturer: у [ 637.003882][ T5809] usb 6-1: SerialNumber: syz [ 637.156472][ T8812] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 637.403694][ T5809] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 637.434257][ T5809] usb 6-1: USB disconnect, device number 11 [ 637.880507][ T6146] hfsplus: b-tree write err: -5, ino 25 [ 637.939565][ T6146] hfsplus: b-tree write err: -5, ino 4 [ 638.022295][ T6146] hfsplus: b-tree write err: -5, ino 2 [ 644.875504][ T8755] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 645.091898][ T28] audit: type=1804 audit(1778850629.804:342): pid=8866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.521" name="bus" dev="ramfs" ino=17682 res=1 errno=0 [ 645.107841][ T8755] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 645.319136][ T28] audit: type=1804 audit(1778850629.841:343): pid=8866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.521" name="bus" dev="ramfs" ino=17682 res=1 errno=0 [ 646.110871][ T8755] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 646.208259][ T8755] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 646.327136][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 649.414832][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.421322][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.783303][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.052500][ T6153] hsr_slave_0: left promiscuous mode [ 650.432432][ T8886] loop7: detected capacity change from 0 to 32768 [ 650.741883][ T6153] hsr_slave_1: left promiscuous mode [ 650.784437][ T8886] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 650.806435][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.852067][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.913322][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.938924][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.960794][ T6153] bridge_slave_1: left allmulticast mode [ 650.998451][ T8886] XFS (loop7): Ending clean mount [ 651.010658][ T6153] bridge_slave_1: left promiscuous mode [ 651.017566][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.046253][ T8886] XFS (loop7): Quotacheck needed: Please wait. [ 651.074339][ T6153] bridge_slave_0: left allmulticast mode [ 651.090059][ T6153] bridge_slave_0: left promiscuous mode [ 651.095898][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.229371][ T8886] XFS (loop7): Quotacheck: Done. [ 651.998195][ T28] audit: type=1800 audit(1778850636.242:344): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.518" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4427 res=0 errno=0 [ 652.310314][ T8280] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 652.326006][ T6153] veth1_macvtap: left promiscuous mode [ 652.348346][ T6153] veth0_macvtap: left promiscuous mode [ 652.372911][ T6153] veth1_vlan: left promiscuous mode [ 652.378338][ T6153] veth0_vlan: left promiscuous mode [ 657.319142][ T8925] input: syz1 as /devices/virtual/input/input14 [ 660.386927][ T6153] team0 (unregistering): Port device team_slave_1 removed [ 660.630322][ T6153] team0 (unregistering): Port device team_slave_0 removed [ 660.789670][ T6153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.252910][ T6153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.672380][ T6153] bond0 (unregistering): Released all slaves [ 662.827973][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.7.530'. [ 663.007608][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.121494][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.128754][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.244102][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.251660][ T6157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.300768][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.964378][ T8988] syz_tun: entered allmulticast mode [ 667.023085][ T8988] dvmrp8: entered allmulticast mode [ 667.077364][ T8987] syz_tun: left allmulticast mode [ 667.187946][ T8755] veth0_vlan: entered promiscuous mode [ 667.256014][ T8755] veth1_vlan: entered promiscuous mode [ 667.324600][ T8755] veth0_macvtap: entered promiscuous mode [ 667.412561][ T8995] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 667.580999][ T8755] veth1_macvtap: entered promiscuous mode [ 667.754184][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.808263][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.843308][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.870150][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.891178][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.032882][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.044074][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.061704][ T9004] loop5: detected capacity change from 0 to 16 [ 668.074997][ T9004] erofs: (device loop5): mounted with root inode @ nid 36. [ 668.095585][ T9004] syz.5.541: attempt to access beyond end of device [ 668.095585][ T9004] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 668.141303][ T9004] syz.5.541: attempt to access beyond end of device [ 668.141303][ T9004] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 668.156395][ T9004] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 668.261538][ T28] audit: type=1800 audit(1778850651.402:345): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.541" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 668.292240][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.852913][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.869386][ T28] audit: type=1804 audit(1778850652.039:346): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.540" name="bus" dev="ramfs" ino=17399 res=1 errno=0 [ 669.066543][ T28] audit: type=1804 audit(1778850652.095:347): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.540" name="bus" dev="ramfs" ino=17399 res=1 errno=0 [ 669.087715][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.146657][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.157473][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.205860][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.335582][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.476485][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.563137][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.651760][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.306442][ T9014] input: syz1 as /devices/virtual/input/input15 [ 671.321883][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.333493][ T8755] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.342299][ T8755] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.351466][ T8755] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.360208][ T8755] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.402832][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.543'. [ 672.618473][ T6131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.643363][ T6131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.362523][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.581234][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.694036][ T9055] loop7: detected capacity change from 0 to 16 [ 676.712728][ T9055] erofs: (device loop7): mounted with root inode @ nid 36. [ 676.741017][ T9055] syz.7.551: attempt to access beyond end of device [ 676.741017][ T9055] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 676.797079][ T9055] syz.7.551: attempt to access beyond end of device [ 676.797079][ T9055] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 676.812117][ T9055] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 676.927030][ T28] audit: type=1800 audit(1778850659.497:348): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.551" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 678.158987][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 679.485056][ T9073] loop6: detected capacity change from 0 to 512 [ 679.572702][ T9073] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 679.805226][ T9073] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.548: bg 0: block 104: invalid block bitmap [ 679.837381][ T9073] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 679.863301][ T9073] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.548: invalid indirect mapped block 1 (level 1) [ 679.889933][ T9073] EXT4-fs (loop6): 1 truncate cleaned up [ 679.910878][ T9073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.289806][ T7920] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.686272][ T9085] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 681.410018][ T9100] netlink: 'syz.6.561': attribute type 2 has an invalid length. [ 682.975202][ T9104] input: syz1 as /devices/virtual/input/input16 [ 683.031623][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.8.553'. [ 686.787159][ T9135] netlink: 48 bytes leftover after parsing attributes in process `syz.8.557'. [ 690.033840][ T9147] loop6: detected capacity change from 0 to 16 [ 690.341598][ T9147] erofs: (device loop6): mounted with root inode @ nid 36. [ 690.355658][ T9145] syz.6.568: attempt to access beyond end of device [ 690.355658][ T9145] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 690.440379][ T9145] syz.6.568: attempt to access beyond end of device [ 690.440379][ T9145] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 690.454308][ T9145] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 690.553999][ T28] audit: type=1800 audit(1778850672.271:349): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.568" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 693.466093][ T9173] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 696.541714][ T9181] input: syz1 as /devices/virtual/input/input17 [ 696.599529][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.567'. [ 700.569775][ T9203] tipc: Started in network mode [ 700.574779][ T9203] tipc: Node identity ac14140f, cluster identity 4711 [ 700.582738][ T9203] tipc: New replicast peer: 255.255.255.255 [ 700.590110][ T9203] tipc: Enabled bearer , priority 10 [ 700.604710][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.572'. [ 703.386707][ T8] tipc: Node number set to 2886997007 [ 707.072846][ T5807] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 707.376862][ T5807] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.431088][ T5807] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 707.504027][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.595973][ T5807] usb 8-1: config 0 descriptor?? [ 707.693850][ T5807] usb 8-1: bad CDC descriptors [ 707.766118][ T5807] usb 8-1: bad CDC descriptors [ 710.843903][ T9240] loop6: detected capacity change from 0 to 512 [ 710.879736][ T9240] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 710.899639][ T8] usb 8-1: USB disconnect, device number 5 [ 711.068126][ T8815] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 711.804550][ T9256] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 713.643730][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.650716][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.828065][ T7733] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 713.987338][ T9265] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 714.079871][ T9265] overlayfs: failed to look up (tracing) for ino (-66) [ 714.143537][ T7733] usb 7-1: Using ep0 maxpacket: 32 [ 714.920541][ T7733] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 714.931789][ T7733] usb 7-1: config 0 has no interface number 0 [ 714.937995][ T7733] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 714.948026][ T7733] usb 7-1: config 0 interface 89 has no altsetting 0 [ 714.960315][ T7733] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 714.969480][ T7733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.006959][ T7733] usb 7-1: Product: syz [ 715.014900][ T7733] usb 7-1: Manufacturer: syz [ 715.020236][ T7733] usb 7-1: SerialNumber: syz [ 715.028691][ T7733] usb 7-1: config 0 descriptor?? [ 715.048389][ T7733] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 715.076734][ T7733] em28xx 7-1:0.89: Video interface 89 found: [ 715.613102][ T9275] loop7: detected capacity change from 0 to 1024 [ 716.679543][ T7733] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 716.725863][ T2980] hfsplus: b-tree write err: -5, ino 25 [ 716.887530][ T7733] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 716.895352][ T2980] hfsplus: b-tree write err: -5, ino 4 [ 716.896564][ T7733] em28xx 7-1:0.89: board has no eeprom [ 716.990706][ T7733] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 716.998224][ T7733] em28xx 7-1:0.89: analog set to bulk mode. [ 717.008389][ T5809] em28xx 7-1:0.89: Registering V4L2 extension [ 717.074197][ T7733] usb 7-1: USB disconnect, device number 3 [ 717.081275][ T7733] em28xx 7-1:0.89: Disconnecting em28xx [ 717.081495][ T2980] hfsplus: b-tree write err: -5, ino 2 [ 717.493273][ T5809] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 717.531524][ T5809] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 717.600055][ T5809] em28xx 7-1:0.89: No AC97 audio processor [ 717.655824][ T5809] usb 7-1: Decoder not found [ 717.684388][ T5809] em28xx 7-1:0.89: failed to create media graph [ 717.926900][ T5809] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 717.944040][ T5809] em28xx 7-1:0.89: Registering snapshot button... [ 717.966252][ T5809] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input18 [ 719.257959][ T9292] loop7: detected capacity change from 0 to 16 [ 719.654029][ T9292] erofs: (device loop7): mounted with root inode @ nid 36. [ 719.710113][ T9292] ip6tnl1: entered allmulticast mode [ 719.843360][ T6157] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.026912][ T5809] em28xx 7-1:0.89: Remote control support is not available for this card. [ 720.051487][ T5808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.069207][ T6157] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.124699][ T7733] em28xx 7-1:0.89: Closing input extension [ 720.302920][ T7733] em28xx 7-1:0.89: Deregistering snapshot button [ 720.507891][ T7733] em28xx 7-1:0.89: Freeing device [ 720.551887][ T9300] loop6: detected capacity change from 0 to 16 [ 720.641463][ T5808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.651353][ T9300] erofs: (device loop6): mounted with root inode @ nid 36. [ 720.672910][ T9300] syz.6.589: attempt to access beyond end of device [ 720.672910][ T9300] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 720.692641][ T9300] syz.6.589: attempt to access beyond end of device [ 720.692641][ T9300] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 720.708284][ T9300] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 720.773658][ T28] audit: type=1800 audit(1778850700.579:350): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.589" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 722.527241][ T5809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 722.868078][ T5809] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 723.462963][ T5809] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.570318][ T5809] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 723.698993][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.759487][ T5809] usb 8-1: config 0 descriptor?? [ 723.768310][ T5809] usb 8-1: can't set config #0, error -71 [ 723.786981][ T5809] usb 8-1: USB disconnect, device number 6 [ 724.438931][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 724.450674][ T9323] loop8: detected capacity change from 0 to 512 [ 725.361114][ T9323] EXT4-fs (loop8): 1 truncate cleaned up [ 725.368318][ T9323] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.344090][ T8755] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.916204][ T9337] loop8: detected capacity change from 0 to 1024 [ 729.647215][ T9343] loop6: detected capacity change from 0 to 32768 [ 730.043657][ T9343] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 730.253441][ T59] hfsplus: b-tree write err: -5, ino 25 [ 730.259438][ T59] hfsplus: b-tree write err: -5, ino 4 [ 730.314373][ T59] hfsplus: b-tree write err: -5, ino 2 [ 730.337182][ T9343] XFS (loop6): Ending clean mount [ 730.403359][ T9343] XFS (loop6): Quotacheck needed: Please wait. [ 730.554848][ T9343] XFS (loop6): Quotacheck: Done. [ 731.107003][ T8] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 731.139173][ T28] audit: type=1800 audit(1778850710.199:351): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.596" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4427 res=0 errno=0 [ 731.484290][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 731.525971][ T8] usb 9-1: not running at top speed; connect to a high speed hub [ 731.585364][ T8] usb 9-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 731.602664][ T7920] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 731.645650][ T8] usb 9-1: config 1 interface 0 has no altsetting 0 [ 731.688133][ T8] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.760461][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.805227][ T8] usb 9-1: Product: ᐁ [ 731.809478][ T8] usb 9-1: Manufacturer: у [ 731.829000][ T8] usb 9-1: SerialNumber: syz [ 731.998939][ T9359] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 732.817561][ T8] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 732.835331][ T8] usb 9-1: USB disconnect, device number 2 [ 733.757155][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 734.024564][ T9380] loop7: detected capacity change from 0 to 16 [ 734.853301][ T9380] erofs: (device loop7): mounted with root inode @ nid 36. [ 734.871436][ T9379] syz.7.600: attempt to access beyond end of device [ 734.871436][ T9379] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 734.898230][ T9379] syz.7.600: attempt to access beyond end of device [ 734.898230][ T9379] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 734.912225][ T9379] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 734.923615][ T28] audit: type=1800 audit(1778850713.867:352): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.600" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 735.336004][ T9392] loop6: detected capacity change from 0 to 16 [ 736.394492][ T9392] erofs: (device loop6): mounted with root inode @ nid 36. [ 736.409547][ T9390] syz.6.599: attempt to access beyond end of device [ 736.409547][ T9390] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 736.427946][ T9390] syz.6.599: attempt to access beyond end of device [ 736.427946][ T9390] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 736.441809][ T9390] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 736.453868][ T28] audit: type=1800 audit(1778850715.299:353): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.599" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 737.244738][ T9399] loop7: detected capacity change from 0 to 512 [ 737.675972][ T9399] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 739.025595][ T9410] loop6: detected capacity change from 0 to 1024 [ 739.096738][ T9412] loop7: detected capacity change from 0 to 512 [ 739.313198][ T9412] EXT4-fs (loop7): 1 truncate cleaned up [ 739.321230][ T9412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.006801][ T2117] hfsplus: b-tree write err: -5, ino 25 [ 741.012663][ T2117] hfsplus: b-tree write err: -5, ino 4 [ 741.061307][ T2117] hfsplus: b-tree write err: -5, ino 2 [ 742.801922][ T9432] loop6: detected capacity change from 0 to 8 [ 742.836518][ T9432] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 742.875633][ T9432] cramfs: empty filesystem [ 742.905116][ T8815] udevd[8815]: incorrect cramfs checksum on /dev/loop6 [ 742.963665][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.607'. [ 742.971454][ T8815] udevd[8815]: incorrect cramfs checksum on /dev/loop6 [ 742.990182][ T9432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.011133][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.044142][ T9432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.051632][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.266045][ T8815] udevd[8815]: incorrect cramfs checksum on /dev/loop6 [ 744.081029][ T7733] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 744.098997][ T8280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.295467][ T9446] loop5: detected capacity change from 0 to 1024 [ 744.301223][ T7733] usb 7-1: unable to get BOS descriptor or descriptor too short [ 744.482508][ T7733] usb 7-1: not running at top speed; connect to a high speed hub [ 744.539176][ T9451] loop7: detected capacity change from 0 to 16 [ 744.845688][ T9451] erofs: (device loop7): mounted with root inode @ nid 36. [ 744.864582][ T9451] syz.7.610: attempt to access beyond end of device [ 744.864582][ T9451] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 746.321638][ T6146] hfsplus: b-tree write err: -5, ino 25 [ 746.343320][ T6146] hfsplus: b-tree write err: -5, ino 4 [ 746.346100][ T7733] usb 7-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 746.370959][ T6146] hfsplus: b-tree write err: -5, ino 2 [ 746.372321][ T7733] usb 7-1: config 1 interface 0 has no altsetting 0 [ 746.468228][ T28] audit: type=1800 audit(1778850724.629:354): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.610" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 746.493103][ T7733] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.506712][ T7733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.514989][ T7733] usb 7-1: Product: ᐁ [ 746.537902][ T7733] usb 7-1: Manufacturer: у [ 746.542496][ T7733] usb 7-1: SerialNumber: syz [ 746.597793][ T9439] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 747.234586][ T9468] loop8: detected capacity change from 0 to 512 [ 748.400225][ T9468] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 750.272480][ T7733] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 750.295771][ T7733] usb 7-1: USB disconnect, device number 4 [ 750.855060][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 755.051707][ T9501] loop7: detected capacity change from 0 to 16 [ 755.111055][ T9501] erofs: (device loop7): mounted with root inode @ nid 36. [ 756.507164][ T9500] syz.7.618: attempt to access beyond end of device [ 756.507164][ T9500] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 756.777349][ T28] audit: type=1800 audit(1778850734.230:355): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.618" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 758.287953][ T9506] loop6: detected capacity change from 0 to 16 [ 758.320947][ T9506] erofs: (device loop6): mounted with root inode @ nid 36. [ 758.339723][ T9505] syz.6.621: attempt to access beyond end of device [ 758.339723][ T9505] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 758.369995][ T9505] syz.6.621: attempt to access beyond end of device [ 758.369995][ T9505] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 758.385096][ T9505] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 758.407164][ T28] audit: type=1800 audit(1778850735.830:356): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.621" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 758.449035][ T9511] Bluetooth: MGMT ver 1.22 [ 758.460977][ T9511] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 759.031706][ T9518] loop5: detected capacity change from 0 to 16 [ 759.131365][ T9518] erofs: (device loop5): mounted with root inode @ nid 36. [ 759.150373][ T9518] syz.5.622: attempt to access beyond end of device [ 759.150373][ T9518] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 759.190950][ T9518] syz.5.622: attempt to access beyond end of device [ 759.190950][ T9518] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 759.205908][ T9518] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 759.241763][ T28] audit: type=1800 audit(1778850736.597:357): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.622" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 760.038821][ T9528] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 760.108905][ T9528] overlayfs: failed to look up (tracing) for ino (-66) [ 760.269543][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 769.576659][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 769.725807][ T9572] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 770.610102][ T9576] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 770.872148][ T9576] netlink: 'syz.8.636': attribute type 10 has an invalid length. [ 770.956326][ T9576] team0: Port device dummy0 added [ 770.992329][ T9579] netlink: 'syz.8.636': attribute type 10 has an invalid length. [ 771.016413][ T9579] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 771.115929][ T9579] team0: Failed to send options change via netlink (err -105) [ 771.123728][ T9579] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 771.158881][ T9579] team0: Port device dummy0 removed [ 771.183359][ T9579] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 772.813780][ T9599] loop6: detected capacity change from 0 to 16 [ 774.079953][ T9602] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 774.168104][ T9602] overlayfs: failed to look up (tracing) for ino (-66) [ 774.726246][ T9599] erofs: (device loop6): erofs_read_superblock: cannot read erofs superblock [ 776.995804][ T9615] loop6: detected capacity change from 0 to 16 [ 778.227842][ T9615] erofs: (device loop6): mounted with root inode @ nid 36. [ 778.246448][ T9613] syz.6.648: attempt to access beyond end of device [ 778.246448][ T9613] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 778.287250][ T9613] syz.6.648: attempt to access beyond end of device [ 778.287250][ T9613] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 778.302907][ T9613] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 778.315351][ T28] audit: type=1800 audit(1778850754.481:358): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.648" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 778.716941][ T9623] loop7: detected capacity change from 0 to 16 [ 778.754445][ T9623] erofs: (device loop7): mounted with root inode @ nid 36. [ 778.781771][ T9623] syz.7.642: attempt to access beyond end of device [ 778.781771][ T9623] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 778.938294][ T9623] syz.7.642: attempt to access beyond end of device [ 778.938294][ T9623] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 778.954670][ T9623] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 778.999720][ T28] audit: type=1800 audit(1778850755.080:359): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.642" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 779.037645][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 779.308446][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 779.314891][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 785.050241][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 791.405782][ T9699] loop5: detected capacity change from 0 to 16 [ 791.523452][ T9699] erofs: (device loop5): mounted with root inode @ nid 36. [ 791.534498][ T9699] syz.5.654: attempt to access beyond end of device [ 791.534498][ T9699] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 792.359775][ T28] audit: type=1800 audit(1778850767.441:360): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.654" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 792.711933][ T5818] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 792.934979][ T9705] loop5: detected capacity change from 0 to 512 [ 792.950430][ T5818] usb 8-1: no configurations [ 792.956533][ T5818] usb 8-1: can't read configurations, error -22 [ 793.000862][ T9705] FAT-fs (loop5): Directory bread(block 199916) failed [ 793.008415][ T9705] FAT-fs (loop5): Directory bread(block 199917) failed [ 793.053796][ T9705] FAT-fs (loop5): Directory bread(block 199918) failed [ 793.083290][ T9705] FAT-fs (loop5): Directory bread(block 199919) failed [ 793.104877][ T9705] FAT-fs (loop5): Directory bread(block 199920) failed [ 793.126466][ T9705] FAT-fs (loop5): Directory bread(block 199921) failed [ 793.172201][ T5818] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 794.817117][ T9705] FAT-fs (loop5): Directory bread(block 199922) failed [ 794.900333][ T9705] FAT-fs (loop5): Directory bread(block 199923) failed [ 795.701071][ T9716] FAT-fs (loop5): FAT read failed (blocknr 128) [ 796.071683][ T9718] loop6: detected capacity change from 0 to 16 [ 796.292133][ T9718] erofs: (device loop6): mounted with root inode @ nid 36. [ 796.410255][ T9717] ip6tnl1: entered allmulticast mode [ 797.927243][ T5761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 797.960131][ T2980] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 797.967937][ T2980] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 798.290435][ T5818] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 798.386307][ T5761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.993197][ T9741] loop8: detected capacity change from 0 to 128 [ 802.046790][ T9741] FAT-fs (loop8): Unrecognized mount option "fmask=00000000000000003Oojnonumtail=0" or missing value [ 802.243981][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 803.670255][ T9755] loop6: detected capacity change from 0 to 16 [ 803.687077][ T9755] erofs: (device loop6): mounted with root inode @ nid 36. [ 803.697202][ T9755] syz.6.664: attempt to access beyond end of device [ 803.697202][ T9755] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 804.238857][ T9755] syz.6.664: attempt to access beyond end of device [ 804.238857][ T9755] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 804.239191][ T9755] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 804.239533][ T28] audit: type=1800 audit(1778850778.727:361): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.664" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 804.474827][ T8757] Bluetooth: hci1: command 0x0406 tx timeout [ 805.815708][ T9770] loop7: detected capacity change from 0 to 1024 [ 808.320876][ T6131] hfsplus: b-tree write err: -5, ino 25 [ 809.314684][ T6131] hfsplus: b-tree write err: -5, ino 4 [ 809.336640][ T6131] hfsplus: b-tree write err: -5, ino 2 [ 809.612952][ T9785] loop7: detected capacity change from 0 to 512 [ 809.672616][ T9785] FAT-fs (loop7): Directory bread(block 199916) failed [ 810.365311][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 811.300636][ T9785] FAT-fs (loop7): Directory bread(block 199917) failed [ 811.352318][ T9785] FAT-fs (loop7): Directory bread(block 199918) failed [ 811.446565][ T9785] FAT-fs (loop7): Directory bread(block 199919) failed [ 811.459587][ T9785] FAT-fs (loop7): Directory bread(block 199920) failed [ 813.088356][ T9785] FAT-fs (loop7): Directory bread(block 199921) failed [ 813.097391][ T9785] FAT-fs (loop7): Directory bread(block 199922) failed [ 813.123809][ T9785] FAT-fs (loop7): Directory bread(block 199923) failed [ 813.274721][ T9805] loop5: detected capacity change from 0 to 16 [ 813.293972][ T9805] erofs: (device loop5): mounted with root inode @ nid 36. [ 813.308308][ T9805] syz.5.672: attempt to access beyond end of device [ 813.308308][ T9805] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 813.341801][ T9805] syz.5.672: attempt to access beyond end of device [ 813.341801][ T9805] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 813.355789][ T9805] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 813.367114][ T28] audit: type=1800 audit(1778850787.271:362): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.672" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 813.587663][ T9810] random: crng reseeded on system resumption [ 813.795030][ T8] IPVS: starting estimator thread 0... [ 813.923834][ T9817] IPVS: using max 18 ests per chain, 43200 per kthread [ 814.286161][ T9825] loop5: detected capacity change from 0 to 16 [ 814.309969][ T9825] erofs: (device loop5): mounted with root inode @ nid 36. [ 814.326852][ T9825] syz.5.676: attempt to access beyond end of device [ 814.326852][ T9825] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 814.355733][ T9825] syz.5.676: attempt to access beyond end of device [ 814.355733][ T9825] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 814.369550][ T9825] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 814.382054][ T28] audit: type=1800 audit(1778850788.216:363): pid=9825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.676" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 815.391972][ T9833] loop6: detected capacity change from 0 to 1024 [ 815.471516][ T9835] loop5: detected capacity change from 0 to 1024 [ 816.458119][ T48] hfsplus: b-tree write err: -5, ino 25 [ 816.464071][ T48] hfsplus: b-tree write err: -5, ino 4 [ 816.472472][ T48] hfsplus: b-tree write err: -5, ino 2 [ 816.554109][ T48] hfsplus: b-tree write err: -5, ino 25 [ 816.560068][ T48] hfsplus: b-tree write err: -5, ino 4 [ 816.565976][ T48] hfsplus: b-tree write err: -5, ino 2 [ 823.622088][ T9876] loop8: detected capacity change from 0 to 16 [ 825.990532][ T9876] erofs: (device loop8): erofs_read_superblock: cannot read erofs superblock [ 826.085190][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 826.113432][ T9866] netlink: 'syz.5.685': attribute type 10 has an invalid length. [ 826.243695][ T9866] team0: Port device dummy0 added [ 826.275839][ T9886] loop8: detected capacity change from 0 to 128 [ 826.282449][ T9873] netlink: 'syz.5.685': attribute type 10 has an invalid length. [ 826.336251][ T9873] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 826.376152][ T9886] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 826.391110][ T9890] loop6: detected capacity change from 0 to 16 [ 826.424920][ T9890] erofs: (device loop6): mounted with root inode @ nid 36. [ 826.434844][ T9890] syz.6.686: attempt to access beyond end of device [ 826.434844][ T9890] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 826.471415][ T9890] syz.6.686: attempt to access beyond end of device [ 826.471415][ T9890] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 826.481223][ T9886] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 826.485870][ T9890] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 826.528329][ T28] audit: type=1800 audit(1778850799.586:364): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.686" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 826.764907][ T9873] team0: Port device dummy0 removed [ 826.784577][ T9873] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 827.916517][ T9892] process 'syz.8.688' launched './file1' with NULL argv: empty string added [ 828.393255][ T9897] Error parsing options; rc = [-22] [ 829.464267][ T9899] loop5: detected capacity change from 0 to 1024 [ 829.763220][ T8755] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 830.101239][ T6146] hfsplus: b-tree write err: -5, ino 25 [ 830.135184][ T6146] hfsplus: b-tree write err: -5, ino 4 [ 830.156890][ T6146] hfsplus: b-tree write err: -5, ino 2 [ 831.409464][ T9911] loop8: detected capacity change from 0 to 16 [ 831.418079][ T9911] erofs: (device loop8): mounted with root inode @ nid 36. [ 831.427498][ T9911] syz.8.695: attempt to access beyond end of device [ 831.427498][ T9911] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 831.444264][ T9911] syz.8.695: attempt to access beyond end of device [ 831.444264][ T9911] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 831.459037][ T9911] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 831.474156][ T28] audit: type=1800 audit(1778850804.218:365): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.695" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 834.509813][ T9921] loop7: detected capacity change from 0 to 16 [ 834.566102][ T9921] erofs: (device loop7): mounted with root inode @ nid 36. [ 834.578164][ T9921] syz.7.687: attempt to access beyond end of device [ 834.578164][ T9921] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 834.615958][ T9921] syz.7.687: attempt to access beyond end of device [ 834.615958][ T9921] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 834.630340][ T9921] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 835.075371][ T28] audit: type=1800 audit(1778850807.185:366): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.687" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 835.576232][ T9923] loop7: detected capacity change from 0 to 64 [ 837.405230][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.8.700'. [ 837.600310][ T9928] loop8: detected capacity change from 0 to 1024 [ 837.613808][ T9928] hfsplus: unable to change nls mapping [ 837.619735][ T9928] hfsplus: unable to parse mount options [ 838.456848][ T8815] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 840.592276][ T9931] netlink: 'syz.7.699': attribute type 10 has an invalid length. [ 840.606037][ T9937] loop6: detected capacity change from 0 to 1024 [ 841.192289][ T9931] team0: Port device dummy0 added [ 841.231714][ T9935] netlink: 'syz.7.699': attribute type 10 has an invalid length. [ 841.405893][ T9935] team0: Port device dummy0 removed [ 841.418519][ T9935] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 841.430004][ T9941] random: crng reseeded on system resumption [ 841.622225][ T6128] hfsplus: b-tree write err: -5, ino 25 [ 841.628097][ T6128] hfsplus: b-tree write err: -5, ino 4 [ 841.643650][ T6128] hfsplus: b-tree write err: -5, ino 2 [ 843.409588][ T9953] loop6: detected capacity change from 0 to 16 [ 843.429479][ T9953] erofs: (device loop6): mounted with root inode @ nid 36. [ 843.439884][ T9953] syz.6.705: attempt to access beyond end of device [ 843.439884][ T9953] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 843.465869][ T9953] syz.6.705: attempt to access beyond end of device [ 843.465869][ T9953] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 843.480688][ T9953] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 843.496410][ T28] audit: type=1800 audit(1778850815.467:367): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.705" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 845.362142][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 845.369347][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.129020][ T9963] loop7: detected capacity change from 0 to 16 [ 846.145747][ T9963] erofs: (device loop7): mounted with root inode @ nid 36. [ 846.156007][ T9963] syz.7.706: attempt to access beyond end of device [ 846.156007][ T9963] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 846.171734][ T9963] syz.7.706: attempt to access beyond end of device [ 846.171734][ T9963] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 846.185538][ T9963] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 846.196829][ T28] audit: type=1800 audit(1778850818.003:368): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.706" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 848.679694][ T9972] loop5: detected capacity change from 0 to 256 [ 848.726977][ T9972] exFAT-fs (loop5): error, The cluster chain has a loop [ 848.737539][ T9972] exFAT-fs (loop5): Filesystem has been set read-only [ 848.747807][ T9972] exFAT-fs (loop5): failed to count the number of clusters in root [ 848.861927][ T968] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 848.877155][ T9976] loop6: detected capacity change from 0 to 16 [ 849.044269][ T9976] erofs: (device loop6): mounted with root inode @ nid 36. [ 849.051657][ T9972] exFAT-fs (loop5): failed to recognize exfat type [ 849.070255][ T9974] syz.6.715: attempt to access beyond end of device [ 849.070255][ T9974] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 849.102471][ T9974] syz.6.715: attempt to access beyond end of device [ 849.102471][ T9974] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 849.118584][ T9974] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 849.132338][ T28] audit: type=1800 audit(1778850820.745:369): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.715" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 850.004218][ T968] usb 9-1: unable to get BOS descriptor or descriptor too short [ 850.021269][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 850.741365][ T968] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 850.749149][ T968] usb 9-1: can't read configurations, error -71 [ 852.954826][ T9991] loop6: detected capacity change from 0 to 1024 [ 854.178444][ T6155] hfsplus: b-tree write err: -5, ino 25 [ 854.192294][ T6155] hfsplus: b-tree write err: -5, ino 4 [ 854.241539][ T6155] hfsplus: b-tree write err: -5, ino 2 [ 854.612386][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.6.717'. [ 854.622125][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.717'. [ 854.631020][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.6.717'. [ 856.860315][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 857.512759][ C1] ------------[ cut here ]------------ [ 857.518732][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 857.528564][ C1] Modules linked in: [ 857.532502][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 857.539607][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 857.549833][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 857.556250][ C1] Code: 24 4c 89 e7 e8 fe 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ed b2 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 857.575965][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 857.582119][ C1] RAX: ffffffff8a046f13 RBX: ffffffff8a045d16 RCX: ffff88801c263c00 [ 857.590254][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 857.598302][ C1] RBP: 0000000000000000 R08: ffff88801c263c00 R09: 0000000000000003 [ 857.606314][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880650ae3c0 [ 857.614364][ C1] R13: dffffc0000000000 R14: ffff8880650ae8b0 R15: ffff88805ca50824 [ 857.622412][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 857.631467][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 857.638098][ C1] CR2: 00007f9236b85fc0 CR3: 000000002bedd000 CR4: 00000000003506e0 [ 857.646261][ C1] Call Trace: [ 857.649585][ C1] [ 857.652504][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 857.658124][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 857.663686][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 857.670517][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 857.676170][ C1] __iterate_interfaces+0x243/0x500 [ 857.681443][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 857.687768][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 857.695048][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 857.701346][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 857.708461][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 857.713804][ C1] __hrtimer_run_queues+0x520/0xc40 [ 857.719114][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 857.725217][ C1] ? hw_scan_work+0xf60/0xf60 [ 857.730434][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 857.735599][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 857.741766][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 857.746943][ C1] handle_softirqs+0x280/0x820 [ 857.751804][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 857.756615][ C1] ? do_softirq+0x1a0/0x1a0 [ 857.761204][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 857.766542][ C1] __irq_exit_rcu+0xd3/0x190 [ 857.771243][ C1] ? irq_exit_rcu+0x20/0x20 [ 857.775826][ C1] irq_exit_rcu+0x9/0x20 [ 857.780228][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 857.785908][ C1] [ 857.788872][ C1] [ 857.791871][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 857.797899][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 857.803616][ C1] Code: 19 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 d3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 857.823307][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 857.829516][ C1] RAX: fc019b33d931db00 RBX: ffffffff8162aa0d RCX: fc019b33d931db00 [ 857.837569][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 857.845622][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 857.853749][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 857.861812][ C1] R13: dffffc0000000000 R14: 1ffff1100384c780 R15: 0000000000000000 [ 857.869870][ C1] ? do_idle+0x33d/0x590 [ 857.874174][ C1] default_idle+0x13/0x20 [ 857.878583][ C1] default_idle_call+0x6c/0xa0 [ 857.883391][ C1] do_idle+0x33d/0x590 [ 857.887545][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 857.892785][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 857.898157][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 857.903936][ C1] cpu_startup_entry+0x43/0x60 [ 857.908862][ C1] start_secondary+0xee/0xf0 [ 857.913492][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 857.919664][ C1] [ 857.922807][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 857.930203][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 857.937482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 857.947659][ C1] Call Trace: [ 857.950974][ C1] [ 857.953849][ C1] dump_stack_lvl+0x18c/0x250 [ 857.958574][ C1] ? show_regs_print_info+0x20/0x20 [ 857.963821][ C1] ? load_image+0x420/0x420 [ 857.968383][ C1] panic+0x2dc/0x730 [ 857.972326][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 857.976872][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 857.983161][ C1] __warn+0x2e0/0x470 [ 857.987174][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 857.992935][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 857.998696][ C1] report_bug+0x2be/0x4f0 [ 858.003052][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 858.008837][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 858.014625][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 858.020408][ C1] handle_bug+0xcf/0x120 [ 858.024682][ C1] exc_invalid_op+0x1a/0x50 [ 858.029218][ C1] asm_exc_invalid_op+0x1a/0x20 [ 858.034104][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 858.040474][ C1] Code: 24 4c 89 e7 e8 fe 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ed b2 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 858.060207][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 858.066393][ C1] RAX: ffffffff8a046f13 RBX: ffffffff8a045d16 RCX: ffff88801c263c00 [ 858.074395][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 858.082482][ C1] RBP: 0000000000000000 R08: ffff88801c263c00 R09: 0000000000000003 [ 858.090482][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880650ae3c0 [ 858.098486][ C1] R13: dffffc0000000000 R14: ffff8880650ae8b0 R15: ffff88805ca50824 [ 858.106494][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 858.112077][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 858.117843][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 858.123605][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 858.129209][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 858.134725][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 858.141542][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 858.147145][ C1] __iterate_interfaces+0x243/0x500 [ 858.152390][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 858.157384][T10011] loop7: detected capacity change from 0 to 1024 [ 858.165007][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 858.172264][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 858.178566][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 858.185654][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 858.190908][ C1] __hrtimer_run_queues+0x520/0xc40 [ 858.196238][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 858.202261][ C1] ? hw_scan_work+0xf60/0xf60 [ 858.206994][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 858.212150][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 858.218343][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 858.223498][ C1] handle_softirqs+0x280/0x820 [ 858.228312][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 858.233121][ C1] ? do_softirq+0x1a0/0x1a0 [ 858.237672][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 858.242932][ C1] __irq_exit_rcu+0xd3/0x190 [ 858.247562][ C1] ? irq_exit_rcu+0x20/0x20 [ 858.252111][ C1] irq_exit_rcu+0x9/0x20 [ 858.256388][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 858.262057][ C1] [ 858.265018][ C1] [ 858.267975][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 858.273994][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 858.279664][ C1] Code: 19 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 d3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 858.299300][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 858.305379][ C1] RAX: fc019b33d931db00 RBX: ffffffff8162aa0d RCX: fc019b33d931db00 [ 858.313361][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 858.321350][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 858.329415][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 858.337396][ C1] R13: dffffc0000000000 R14: 1ffff1100384c780 R15: 0000000000000000 [ 858.345379][ C1] ? do_idle+0x33d/0x590 [ 858.349647][ C1] default_idle+0x13/0x20 [ 858.353990][ C1] default_idle_call+0x6c/0xa0 [ 858.358783][ C1] do_idle+0x33d/0x590 [ 858.362877][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 858.368087][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 858.373302][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 858.379044][ C1] cpu_startup_entry+0x43/0x60 [ 858.383845][ C1] start_secondary+0xee/0xf0 [ 858.388535][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 858.394914][ C1] [ 858.398271][ C1] Kernel Offset: disabled [ 858.402636][ C1] Rebooting in 86400 seconds..