last executing test programs: 15m45.325889752s ago: executing program 0 (id=1): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r6 = msgget$private(0x0, 0x790) msgsnd(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x12f, 0x0) msgrcv(r6, 0x0, 0x0, 0x0, 0x1800) msgctl$MSG_STAT_ANY(r6, 0xd, &(0x7f0000000000)=""/29) msgrcv(r6, 0x0, 0x0, 0x0, 0x3800) ppoll(&(0x7f0000000180)=[{r1, 0x4020}], 0x1, 0x0, &(0x7f0000000300)={[0xf]}, 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 15m44.120001331s ago: executing program 0 (id=6): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x14) setrlimit(0xb, &(0x7f00000001c0)={0xfffffffffffffff8, 0x17168abc}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 15m42.772942812s ago: executing program 0 (id=7): r0 = syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000007f40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704acf07fbfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd652932611d6c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x5, 0x483, &(0x7f0000000580)="$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") r1 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x402, 0x8000002, 0x3d7}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1200001, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d63703836392c63726561746f723df8f080672c636f6465706167653d63703737352c71756965742c71756965742c71756965742c756d61736b3d30303030303030303030303030303030303030343030302c007ec0212425aaf2e6bac53117b7492104059db6d7d1c9d07da4c1f091f7c738a75d2b63d07a65023e23f84023258dca5ecc2b67f985f6ec8e373807ae61c8c58b9afda749e1c20e99165d8f24e2b70d7e1e871893dda8bc57be68bdd580bcaa9feba1e45408a82a9ef2e6b62300d9376ba0eab3c96c6c7d73fb20bec785fc56327cb538c2ba0b546713070f577dd950bd84e673a6e466a8ecb9873ef739fd3df1920215b380a028e62f5ab56864847591ce8faa15dec86998e4627d9c75205cb4b46c4b7d9a2ba68fe656d4878e17c9f896a03d8f4a0af5064b5f0481584334"], 0x0, 0x33c, &(0x7f0000001f80)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x3}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) close_range(r1, 0xffffffffffffffff, 0x0) r7 = creat(0x0, 0x0) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) 15m42.494649954s ago: executing program 4 (id=5): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') read$FUSE(r0, &(0x7f0000003600)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2}, 0x94) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x5adae000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d, 0xfffffffffffffffe}}], 0x48}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x94}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x8, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) 15m38.802745892s ago: executing program 4 (id=8): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240), 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) write$tcp_congestion(r1, &(0x7f00000000c0)='hybla\x00', 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000b40)=""/155, 0x9b}], 0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 15m37.33169838s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xff59, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) 15m36.834362579s ago: executing program 4 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mknodat$null(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x100, 0x103) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000140)={0x6, 0x56a5af16, 0x7, 0xa, 0x9, 0x2}) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 15m33.184779173s ago: executing program 4 (id=13): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x1ff, 0x10000, 0x3, 0x8800, 0x1, 0x17, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x100, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='geneve0\x00', 0x2, 0x3, 0x80}) syz_emit_ethernet(0x86, &(0x7f0000000480)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x36c4, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/204, 0xcc}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r5, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000200)='~', 0xf5) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000001180)) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0", 0x26, 0x11, 0x0, 0x0) 15m24.214456245s ago: executing program 4 (id=22): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="08000000001f009e", 0x8}, {0x0}], 0x2}}], 0x2, 0x4044800) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)={0x4000c0, 0x0, 0x14}, 0x18) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x4, 0x1002, 0x5, 0x8, 0x1, 0x6, 0xb, 0x2000001, 0x1a44b, 0x3, 0x40102003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0x191fa504, 0x8, 0x5, 0x3, 0xfffffff8]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006001000a304000014000300"/56], 0x50}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6c58b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r10, &(0x7f00000002c0)="14043600d3fc03fc01004788031c09100628", 0x12, 0x48000, &(0x7f0000000140)={0x11, 0x11, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000240)}, 0x20) writev(r9, &(0x7f0000000040)=[{&(0x7f00000009c0)="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", 0x18f}], 0x1) poll(&(0x7f0000000140)=[{r3, 0x1000}], 0x1, 0x8) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x1, 0x800) 15m21.453558229s ago: executing program 32 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xff59, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) 15m8.769170073s ago: executing program 33 (id=22): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="08000000001f009e", 0x8}, {0x0}], 0x2}}], 0x2, 0x4044800) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)={0x4000c0, 0x0, 0x14}, 0x18) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x4, 0x1002, 0x5, 0x8, 0x1, 0x6, 0xb, 0x2000001, 0x1a44b, 0x3, 0x40102003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0x191fa504, 0x8, 0x5, 0x3, 0xfffffff8]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006001000a304000014000300"/56], 0x50}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6c58b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r10, &(0x7f00000002c0)="14043600d3fc03fc01004788031c09100628", 0x12, 0x48000, &(0x7f0000000140)={0x11, 0x11, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000240)}, 0x20) writev(r9, &(0x7f0000000040)=[{&(0x7f00000009c0)="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", 0x18f}], 0x1) poll(&(0x7f0000000140)=[{r3, 0x1000}], 0x1, 0x8) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x1, 0x800) 3m13.293103957s ago: executing program 6 (id=3057): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_require}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 3m13.09118249s ago: executing program 6 (id=3063): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000500)={0x4, 0x100000, 0x0, 0xfffffffffffffffd, 0xffffffff}) 3m12.813768307s ago: executing program 6 (id=3068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0xfe, 0xfffe}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) close(0x3) 3m12.281809015s ago: executing program 6 (id=3078): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183442, 0x118) pwrite64(r1, &(0x7f0000000540)='2', 0xfdef, 0xe7c) 3m11.280408267s ago: executing program 6 (id=3093): mq_open(0x0, 0x42, 0x1f0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 3m10.660176422s ago: executing program 6 (id=3097): mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x3, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 3m10.210175484s ago: executing program 34 (id=3097): mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x3, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 11.545650888s ago: executing program 3 (id=4141): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000640)={0x2c, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7c}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x4, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x578, &(0x7f0000000c00)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 11.327021451s ago: executing program 7 (id=4143): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700d781bd24fd", @ANYBLOB="0200"/14, @ANYBLOB="030000000500000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.319795307s ago: executing program 5 (id=4144): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0a, &(0x7f0000001040)="$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") socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000001514a19d0000006855768c10b5f89500004d14ff2d5f19"], 0x10}}, 0x0) 9.703464912s ago: executing program 3 (id=4148): bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1}) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x8000000000003, 0x10000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 9.59560034s ago: executing program 7 (id=4149): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x8020000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 8.541256152s ago: executing program 5 (id=4150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r3 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000001280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000040)="f550b36301e9a32630461b1edea61a15dc8e30c9", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 8.541027357s ago: executing program 2 (id=4151): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x0, {0x2, 0x0, @private=0xa010102}, 'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) open(&(0x7f0000000180)='./bus\x00', 0x16b37e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x16, 0x0, 0x0, 0x0, [@sadb_key={0xc, 0x8, 0x298, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e07"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xb0}, 0x1, 0x7}, 0x0) 8.540267974s ago: executing program 7 (id=4152): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x2fa, 0xf400, 0x0, 0x0, 0x0) 7.271506403s ago: executing program 3 (id=4153): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 7.06038172s ago: executing program 1 (id=4154): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 6.866997685s ago: executing program 5 (id=4155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 6.866398107s ago: executing program 2 (id=4156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000700)=@sack_info={r6, 0x2, 0x6}, &(0x7f0000000740)=0xc) 6.787335226s ago: executing program 7 (id=4157): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) close_range(0xffffffffffffffff, r0, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000160033060000000000000080e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d232000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000300000000020000000000000000000005000000000000000400000000000000000000000200000002005aa06786c3730cb40000"], 0xfc}}, 0x0) 6.036690943s ago: executing program 3 (id=4158): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x805, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000011c0)={&(0x7f0000001100)="81bcdb6932dd5d4b7ce5490c349f432603", 0x11, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001200)={r5}) 4.600126493s ago: executing program 2 (id=4159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x8}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x800, 0x4, 0x0, 0x4, 0x3}) close(r3) 4.502093273s ago: executing program 5 (id=4160): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet(0xa, 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002201c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.432875122s ago: executing program 1 (id=4161): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r1 = timerfd_create(0x0, 0x80800) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) 3.512327093s ago: executing program 1 (id=4162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40809, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3.373819808s ago: executing program 2 (id=4163): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @code={0x1, 0x62, {"f242af66b830010f00d0c402cd0a1366ba400066b81d1966efc4e1ff70118d0f783dfd7f00002e26640f01c9b9830b0000b864f70000ba000000000f30b805000000b9820000000f01d9c4e1d1d574cd04"}}, @cpuid={0x2, 0x18, {0x2, 0x3e}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x5c, {"66ba420066b8090066ef450fb1e4410f01c466470f3830ca366564430f350fc7a970110000c7442400a3000000c744240200800000ff2c24f3420f1ad066b8b3008ec8f04728aa00000000"}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}], 0x193}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.731448959s ago: executing program 7 (id=4164): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.684251188s ago: executing program 5 (id=4165): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x2a) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) 2.501679318s ago: executing program 1 (id=4166): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) close(r2) close(r1) 2.480776245s ago: executing program 2 (id=4167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff0300670600001f000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d41"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) 1.830551368s ago: executing program 3 (id=4168): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x495, &(0x7f0000000740)={0x0, 0x7079, 0x400, 0x3, 0xef}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.078642004s ago: executing program 2 (id=4169): socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x1) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x6) close(r3) 1.075791797s ago: executing program 1 (id=4170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 1.069227811s ago: executing program 7 (id=4171): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000002400)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) prctl$PR_SET_PDEATHSIG(0x21, 0x1) prctl$PR_MCE_KILL_GET(0x22) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r6 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) pwritev2(r6, 0x0, 0x0, 0x2000, 0x0, 0x3) 696.508685ms ago: executing program 3 (id=4172): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e00000004000000080000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 433.549µs ago: executing program 5 (id=4173): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f0000000000)="10db5a19") setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e0a, 0x8, @loopback, 0x9}, 0xffffffffffffffa3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x200448c0) open(0x0, 0x551083, 0x28) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x1, 0x4011, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}, {0x8, 0x801, 0x0, 0x0}], 0x3}) 0s ago: executing program 1 (id=4174): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000180)=0x7, 0x4) recvmmsg(r3, 0x0, 0x0, 0x2000, 0x0) r4 = open_tree(0xffffffffffffffff, 0x0, 0x1) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="11eb534bfc0baf745837da", 0xb, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): 06cd, idProduct=0121, bcdDevice=dd.3d [ 695.455465][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.463600][ T5848] usb 7-1: Product: syz [ 695.474198][ T5848] usb 7-1: Manufacturer: syz [ 695.493644][ T5848] usb 7-1: SerialNumber: syz [ 695.509902][ T5848] usb 7-1: config 0 descriptor?? [ 695.515432][T11291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1474'. [ 695.736601][ T5848] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 695.778384][ T5848] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 695.808504][ T5848] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 695.827737][ T5848] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 695.860148][ T5848] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 695.946307][T11271] loop6: detected capacity change from 0 to 128 [ 695.986528][T11271] msdos: Unknown parameter '' [ 696.178175][T11315] fuse: Bad value for 'fd' [ 696.232079][ T6039] usb 7-1: USB disconnect, device number 13 [ 696.989803][ T6039] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 697.000274][ T6039] keyspan 7-1:0.133: device disconnected [ 697.544251][T11342] 9pnet_fd: Insufficient options for proto=fd [ 698.785416][ T5949] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 698.818701][T11375] fuse: Unknown parameter 'group_i00000000000000000000' [ 698.969937][ T5949] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 699.030352][ T5949] usb 7-1: config 0 has no interface number 0 [ 699.108609][ T5949] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 699.171472][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.210594][ T5949] usb 7-1: Product: syz [ 699.233675][ T5949] usb 7-1: Manufacturer: syz [ 699.253696][ T5949] usb 7-1: SerialNumber: syz [ 699.360562][ T5949] usb 7-1: config 0 descriptor?? [ 699.454570][ T5949] hub 7-1:0.217: bad descriptor, ignoring hub [ 699.502714][ T5949] hub 7-1:0.217: probe with driver hub failed with error -5 [ 699.646870][ T5949] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 699.681612][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 699.797121][ T5949] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 699.838299][ T5949] usb 7-1: media controller created [ 699.940535][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.133800][ T5949] DVB: Unable to find symbol dib7000p_attach() [ 700.150557][ T5949] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 700.298698][ T5949] rc_core: IR keymap rc-dib0700-rc5 not found [ 700.314812][ T5949] Registered IR keymap rc-empty [ 700.328824][ T5949] dvb-usb: could not initialize remote control. [ 700.346833][ T5949] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 700.408858][ T5949] usb 7-1: USB disconnect, device number 14 [ 700.541828][ T5949] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 700.880231][T11416] fuse: Bad value for 'fd' [ 701.977401][T11410] loop6: detected capacity change from 0 to 32768 [ 702.032364][T11410] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 702.099726][T11410] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 702.301046][ T7407] ocfs2: Unmounting device (7,6) on (node local) [ 702.717000][T11449] siw: device registration error -23 [ 702.944766][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1545'. [ 703.702237][T11483] loop6: detected capacity change from 0 to 512 [ 703.761258][T11483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.808862][T11483] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.835486][ T9587] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 704.000607][ T9587] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 704.013571][ T7407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.032091][ T9587] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 704.068955][ T9587] usb 6-1: config 0 has no interface number 0 [ 704.095883][ T9587] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 704.125394][ T9587] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 704.163723][ T9587] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.194374][ T9587] usb 6-1: config 0 interface 52 has no altsetting 0 [ 704.204915][ T9587] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 704.234920][ T9587] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 704.255169][ T9587] usb 6-1: Product: syz [ 704.265846][ T9587] usb 6-1: SerialNumber: syz [ 704.294142][ T9587] usb 6-1: config 0 descriptor?? [ 704.542872][ T9587] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input8 [ 704.741236][T11510] siw: device registration error -23 [ 704.960351][ T6039] usb 6-1: USB disconnect, device number 17 [ 704.960351][ C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 705.498320][T11515] loop6: detected capacity change from 0 to 128 [ 705.526461][T11515] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 705.558620][T11515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 705.765105][T11524] fuse: Bad value for 'fd' [ 706.075414][ T5977] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 706.165619][T11532] netlink: 'syz.5.1578': attribute type 13 has an invalid length. [ 706.235457][ T5977] usb 7-1: Using ep0 maxpacket: 32 [ 706.243601][ T5977] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 706.267695][ T5977] usb 7-1: config 0 has no interface number 0 [ 706.285363][ T5977] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 706.295860][ T5977] usb 7-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 706.313696][ T5977] usb 7-1: Product: syz [ 706.322714][ T5977] usb 7-1: Manufacturer: syz [ 706.336089][ T5977] usb 7-1: SerialNumber: syz [ 706.350404][ T5977] usb 7-1: config 0 descriptor?? [ 706.381329][ T5977] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 706.396600][ T5977] usb 7-1: selecting invalid altsetting 1 [ 706.409219][ T5977] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 706.441330][ T5977] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 706.466359][ T5977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 706.490899][ T5977] usb 7-1: media controller created [ 706.544216][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.839838][ T5977] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 706.851792][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.859323][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.870133][ T5977] zl10353_read_register: readreg error (reg=127, ret==-71) [ 706.896328][ T5977] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 706.959291][ T5977] usb 7-1: USB disconnect, device number 15 [ 707.196321][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.223448][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.257890][T11532] hsr0: left promiscuous mode [ 707.507760][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.565774][ T1093] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.643659][ T1093] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.671424][ T1093] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.207020][T11577] fuse: Bad value for 'fd' [ 710.078826][T11583] loop6: detected capacity change from 0 to 32768 [ 710.092478][T11583] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1601 (11583) [ 710.161737][T11583] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 710.202848][T11583] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 710.305621][T11606] ipvlan2: entered promiscuous mode [ 710.326661][T11606] ipvlan2: entered allmulticast mode [ 710.373551][T11606] macvlan0: entered allmulticast mode [ 710.392206][T11583] BTRFS info (device loop6): enabling ssd optimizations [ 710.415705][T11606] veth1_vlan: entered allmulticast mode [ 710.425885][T11583] BTRFS info (device loop6): enabling free space tree [ 710.469656][T11583] BTRFS info (device loop6): use zstd compression, level 3 [ 710.839069][ T7407] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 711.882122][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1625'. [ 712.523813][T11684] siw: device registration error -23 [ 713.626632][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 713.785842][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 713.793869][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.821377][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.832372][ T24] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 713.842584][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.857355][ T24] usb 7-1: config 0 descriptor?? [ 713.930581][T11707] fuse: Unknown parameter 'group_i00000000000000000000' [ 714.774532][T11709] fuse: Invalid rootmode [ 714.865803][ T30] audit: type=1800 audit(1759246904.936:170): pid=11715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1648" name="file1" dev="tmpfs" ino=2319 res=0 errno=0 [ 715.214502][T11724] siw: device registration error -23 [ 715.225532][ T813] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 715.399269][ T813] usb 6-1: Using ep0 maxpacket: 8 [ 715.409711][ T24] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 715.435993][ T813] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 715.452143][ T813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 715.462681][ T813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 715.472901][ T813] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.503312][ T813] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 715.528793][ T813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.612609][ T24] usb 7-1: USB disconnect, device number 16 [ 715.892081][ T813] usb 6-1: GET_CAPABILITIES returned 0 [ 715.898394][ T813] usbtmc 6-1:16.0: can't read capabilities [ 716.111157][ T24] usb 6-1: USB disconnect, device number 18 [ 716.584170][T11745] fuse: Bad value for 'fd' [ 717.364133][T11761] fuse: Bad value for 'fd' [ 717.580079][T11767] fuse: Bad value for 'rootmode' [ 717.739226][T11778] loop6: detected capacity change from 0 to 128 [ 717.747865][T11778] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 717.847918][ T5949] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 718.015086][T11791] loop6: detected capacity change from 0 to 16 [ 718.028678][ T5949] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 718.047503][ T5949] usb 6-1: config 0 has no interface number 0 [ 718.060902][ T5949] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 718.095404][ T5949] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 718.144820][ T5949] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 718.178568][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.216704][ T5949] usb 6-1: config 0 descriptor?? [ 718.234468][T11772] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 718.258507][T11798] fuse: Bad value for 'fd' [ 718.315597][ T5949] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 718.506961][T11791] erofs (device loop6): mounted with root inode @ nid 36. [ 718.563479][ T5949] usb 6-1: USB disconnect, device number 19 [ 719.375420][ T5949] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 719.525835][ T5949] usb 7-1: Using ep0 maxpacket: 8 [ 719.538744][ T5949] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 719.547232][ T5949] usb 7-1: config 0 has no interface number 0 [ 719.560917][ T5949] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 719.590124][ T5949] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 719.652518][ T5949] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 719.690864][ T5949] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 719.712997][ T5949] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 719.724162][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.739389][ T5949] usb 7-1: config 0 descriptor?? [ 719.756584][ T5949] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 720.068440][ T5977] usb 7-1: USB disconnect, device number 17 [ 720.070531][ C1] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 720.081697][T11817] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19 [ 720.129402][ T5977] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 721.005447][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 721.197124][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 721.218492][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.245539][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.267651][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 721.296652][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 721.315590][ T24] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 721.325466][ T24] usb 7-1: Manufacturer: syz [ 721.338246][ T5977] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 721.339331][ T24] usb 7-1: config 0 descriptor?? [ 721.517111][ T5977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.561582][ T5977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.582331][ T5977] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 721.601952][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 721.615450][ T5977] usb 6-1: SerialNumber: syz [ 721.779969][ T24] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 721.824702][ T24] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 721.862007][ T5977] usb 6-1: 0:2 : does not exist [ 721.948017][ T5977] usb 6-1: USB disconnect, device number 20 [ 722.034344][ T9603] udevd[9603]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.102343][ T24] usb 7-1: USB disconnect, device number 18 [ 723.036039][ T813] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 723.216052][ T813] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 723.245447][ T813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.291417][ T813] usb 6-1: config 0 descriptor?? [ 723.536857][ T813] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 723.921160][ T813] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 723.959522][ T813] [drm] Initialized udl on minor 2 [ 724.067868][ T813] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 724.082747][ T813] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 724.269847][ T6039] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 724.304895][ T813] usb 6-1: USB disconnect, device number 21 [ 724.314104][ T6039] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 724.334981][T11907] loop6: detected capacity change from 0 to 512 [ 724.362826][ T6039] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 724.418957][T11907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 724.437964][T11907] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.530531][ T7407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 725.013968][T11933] fuse: Unknown parameter 'use00000000000000000000' [ 725.685853][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 725.694776][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1739'. [ 725.739804][T11939] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 726.106046][T11953] loop3: detected capacity change from 0 to 7 [ 726.133445][T11953] Dev loop3: unable to read RDB block 7 [ 726.144041][T11953] loop3: unable to read partition table [ 726.155397][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 726.173532][T11953] loop3: partition table beyond EOD, truncated [ 726.183440][T11953] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 726.358789][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.375364][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 726.405134][T11959] lo speed is unknown, defaulting to 1000 [ 726.415541][ T24] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 726.452331][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.454281][T11959] lo speed is unknown, defaulting to 1000 [ 726.487879][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8D has invalid maxpacket 33296, setting to 1024 [ 726.537483][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.575426][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.603923][ T24] usb 6-1: Product: syz [ 726.614088][ T24] usb 6-1: Manufacturer: syz [ 726.624215][ T24] usb 6-1: SerialNumber: syz [ 726.863762][T11947] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 727.630454][T11947] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 727.888149][ T24] cdc_mbim 6-1:1.0: bind() failure [ 727.957855][ T24] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 727.982735][ T24] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 728.020358][ T24] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 728.067031][ T24] usb 6-1: USB disconnect, device number 22 [ 729.182176][T12009] siw: device registration error -23 [ 729.275216][T11997] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 730.211478][T12025] siw: device registration error -23 [ 731.052704][ T9587] IPVS: starting estimator thread 0... [ 731.265726][T12038] IPVS: using max 27 ests per chain, 64800 per kthread [ 733.464518][T12076] lo speed is unknown, defaulting to 1000 [ 733.487012][T12076] lo speed is unknown, defaulting to 1000 [ 733.720561][T12081] siw: device registration error -23 [ 734.555227][T12062] loop6: detected capacity change from 0 to 32768 [ 734.630176][T12091] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 734.642500][T12062] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 734.744367][T12062] XFS (loop6): Ending clean mount [ 735.302401][ T7407] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 737.041105][T12154] 9pnet_fd: Insufficient options for proto=fd [ 738.314112][T12179] fuse: Unknown parameter 'user_id00000000000000000000' [ 738.482547][T12190] fuse: Bad value for 'fd' [ 741.881602][T12225] fuse: Bad value for 'rootmode' [ 742.551208][T12234] loop6: detected capacity change from 0 to 512 [ 742.634462][T12234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.811077][ T7407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.802335][T12253] 9pnet_fd: Insufficient options for proto=fd [ 743.960797][T12257] loop6: detected capacity change from 0 to 256 [ 743.994674][T12257] exfat: Deprecated parameter 'utf8' [ 744.047785][T12257] exfat: Deprecated parameter 'utf8' [ 744.079850][T12257] exfat: Deprecated parameter 'namecase' [ 744.138166][T12257] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 746.286206][T12272] loop6: detected capacity change from 0 to 2048 [ 746.414890][T12272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.104752][T12314] fuse: Bad value for 'fd' [ 751.775501][ T9587] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 751.967064][ T9587] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.995639][ T9587] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 752.025100][ T9587] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.066438][ T9587] usb 7-1: config 0 descriptor?? [ 752.251722][T12371] fuse: Unknown parameter 'use00000000000000000000' [ 752.509980][ T9587] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 752.566392][ T9587] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0008/input/input9 [ 752.819979][ T9587] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 752.891812][T12389] binder: 12387:12389 ioctl 400c620e 200000000540 returned -22 [ 753.073250][ T6039] usb 7-1: USB disconnect, device number 19 [ 753.198849][T12396] fuse: Unknown parameter '0x0000000000000009' [ 754.122072][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.131781][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.179802][T12398] syzkaller1: entered promiscuous mode [ 754.205684][T12398] syzkaller1: entered allmulticast mode [ 754.646882][ T6039] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 754.674238][T12416] fuse: Invalid rootmode [ 754.805438][ T6039] usb 7-1: Using ep0 maxpacket: 32 [ 754.821809][ T6039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.847051][ T6039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.867850][ T6039] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 754.887945][ T6039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.911858][ T6039] usb 7-1: config 0 descriptor?? [ 755.382087][ T6039] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 755.688181][ T9587] usb 7-1: USB disconnect, device number 20 [ 755.936418][T12440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1937'. [ 756.631813][T12464] fuse: Unknown parameter '0x0000000000000009' [ 757.752102][T12472] loop6: detected capacity change from 0 to 2048 [ 757.850978][T12472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.866174][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 758.025379][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 758.037570][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.057711][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.081213][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 758.105401][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.134799][ T24] usb 6-1: config 0 descriptor?? [ 758.390502][ T7407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.072240][ T24] ft260 0003:0403:6030.000A: unknown main item tag 0x7 [ 759.261768][ T24] ft260 0003:0403:6030.000A: chip code: 6424 8183 [ 759.489862][ T24] ft260 0003:0403:6030.000A: failed to retrieve system status [ 759.514056][ T24] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -71 [ 759.570463][ T24] usb 6-1: USB disconnect, device number 23 [ 759.809050][T12505] fuse: Unknown parameter '0x0000000000000005' [ 759.919637][T12498] loop6: detected capacity change from 0 to 32768 [ 759.999200][T12498] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 760.100403][T12498] XFS (loop6): Ending clean mount [ 760.203283][T12498] XFS (loop6): Quotacheck needed: Please wait. [ 760.651225][T12498] XFS (loop6): Quotacheck: Done. [ 761.091079][ T7407] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 763.337382][ T24] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 763.541390][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 763.572077][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 763.612691][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 763.646304][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.695834][ T24] usb 7-1: config 0 descriptor?? [ 763.713476][T12582] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 764.149130][ T24] microsoft 0003:045E:009D.000B: bogus close delimiter [ 764.180404][ T24] microsoft 0003:045E:009D.000B: item 0 4 2 10 parsing failed [ 764.201504][ T24] microsoft 0003:045E:009D.000B: parse failed [ 764.222928][ T24] microsoft 0003:045E:009D.000B: probe with driver microsoft failed with error -22 [ 764.297143][T12619] fuse: Bad value for 'fd' [ 765.430481][ T30] audit: type=1800 audit(1759246955.506:171): pid=12647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2014" name="nullb0" dev="tmpfs" ino=2630 res=0 errno=0 [ 766.448659][ T9587] usb 7-1: USB disconnect, device number 21 [ 766.772231][T12671] loop6: detected capacity change from 0 to 256 [ 767.785810][T12708] fuse: Bad value for 'fd' [ 769.960744][T12782] loop6: detected capacity change from 0 to 64 [ 770.492469][T12748] overlayfs: failed to clone upperpath [ 770.507863][T12748] overlayfs: failed to clone upperpath [ 770.723251][T12792] fuse: Unknown parameter 'use00000000000000000000' [ 770.815523][ T24] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 770.981617][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 771.007884][ T24] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 771.039338][T12802] binder: 12800:12802 ioctl c0306201 2000000003c0 returned -14 [ 771.039406][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.085874][ T24] usb 7-1: config 0 descriptor?? [ 771.096388][T12786] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 771.571227][ T24] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 771.572502][T12831] overlayfs: failed to clone lowerpath [ 771.612594][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 772.842962][T12863] fuse: Bad value for 'fd' [ 773.321361][T12880] input: syz0 as /devices/virtual/input/input10 [ 773.489616][ T24] usb 7-1: USB disconnect, device number 22 [ 774.337400][T12896] overlayfs: failed to clone upperpath [ 774.388606][T12896] overlayfs: failed to clone upperpath [ 775.191320][T12906] loop6: detected capacity change from 0 to 8192 [ 775.373809][T12919] overlayfs: failed to clone upperpath [ 775.432195][T12923] fuse: Unknown parameter '0x0000000000000006' [ 777.145471][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 777.465370][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 777.546405][ T24] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 777.600187][ T24] usb 6-1: config 0 has no interface number 0 [ 777.656685][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'. [ 777.683192][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 777.753763][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.814850][ T24] usb 6-1: Product: syz [ 777.950280][ T24] usb 6-1: Manufacturer: syz [ 777.954936][ T24] usb 6-1: SerialNumber: syz [ 778.179215][ T24] usb 6-1: config 0 descriptor?? [ 778.610125][T12976] fuse: Unknown parameter '0x0000000000000006' [ 778.738096][ T24] msi2500 6-1:0.246: Registered as swradio24 [ 778.751115][ T24] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 778.789328][ T24] usb 6-1: USB disconnect, device number 24 [ 779.154841][T12985] loop6: detected capacity change from 0 to 2048 [ 779.191090][T12985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 779.565198][T13006] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2163'. [ 779.685360][ T30] audit: type=1326 audit(1759246969.686:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.6.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b5b8eec9 code=0x7fc00000 [ 779.717452][T13004] siw: device registration error -23 [ 779.954865][T13023] hsr0: left promiscuous mode [ 779.964826][T13024] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 780.290435][ T30] audit: type=1326 audit(1759246970.356:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.6.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b5b8eec9 code=0x7fc00000 [ 781.890787][T13061] bond0: (slave bond_slave_1): Releasing backup interface [ 782.265070][T13077] siw: device registration error -23 [ 785.849217][T13144] loop6: detected capacity change from 0 to 128 [ 785.921860][T13144] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 786.130812][T13144] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 786.269009][ T7407] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.649648][T13159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.035563][T13168] fuse: Bad value for 'fd' [ 787.150071][T13170] fuse: Unknown parameter 'fd0x0000000000000006' [ 788.369597][T13203] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2244'. [ 788.843136][T13186] loop6: detected capacity change from 0 to 40427 [ 788.880465][T13186] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 789.388843][T13186] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 789.406088][T13186] F2FS-fs (loop6): invalid crc value [ 789.505234][T13186] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 789.520126][T13186] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 789.530376][T13186] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 789.752181][T13237] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 789.816768][T13241] rdma_rxe: rxe_newlink: failed to add lo [ 789.990796][T13241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.013484][T13241] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.045951][T13241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 791.359179][ T30] audit: type=1326 audit(1759246981.436:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.3.2265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32cb18eec9 code=0x0 [ 792.498221][T13276] loop6: detected capacity change from 0 to 2048 [ 792.539229][T13276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 793.925444][ T5977] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 794.107249][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.128867][ T5977] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 794.148911][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.193465][ T5977] usb 6-1: config 0 descriptor?? [ 794.896858][ T5977] usbhid 6-1:0.0: can't add hid device: -71 [ 794.902920][ T5977] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 795.038476][ T5977] usb 6-1: USB disconnect, device number 25 [ 795.170290][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2297'. [ 795.396826][ T5977] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 795.575436][ T5977] usb 6-1: Using ep0 maxpacket: 32 [ 795.592749][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.614577][ T5977] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 795.644284][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.660634][ T5977] usb 6-1: config 0 descriptor?? [ 795.674807][ T5977] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 795.707353][ T5977] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 795.956326][ C0] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 795.995184][T13346] loop6: detected capacity change from 0 to 40427 [ 796.013874][T13346] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 796.045479][T13346] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 796.084835][T13346] F2FS-fs (loop6): invalid crc value [ 796.228434][T13346] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 796.254687][T13346] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 796.270138][T13346] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 796.286857][ C0] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 796.298394][T13380] fuse: Bad value for 'fd' [ 797.055582][ T813] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 797.208677][ T813] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 797.220730][ T813] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 797.231182][ T813] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 797.240738][ T813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.253616][T13398] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 797.266473][ T813] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 797.363091][ T6039] usb 6-1: USB disconnect, device number 26 [ 797.393171][ T6039] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 797.502337][ T813] usb 7-1: USB disconnect, device number 23 [ 799.291534][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2337'. [ 799.781661][T13446] netlink: 'syz.1.2341': attribute type 1 has an invalid length. [ 799.915203][T13449] loop6: detected capacity change from 0 to 7 [ 799.923545][T13449] Dev loop6: unable to read RDB block 7 [ 799.929720][T13449] loop6: AHDI p1 p2 p3 [ 799.935206][T13449] loop6: partition table partially beyond EOD, truncated [ 799.943492][T13449] loop6: p1 start 926365495 is beyond EOD, truncated [ 799.954162][T13449] loop6: p2 size 114 extends beyond EOD, truncated [ 800.102705][T12310] udevd[12310]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 800.660417][T13455] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 801.129781][T13446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.363214][T13477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2352'. [ 801.494939][T13485] loop6: detected capacity change from 0 to 2048 [ 801.514214][T13485] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.544877][T13485] [syz.6.2356/13485] FS: loop6 File: /bus/memory.swap.current would truncate fibmap result [ 802.115916][ T813] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 802.132109][T13491] loop6: detected capacity change from 0 to 32768 [ 802.301739][ T813] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.346136][ T813] usb 6-1: config 0 interface 0 has no altsetting 0 [ 802.390236][ T813] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 802.410964][T13491] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 802.410995][T13491] allowing incompatible features above 0.0: (unknown version) [ 802.411007][T13491] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 802.418921][ T813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.437126][T13506] 9pnet_fd: p9_fd_create_tcp (13506): problem connecting socket to 127.0.0.1 [ 802.455765][ T813] usb 6-1: Product: syz [ 802.455788][ T813] usb 6-1: Manufacturer: syz [ 802.482054][ T813] usb 6-1: SerialNumber: syz [ 802.497276][ T813] usb 6-1: config 0 descriptor?? [ 802.503494][T13491] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 802.508503][ T813] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 802.526076][T13491] bcachefs (loop6): initializing new filesystem [ 802.539700][ T813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 802.556659][T13491] bcachefs (loop6): going read-write [ 802.565054][ T813] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 802.601576][ T813] usb 6-1: media controller created [ 802.644153][T13491] bcachefs (loop6): marking superblocks [ 802.692508][T13491] bcachefs (loop6): initializing freespace [ 802.702286][ T813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 802.738791][T13491] bcachefs (loop6): done initializing freespace [ 802.770166][T13491] bcachefs (loop6): reading snapshots table [ 802.788688][T13491] bcachefs (loop6): reading snapshots done [ 802.888169][ T813] DVB: Unable to find symbol tda10046_attach() [ 802.897217][T13491] bcachefs (loop6): done starting filesystem [ 802.915504][ T813] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 802.924579][ T813] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 803.604220][ T7407] bcachefs (loop6): shutting down [ 803.612239][ T7407] bcachefs (loop6): going read-only [ 803.619046][ T7407] bcachefs (loop6): finished waiting for writes to stop [ 803.633897][ T7407] bcachefs (loop6): flushing journal and stopping allocators, journal seq 5 [ 804.150885][ T813] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 804.416253][ T7407] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 5 [ 804.417814][ T813] usb 6-1: USB disconnect, device number 27 [ 804.468238][ T7407] bcachefs (loop6): clean shutdown complete, journal seq 6 [ 804.477911][ T7407] bcachefs (loop6): marking filesystem clean [ 804.684394][ T7407] bcachefs (loop6): shutdown complete [ 804.910217][T13547] fuse: Bad value for 'fd' [ 805.876224][T13571] gtp0: entered promiscuous mode [ 805.888183][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 806.098460][T13579] loop2: detected capacity change from 0 to 7 [ 806.112769][T12310] Dev loop2: unable to read RDB block 7 [ 806.119369][T12310] loop2: unable to read partition table [ 806.125807][T12310] loop2: partition table beyond EOD, truncated [ 806.146509][T13579] Dev loop2: unable to read RDB block 7 [ 806.152231][T13579] loop2: unable to read partition table [ 806.162615][T13579] loop2: partition table beyond EOD, truncated [ 806.172476][T13579] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 807.352144][T13600] overlayfs: failed to clone upperpath [ 807.431245][T13602] netlink: 'syz.1.2406': attribute type 29 has an invalid length. [ 807.442377][T13602] netlink: 'syz.1.2406': attribute type 29 has an invalid length. [ 807.452665][T13602] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2406'. [ 809.223678][T13625] loop6: detected capacity change from 0 to 32768 [ 809.275180][T13625] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 809.540045][T13625] XFS (loop6): Ending clean mount [ 810.070136][ T13] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 810.094594][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'. [ 810.103999][ T13] XFS (loop6): Unmount and run xfs_repair [ 810.125366][ T13] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 810.194117][ T13] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 810.203455][ T13] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 810.212701][ T13] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 810.221669][ T13] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 810.230683][ T13] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 810.239670][ T13] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 810.248730][ T13] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 810.258019][ T13] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 810.267816][ T13] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 810.279765][ T13] XFS (loop6): page discard on page ffffea00012a4600, inode 0x2449, pos 0. [ 810.321915][ T7407] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 810.349463][ T7407] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 811.850864][T13699] overlayfs: missing 'lowerdir' [ 811.909969][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2446'. [ 812.025475][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 812.222494][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.253392][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 812.282313][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 812.301974][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 812.320738][ T24] usb 7-1: SerialNumber: syz [ 812.567746][ T24] usb 7-1: 0:2 : does not exist [ 812.622258][ T24] usb 7-1: USB disconnect, device number 24 [ 812.728320][T12310] udevd[12310]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.061929][T13733] 9pnet_fd: p9_fd_create_unix (13733): problem connecting socket: ./file0: -111 [ 813.124212][T13735] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 813.134715][T13735] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 813.147329][T13735] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2462'. [ 813.211761][T13737] netlink: 566 bytes leftover after parsing attributes in process `syz.6.2463'. [ 814.764275][T13761] netlink: 'syz.1.2475': attribute type 22 has an invalid length. [ 814.783260][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 814.877068][T13761] netlink: 'syz.1.2475': attribute type 22 has an invalid length. [ 814.885469][ T6098] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.913522][ T6098] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.926440][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 814.951910][ T6098] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.976026][ T6098] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.561869][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.568550][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.885444][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 816.095468][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 816.107491][ T24] usb 6-1: config 8 has an invalid interface number: 203 but max is 0 [ 816.800232][T13802] lo speed is unknown, defaulting to 1000 [ 816.821821][T13802] lo speed is unknown, defaulting to 1000 [ 817.064966][ T24] usb 6-1: config 8 has no interface number 0 [ 817.071671][ T24] usb 6-1: config 8 interface 203 has no altsetting 0 [ 817.083618][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 817.092883][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.100996][ T24] usb 6-1: Product: syz [ 817.105176][ T24] usb 6-1: Manufacturer: syz [ 817.109974][ T24] usb 6-1: SerialNumber: syz [ 817.140350][T13799] loop6: detected capacity change from 0 to 131072 [ 817.154108][T13799] F2FS-fs (loop6): invalid crc value [ 817.281056][T13799] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 817.292730][T13799] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 817.342592][T13791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.382203][T13791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.521782][ T24] port100 6-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 817.552067][ T24] usb 6-1: USB disconnect, device number 28 [ 818.053803][T13828] wg2: entered promiscuous mode [ 818.067614][T13828] wg2: entered allmulticast mode [ 818.267995][T13833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2503'. [ 818.321487][T13833] unsupported nlmsg_type 40 [ 820.670471][T13516] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 822.347929][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2521'. [ 822.685884][T13896] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 823.916198][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2536'. [ 823.949236][T13925] netlink: 'syz.6.2536': attribute type 20 has an invalid length. [ 824.214884][ T60] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.215049][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2536'. [ 824.279974][ T60] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.295479][T13925] netlink: 'syz.6.2536': attribute type 20 has an invalid length. [ 824.322628][ T60] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.393269][ T60] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.168946][T13970] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2644373649 (5288747298 ns) > initial count (3236094574 ns). Using initial count to start timer. [ 826.232369][T13974] netlink: 'syz.3.2557': attribute type 1 has an invalid length. [ 826.330614][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 827.090443][T13974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 827.450488][T13993] overlayfs: failed to resolve './bus': -2 [ 827.603314][T13977] bond2 (unregistering): Released all slaves [ 828.216866][T13997] overlayfs: failed to resolve './file0': -2 [ 828.413086][T14004] loop6: detected capacity change from 0 to 64 [ 830.167615][T14061] loop6: detected capacity change from 0 to 256 [ 830.339103][T14061] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 830.463323][ T30] audit: type=1326 audit(1759247020.536:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.3.2591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32cb18eec9 code=0x0 [ 831.275517][ T5949] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 831.423366][T14081] 9pnet_fd: Insufficient options for proto=fd [ 831.811835][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 832.227526][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.240564][ T5949] usb 6-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 832.250952][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.262401][ T5949] usb 6-1: config 0 descriptor?? [ 832.269007][T14067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 833.269791][ T5949] wacom 0003:056A:0020.000D: unknown main item tag 0x0 [ 833.301711][ T5949] wacom 0003:056A:0020.000D: unknown main item tag 0x0 [ 833.315449][ T5949] wacom 0003:056A:0020.000D: unknown main item tag 0x0 [ 833.338173][ T5949] usb 6-1: USB disconnect, device number 29 [ 833.518156][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 833.847646][ T5949] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 834.037734][ T5949] usb 7-1: Using ep0 maxpacket: 32 [ 834.088543][ T5949] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 834.230386][T14114] overlayfs: failed to clone lowerpath [ 834.435398][ T5949] usb 7-1: config 0 has no interface number 0 [ 834.533047][ T5949] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 834.563286][T14120] fuse: Bad value for 'fd' [ 834.648789][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.665566][ T5949] usb 7-1: Product: syz [ 834.670587][ T5949] usb 7-1: Manufacturer: syz [ 834.675490][ T5949] usb 7-1: SerialNumber: syz [ 834.684723][ T5949] usb 7-1: config 0 descriptor?? [ 834.697949][ T5949] smsc95xx v2.0.0 [ 835.121057][ T5949] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 835.161845][ T5949] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 836.467748][ T5949] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 836.512815][ T5949] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 836.566005][ T5949] usb 7-1: USB disconnect, device number 25 [ 836.651809][T14153] vivid-001: disconnect [ 836.680445][T14153] vivid-001: reconnect [ 837.169661][T14168] overlayfs: failed to clone upperpath [ 837.423311][ T30] audit: type=1326 audit(1759247027.496:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.1.2634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe05f8eec9 code=0x0 [ 837.911669][T14191] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2641'. [ 837.924362][T14191] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2641'. [ 839.007482][T14224] fuse: Bad value for 'fd' [ 839.132362][T14228] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2659'. [ 839.166237][T14228] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2659'. [ 839.617573][T14246] overlayfs: failed to clone upperpath [ 839.862119][T14230] loop6: detected capacity change from 0 to 32768 [ 839.959432][T14230] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 840.027891][T14230] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 840.087346][T14230] XFS (loop6): Starting recovery (logdev: internal) [ 840.137703][T14266] fuse: Bad value for 'fd' [ 840.199814][T14230] XFS (loop6): Ending recovery (logdev: internal) [ 840.322530][ T7407] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 842.295000][T14299] overlayfs: failed to clone upperpath [ 842.431619][T14303] overlayfs: failed to clone upperpath [ 842.989746][T14322] overlayfs: failed to clone upperpath [ 843.069045][T14324] siw: device registration error -23 [ 843.760581][T14329] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2699'. [ 843.790249][ T30] audit: type=1326 audit(1759247033.856:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14333 comm="syz.2.2701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f013d78eec9 code=0x0 [ 843.925416][T14341] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 846.398048][T14367] loop6: detected capacity change from 0 to 32768 [ 846.575677][T14367] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 846.788286][T14367] XFS (loop6): Ending clean mount [ 846.826688][ T30] audit: type=1800 audit(1759247036.906:178): pid=14367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2712" name="file0" dev="loop6" ino=9284 res=0 errno=0 [ 847.853183][ T7407] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 848.225574][ T5949] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 848.945368][ T5949] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 848.953676][ T5949] usb 6-1: config 179 has no interface number 0 [ 848.971186][ T5949] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 849.085812][ T5949] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 849.100308][ T5949] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 849.111673][ T5949] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 849.128481][ T5949] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 849.155442][ T5949] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 849.164591][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.203531][T14404] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 849.213617][T14427] overlayfs: failed to clone upperpath [ 849.219500][T14404] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 849.606854][ T24] usb 6-1: USB disconnect, device number 30 [ 849.606922][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 849.621438][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 850.383293][T14451] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 852.663582][T14478] overlayfs: failed to clone upperpath [ 853.372653][T14500] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 853.438702][T14502] bridge0: entered allmulticast mode [ 853.445468][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2763'. [ 853.454876][T14502] bridge_slave_1: left allmulticast mode [ 853.461114][T14502] bridge_slave_1: left promiscuous mode [ 853.468818][T14502] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.530986][T14502] bridge_slave_0: left allmulticast mode [ 853.565190][T14502] bridge_slave_0: left promiscuous mode [ 853.584435][T14502] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.754843][ T9587] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 853.785689][T14502] bridge0 (unregistering): left allmulticast mode [ 853.842260][ T9587] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 855.877681][T14530] fuse: Unknown parameter 'group_i00000000000000000000' [ 856.185588][ T9587] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 856.348435][ T9587] usb 6-1: unable to get BOS descriptor or descriptor too short [ 856.360922][ T9587] usb 6-1: not running at top speed; connect to a high speed hub [ 856.388907][ T9587] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.411303][ T9587] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.441042][ T9587] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.473539][ T9587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.492463][T14561] fuse: Unknown parameter 'group_id00000000000000000000' [ 856.526561][ T9587] usb 6-1: Product: syz [ 856.545977][ T9587] usb 6-1: Manufacturer: syz [ 856.564848][ T9587] usb 6-1: SerialNumber: syz [ 857.159711][ T9587] usb 6-1: cannot find UAC_HEADER [ 857.345002][T14564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.409225][ T9587] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 857.470940][ T9587] usb 6-1: USB disconnect, device number 31 [ 857.526482][T12310] udevd[12310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.795756][ T6039] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 857.975756][ T6039] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 857.995466][ T6039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.016399][ T6039] usb 7-1: config 0 descriptor?? [ 858.158048][T14592] fuse: Unknown parameter 'group_id00000000000000000000' [ 860.469421][T14618] fuse: Unknown parameter 'group_id00000000000000000000' [ 860.627711][ T6039] usb 7-1: Cannot set autoneg [ 860.635027][ T6039] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 860.715943][ T6039] usb 7-1: USB disconnect, device number 26 [ 860.813681][T14624] overlayfs: failed to clone upperpath [ 861.219458][T14635] netlink: 'syz.3.2818': attribute type 11 has an invalid length. [ 861.402331][T14646] overlayfs: failed to clone upperpath [ 862.453483][T14687] bond0: (slave dummy0): Releasing backup interface [ 862.476484][T14687] batman_adv: batadv0: Adding interface: dummy0 [ 862.506373][T14687] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.536944][T14687] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 863.097721][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2846'. [ 863.739053][T14713] overlayfs: failed to clone upperpath [ 863.787375][T14713] overlayfs: failed to clone upperpath [ 864.393591][T14736] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 864.414274][T14736] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 864.425685][T14736] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 864.432585][T14736] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 864.439792][T14736] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 864.447414][T14736] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 864.455475][T14736] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 864.463519][T14736] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 864.471966][T14736] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 864.478593][T14736] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 864.497878][T14736] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 864.517230][T14736] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 864.546925][T14736] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 864.571740][T14736] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 864.582047][T14736] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 864.642834][T14736] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 864.654019][T14736] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 864.782018][T14736] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 864.789129][T14736] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 864.796009][T14736] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 864.802541][T14736] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 864.810040][T14736] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 864.888797][T14747] siw: device registration error -23 [ 865.706621][T14759] loop6: detected capacity change from 0 to 1024 [ 865.856281][T14763] overlayfs: failed to clone upperpath [ 865.901393][ T13] hfsplus: b-tree write err: -5, ino 4 [ 866.238428][T14773] loop2: detected capacity change from 0 to 7 [ 866.270176][T14773] Dev loop2: unable to read RDB block 7 [ 866.287523][T14773] loop2: unable to read partition table [ 866.307937][T14773] loop2: partition table beyond EOD, truncated [ 866.360815][T14773] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 867.076524][T14824] veth1_to_bond: entered allmulticast mode [ 867.083974][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2894'. [ 867.130997][T14824] : (slave bond_slave_1): Releasing backup interface [ 867.150067][T14824] bond_slave_1 (unregistering): left promiscuous mode [ 867.206079][T14824] veth1_to_bond (unregistering): left allmulticast mode [ 867.545943][ T30] audit: type=1326 audit(1759247057.626:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14845 comm="syz.1.2902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe05f8eec9 code=0x0 [ 868.278949][T14872] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2914'. [ 868.299825][T14872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2914'. [ 869.106280][ T9587] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 869.163883][T14890] fuse: Bad value for 'fd' [ 869.265557][ T9587] usb 6-1: Using ep0 maxpacket: 32 [ 869.288406][ T9587] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 869.304717][ T9587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.319325][ T9587] usb 6-1: Product: syz [ 869.323855][ T9587] usb 6-1: Manufacturer: syz [ 869.329029][ T9587] usb 6-1: SerialNumber: syz [ 869.539383][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 869.555092][ T9587] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 869.588507][ T9587] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 869.607043][ T9587] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 869.770774][ T9587] usb 6-1: USB disconnect, device number 32 [ 869.818639][ T9587] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 869.849471][ T9587] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 869.861999][ T9587] visor 6-1:1.0: device disconnected [ 870.006380][T14914] fuse: Bad value for 'fd' [ 870.438458][T14917] loop6: detected capacity change from 0 to 32768 [ 870.477762][T14917] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 870.543297][T14917] XFS (loop6): Ending clean mount [ 870.709703][ T7407] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 871.136477][T14953] lo speed is unknown, defaulting to 1000 [ 871.168734][T14953] lo speed is unknown, defaulting to 1000 [ 871.607942][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056cb2400: rx timeout, send abort [ 871.619328][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056cb2400: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 871.634233][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880578eb800: rx timeout, send abort [ 871.645649][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880578eb800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 871.823779][T14979] siw: device registration error -23 [ 873.012038][T14997] fuse: Bad value for 'fd' [ 874.038913][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 874.240324][T15023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2971'. [ 874.271651][ T5977] lo speed is unknown, defaulting to 1000 [ 874.336327][T15027] overlayfs: failed to clone upperpath [ 875.079923][T15047] siw: device registration error -23 [ 875.780702][T15052] loop6: detected capacity change from 0 to 64 [ 875.967918][ T7407] hfs: walked past end of dir [ 876.168886][T15070] evm: overlay not supported [ 876.669873][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'. [ 877.023460][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 877.030104][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.405404][ T5977] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 877.590460][ T5977] usb 7-1: Using ep0 maxpacket: 8 [ 877.619161][ T5977] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 877.633053][ T5977] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 877.661715][ T5977] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 877.696051][ T5977] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 877.749134][ T5977] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 877.794482][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.057563][ T5977] usb 7-1: GET_CAPABILITIES returned 0 [ 878.092132][ T5977] usbtmc 7-1:16.0: can't read capabilities [ 878.262114][ T5977] usb 7-1: USB disconnect, device number 27 [ 878.911062][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'. [ 879.076499][T15132] fuse: Unknown parameter 'grou00000000000000000000' [ 879.965204][T15142] netlink: 'syz.6.3019': attribute type 4 has an invalid length. [ 879.999489][T15142] netlink: 'syz.6.3019': attribute type 4 has an invalid length. [ 881.511737][T15155] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 881.518610][T15155] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 881.527966][T15155] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 881.572953][T15155] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 881.596299][T15155] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 881.618695][T15155] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 881.632182][T15155] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 881.652416][T15155] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 881.668657][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'. [ 881.674449][T15155] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 881.706100][T15155] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 881.714538][T15155] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 881.722409][T15155] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 881.729600][T15155] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 881.736986][T15155] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 881.746541][T15155] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 881.754934][T15155] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 881.763883][T15155] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 881.775242][T15155] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 881.809584][T15155] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 881.965795][T15155] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 881.982623][T15155] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 882.000715][T15155] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 882.115038][T15163] fuse: Unknown parameter 'grou00000000000000000000' [ 882.193871][T15144] loop6: detected capacity change from 0 to 32768 [ 882.229917][T15144] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 882.821046][T15144] XFS (loop6): Ending clean mount [ 882.933438][T15144] XFS (loop6): Quotacheck needed: Please wait. [ 883.239476][T15144] XFS (loop6): Quotacheck: Done. [ 883.542967][ T7407] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 884.186848][T15195] 9pnet_fd: Insufficient options for proto=fd [ 884.284014][T15199] fuse: Unknown parameter 'group_i00000000000000000000' [ 885.043164][T15219] lo speed is unknown, defaulting to 1000 [ 885.056098][T15224] overlayfs: failed to clone upperpath [ 885.084722][T15219] lo speed is unknown, defaulting to 1000 [ 885.351132][T15233] fuse: Unknown parameter 'group_i00000000000000000000' [ 885.489657][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3055'. [ 885.602646][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3055'. [ 886.120471][ T30] audit: type=1800 audit(1759247076.176:180): pid=15236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3054" name="file1" dev="tmpfs" ino=4079 res=0 errno=0 [ 886.493194][T15254] loop6: detected capacity change from 0 to 2048 [ 886.565026][T15254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.579282][T15254] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.672227][ T7407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.748859][T15261] overlayfs: overlapping lowerdir path [ 887.342375][T15294] loop6: detected capacity change from 0 to 512 [ 887.352010][T15294] EXT4-fs: Ignoring removed oldalloc option [ 887.361457][T15294] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 887.379906][T15294] EXT4-fs (loop6): 1 truncate cleaned up [ 887.393908][T15294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.525948][T15294] loop6: detected capacity change from 512 to 64 [ 887.608597][T15300] syz.6.3078: attempt to access beyond end of device [ 887.608597][T15300] loop6: rw=2049, sector=74, nr_sectors = 6 limit=64 [ 887.650284][T15300] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 37) [ 887.668882][T15300] Buffer I/O error on device loop6, logical block 37 [ 887.676225][T15300] Buffer I/O error on device loop6, logical block 38 [ 887.682933][T15300] Buffer I/O error on device loop6, logical block 39 [ 887.690592][T15300] syz.6.3078: attempt to access beyond end of device [ 887.690592][T15300] loop6: rw=2049, sector=84, nr_sectors = 2 limit=64 [ 887.705813][T15300] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 42) [ 887.718299][T15300] Buffer I/O error on device loop6, logical block 42 [ 887.726881][T15300] syz.6.3078: attempt to access beyond end of device [ 887.726881][T15300] loop6: rw=2049, sector=94, nr_sectors = 6 limit=64 [ 887.741871][T15300] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 47) [ 887.760647][T15300] Buffer I/O error on device loop6, logical block 47 [ 887.767369][T15300] Buffer I/O error on device loop6, logical block 48 [ 887.774060][T15300] Buffer I/O error on device loop6, logical block 49 [ 887.828545][T15300] syz.6.3078: attempt to access beyond end of device [ 887.828545][T15300] loop6: rw=2049, sector=102, nr_sectors = 2 limit=64 [ 887.905448][T15300] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 51) [ 887.927315][T15300] Buffer I/O error on device loop6, logical block 51 [ 887.934945][T15300] syz.6.3078: attempt to access beyond end of device [ 887.934945][T15300] loop6: rw=2049, sector=112, nr_sectors = 6 limit=64 [ 887.963228][T15300] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 56) [ 887.978225][T15300] Buffer I/O error on device loop6, logical block 56 [ 887.984955][T15300] Buffer I/O error on device loop6, logical block 57 [ 888.033940][T15300] syz.6.3078: attempt to access beyond end of device [ 888.033940][T15300] loop6: rw=2049, sector=120, nr_sectors = 2 limit=64 [ 888.080988][T15300] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 60) [ 888.219598][ T7407] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -12) [ 888.243670][ T7407] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 888.286265][T15326] overlayfs: failed to clone upperpath [ 888.321250][ T7407] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 888.501168][ T9684] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.905810][ T1112] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.963395][ T1112] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.152009][ T1112] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.175987][ T1112] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.367384][ T1112] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.395821][ T1112] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.619807][ T1112] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.652585][ T1112] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.038054][T13516] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 890.052959][T13516] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 890.064424][T13516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 890.073029][T13516] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 890.081112][T13516] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 890.404487][T15364] lo speed is unknown, defaulting to 1000 [ 890.646428][T15384] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 892.199443][ T5880] Bluetooth: hci2: command tx timeout [ 892.254165][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.283673][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.309741][ T1112] bond0 (unregistering): Released all slaves [ 892.346252][T15364] lo speed is unknown, defaulting to 1000 [ 892.923523][ T1112] hsr_slave_0: left promiscuous mode [ 892.936600][ T1112] hsr_slave_1: left promiscuous mode [ 892.943995][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.956815][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.965517][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.973054][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.982540][ T1112] batman_adv: batadv0: Removing interface: dummy0 [ 893.012389][ T1112] veth1_macvtap: left promiscuous mode [ 893.018178][ T1112] veth0_macvtap: left promiscuous mode [ 893.023889][ T1112] veth1_vlan: left promiscuous mode [ 893.029750][ T1112] veth0_vlan: left promiscuous mode [ 893.221382][ T1112] pimreg3 (unregistering): left allmulticast mode [ 893.312503][T15448] fuse: Unknown parameter 'group_id00000000000000000000' [ 893.678344][T15455] siw: device registration error -23 [ 894.303379][ T5880] Bluetooth: hci2: command tx timeout [ 894.450149][T15474] fuse: Unknown parameter 'group_id00000000000000000000' [ 895.047233][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 895.894428][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 896.359829][ T5880] Bluetooth: hci2: command tx timeout [ 897.678372][T15364] chnl_net:caif_netlink_parms(): no params data found [ 897.765612][T15535] netlink: 'syz.2.3177': attribute type 1 has an invalid length. [ 897.950084][T15538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 897.994836][T15538] bond1: (slave bond2): making interface the new active one [ 898.011992][T15538] bond1: (slave bond2): Enslaving as an active interface with an up link [ 898.128778][T15542] bond1: (slave geneve2): Enslaving as a backup interface with an up link [ 898.371373][T15550] overlayfs: failed to clone upperpath [ 898.436088][ T5880] Bluetooth: hci2: command tx timeout [ 898.457697][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3184'. [ 898.646800][T15568] overlayfs: failed to clone lowerpath [ 898.732475][T15364] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.776058][T15364] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.783356][T15364] bridge_slave_0: entered allmulticast mode [ 898.815080][T15364] bridge_slave_0: entered promiscuous mode [ 898.846506][T15364] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.866534][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 898.882227][T15364] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.916077][T15364] bridge_slave_1: entered allmulticast mode [ 898.924478][T15364] bridge_slave_1: entered promiscuous mode [ 898.941437][T15574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 899.080379][T15364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.109771][ T1112] IPVS: stop unused estimator thread 0... [ 899.187033][T15364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.319736][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 899.353920][T15592] /dev/nullb0: Can't lookup blockdev [ 899.378061][T15364] team0: Port device team_slave_0 added [ 899.478407][T15364] team0: Port device team_slave_1 added [ 899.561138][T15602] overlayfs: failed to resolve './cgroup': -2 [ 899.634735][T15364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.665634][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.715034][T15364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.745669][T15364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.766822][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.793481][T15364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.994965][T15364] hsr_slave_0: entered promiscuous mode [ 900.017310][T15364] hsr_slave_1: entered promiscuous mode [ 900.544629][T15640] overlayfs: failed to clone upperpath [ 900.658031][T15364] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 900.682221][T15364] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 900.717270][T15364] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 900.747513][T15364] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 901.022242][T15364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.068228][T15364] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.102253][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.109710][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.165151][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.172432][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.435162][T15364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.975423][ T5977] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 903.145386][ T5977] usb 6-1: Using ep0 maxpacket: 8 [ 903.154898][ T5977] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 903.198801][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.225549][ T5977] usb 6-1: Product: syz [ 903.236425][ T5977] usb 6-1: Manufacturer: syz [ 903.243382][ T5977] usb 6-1: SerialNumber: syz [ 903.266342][ T5977] usb 6-1: config 0 descriptor?? [ 903.282852][T15364] veth0_vlan: entered promiscuous mode [ 903.298810][ T5977] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 903.328611][T15364] veth1_vlan: entered promiscuous mode [ 903.401996][T15736] lo speed is unknown, defaulting to 1000 [ 903.434297][T15364] veth0_macvtap: entered promiscuous mode [ 903.447434][T15736] lo speed is unknown, defaulting to 1000 [ 903.451942][T15364] veth1_macvtap: entered promiscuous mode [ 903.642492][T15364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.671949][T15364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.743402][ T9430] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.764547][ T9430] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.813977][ T9430] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.853644][ T9430] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.929258][ T5977] gspca_sonixj: reg_w1 err -71 [ 903.947684][ T5977] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 904.000116][ T5977] usb 6-1: USB disconnect, device number 33 [ 904.094851][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.123310][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.168610][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.177626][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.283119][ T30] audit: type=1326 audit(1759247094.356:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15749 comm="syz.7.3098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cd598eec9 code=0x0 [ 904.491055][T15757] overlayfs: failed to clone upperpath [ 904.671010][T15763] overlayfs: failed to clone upperpath [ 904.961263][T15773] overlayfs: failed to clone upperpath [ 905.533796][T15788] loop7: detected capacity change from 0 to 512 [ 905.564200][T15788] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 906.262436][T15814] overlayfs: failed to resolve './file0': -2 [ 906.420011][T15824] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3270'. [ 906.429838][ T813] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 906.558354][T15828] tipc: Started in network mode [ 906.581714][T15828] tipc: Node identity 080211000001, cluster identity 4711 [ 906.590332][T15828] tipc: Enabled bearer , priority 0 [ 906.601414][ T813] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 906.621866][ T813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.646019][ T813] usb 8-1: Product: syz [ 906.682139][ T813] usb 8-1: Manufacturer: syz [ 906.690439][ T813] usb 8-1: SerialNumber: syz [ 906.765686][ T813] usb 8-1: config 0 descriptor?? [ 907.150023][ T813] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 907.189612][T15837] overlayfs: failed to clone upperpath [ 907.619335][T15851] overlayfs: failed to clone upperpath [ 907.705507][ T24] tipc: Node number set to 134418688 [ 908.171315][T15878] netlink: 'syz.1.3294': attribute type 39 has an invalid length. [ 908.575018][ T813] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 908.612051][ T813] usb 8-1: USB disconnect, device number 2 [ 909.060385][T15903] binder: 15902:15903 ioctl c0306201 200000000080 returned -14 [ 909.329927][T15912] fuse: root generation should be zero [ 909.740749][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3315'. [ 909.759078][T15929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.830542][T15929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.515198][T15941] loop7: detected capacity change from 0 to 32768 [ 910.539046][T15941] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 910.762344][T15941] XFS (loop7): Ending clean mount [ 910.779883][T15941] XFS (loop7): Quotacheck needed: Please wait. [ 910.905238][T15978] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 910.942400][T15941] XFS (loop7): Quotacheck: Done. [ 911.096352][T15364] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 911.508424][T15985] netlink: 'syz.1.3337': attribute type 3 has an invalid length. [ 911.518100][T15983] overlayfs: failed to resolve './file0': -2 [ 911.526531][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3337'. [ 911.837689][T16003] fuse: Bad value for 'fd' [ 913.151623][T16022] loop7: detected capacity change from 0 to 1024 [ 913.250611][T16022] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 913.312955][T16022] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 913.363704][T16022] EXT4-fs (loop7): orphan cleanup on readonly fs [ 913.387512][T16022] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.3349: Freeing blocks not in datazone - block = 0, count = 4096 [ 913.442086][T16022] EXT4-fs (loop7): 1 orphan inode deleted [ 913.458014][T16022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 913.532590][T15364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.577730][T16033] overlayfs: failed to resolve './file0': -2 [ 914.846984][T16061] overlayfs: failed to clone upperpath [ 914.862432][T16063] overlayfs: failed to clone upperpath [ 914.998021][T16065] overlayfs: failed to clone upperpath [ 915.393000][T16073] loop7: detected capacity change from 0 to 32768 [ 915.441573][T16073] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 915.616373][T16073] XFS (loop7): Ending clean mount [ 915.810674][T15364] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 916.703544][T16111] lo speed is unknown, defaulting to 1000 [ 916.720977][T16111] lo speed is unknown, defaulting to 1000 [ 919.342272][T16175] overlayfs: failed to clone upperpath [ 919.350984][T16173] overlayfs: failed to clone upperpath [ 919.651489][T16179] bridge: RTM_NEWNEIGH with invalid ether address [ 921.276790][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3420'. [ 921.652297][T16213] lo speed is unknown, defaulting to 1000 [ 921.660926][T16213] lo speed is unknown, defaulting to 1000 [ 922.015932][T16227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.117616][T16224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.192523][T16221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.972938][T16267] overlayfs: failed to clone upperpath [ 924.389729][T16273] netlink: 'syz.2.3444': attribute type 10 has an invalid length. [ 924.400520][T16273] batman_adv: batadv0: Interface deactivated: vlan1 [ 924.412396][T16273] veth0_vlan: left promiscuous mode [ 924.419056][T16273] veth0_vlan: entered promiscuous mode [ 924.427485][T16273] batman_adv: batadv0: Interface activated: vlan1 [ 924.433979][T16273] team0: Device veth0_vlan failed to register rx_handler [ 924.444140][T16273] batman_adv: batadv0: Interface deactivated: vlan1 [ 924.513089][T16146] syz.7.3395 (16146): drop_caches: 1 [ 924.712738][T16282] loop7: detected capacity change from 0 to 128 [ 924.741521][ T30] audit: type=1800 audit(1759247114.816:182): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3448" name="file1" dev="loop7" ino=1048691 res=0 errno=0 [ 924.889490][T16282] syz.7.3448: attempt to access beyond end of device [ 924.889490][T16282] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 924.933665][T16288] syz.7.3448: attempt to access beyond end of device [ 924.933665][T16288] loop7: rw=2049, sector=409, nr_sectors = 80 limit=128 [ 924.952948][T16282] syz.7.3448: attempt to access beyond end of device [ 924.952948][T16282] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 924.994685][T16288] syz.7.3448: attempt to access beyond end of device [ 924.994685][T16288] loop7: rw=2049, sector=505, nr_sectors = 8 limit=128 [ 925.029637][T16282] syz.7.3448: attempt to access beyond end of device [ 925.029637][T16282] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 925.076068][T16282] syz.7.3448: attempt to access beyond end of device [ 925.076068][T16282] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 925.098604][T16282] syz.7.3448: attempt to access beyond end of device [ 925.098604][T16282] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 925.114228][T16282] syz.7.3448: attempt to access beyond end of device [ 925.114228][T16282] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 925.132241][T16282] syz.7.3448: attempt to access beyond end of device [ 925.132241][T16282] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 925.180835][T16282] syz.7.3448: attempt to access beyond end of device [ 925.180835][T16282] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 925.359219][ T36] Buffer I/O error on dev loop7, logical block 409, lost async page write [ 925.699622][T16307] overlayfs: failed to clone upperpath [ 926.951622][T16326] overlayfs: failed to clone upperpath [ 926.985750][ T6039] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 927.166099][ T6039] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.203971][ T6039] usb 8-1: config 0 has no interfaces? [ 927.226300][ T6039] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 927.275561][ T6039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.325823][ T6039] usb 8-1: config 0 descriptor?? [ 927.669753][ T813] usb 8-1: USB disconnect, device number 3 [ 927.893308][T16345] syz_tun: entered allmulticast mode [ 927.941368][T16345] dvmrp8: entered allmulticast mode [ 927.971039][T16344] syz_tun: left allmulticast mode [ 930.555423][ T5949] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 931.262533][T16378] lo speed is unknown, defaulting to 1000 [ 931.269449][T16378] lo speed is unknown, defaulting to 1000 [ 931.451548][T16384] overlayfs: failed to clone upperpath [ 931.548120][ T5949] usb 8-1: Using ep0 maxpacket: 32 [ 931.598643][ T5949] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 931.633007][ T5949] usb 8-1: config 0 has no interface number 0 [ 931.667256][ T5949] usb 8-1: config 0 interface 89 has no altsetting 0 [ 931.707918][ T5949] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 931.745754][T16389] netlink: 'syz.1.3486': attribute type 1 has an invalid length. [ 931.775531][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.787850][ T5949] usb 8-1: Product: syz [ 931.817870][ T5949] usb 8-1: Manufacturer: syz [ 931.856045][ T5949] usb 8-1: SerialNumber: syz [ 931.880685][ T5949] usb 8-1: config 0 descriptor?? [ 931.892618][T16392] bond1: entered promiscuous mode [ 931.943637][T16392] bond1: entered allmulticast mode [ 931.951685][ T5949] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 931.984198][T16392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 932.000111][ T5949] em28xx 8-1:0.89: Video interface 89 found: bulk [ 932.056870][T16394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 932.071128][T16394] bond2: entered promiscuous mode [ 932.077689][T16394] bond2: entered allmulticast mode [ 932.087834][T16394] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 932.279555][T16400] overlayfs: failed to clone upperpath [ 932.564374][ T5949] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 932.593654][T16422] overlayfs: failed to clone upperpath [ 933.867820][ T5949] em28xx 8-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 933.900977][ T5949] em28xx 8-1:0.89: failed to read eeprom (err=-5) [ 933.908112][ T5949] em28xx 8-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 933.988351][ T5949] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 934.008550][ T5949] em28xx 8-1:0.89: analog set to bulk mode. [ 934.021753][ T2156] em28xx 8-1:0.89: Registering V4L2 extension [ 934.048343][ T5949] usb 8-1: USB disconnect, device number 4 [ 934.070663][ T5949] em28xx 8-1:0.89: Disconnecting em28xx [ 934.149937][ T2156] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 934.160231][ T2156] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 934.175574][ T2156] em28xx 8-1:0.89: No AC97 audio processor [ 934.223176][ T2156] usb 8-1: Decoder not found [ 934.232129][ T2156] em28xx 8-1:0.89: failed to create media graph [ 934.242645][ T2156] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 934.270892][ T2156] em28xx 8-1:0.89: Registering snapshot button... [ 934.294304][ T2156] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input11 [ 934.336391][ T2156] em28xx 8-1:0.89: Remote control support is not available for this card. [ 934.345225][ T5949] em28xx 8-1:0.89: Closing input extension [ 934.355594][ T5949] em28xx 8-1:0.89: Deregistering snapshot button [ 934.518883][ T5949] em28xx 8-1:0.89: Freeing device [ 935.517986][T16489] lo speed is unknown, defaulting to 1000 [ 935.530839][T16489] lo speed is unknown, defaulting to 1000 [ 935.802115][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3528'. [ 936.365457][ T5949] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 936.515234][T16537] overlayfs: failed to clone upperpath [ 936.531013][ T5949] usb 8-1: Using ep0 maxpacket: 8 [ 936.540130][ T5949] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 936.565472][ T5949] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.608533][ T5949] usb 8-1: config 0 descriptor?? [ 938.139725][T16566] overlayfs: failed to clone upperpath [ 938.465993][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.472610][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.729326][T16577] overlayfs: failed to clone upperpath [ 938.846579][T16584] fuse: Unknown parameter 'user_i00000000000000000000' [ 938.898005][T16587] overlayfs: failed to clone upperpath [ 938.950881][T16589] netlink: 'syz.5.3562': attribute type 10 has an invalid length. [ 938.982719][T16589] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.008777][T16589] bond0: (slave team0): Enslaving as an active interface with an up link [ 939.468514][ T5949] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 939.492971][ T5949] asix 8-1:0.0: probe with driver asix failed with error -71 [ 939.532650][ T5949] usb 8-1: USB disconnect, device number 5 [ 939.784025][T16611] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3573'. [ 939.795425][T16611] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3573'. [ 939.808200][T16613] overlayfs: failed to clone upperpath [ 939.815949][T16609] overlayfs: failed to resolve './file0/file0': -2 [ 940.256597][T16631] siw: device registration error -23 [ 940.956101][T16636] overlayfs: failed to clone upperpath [ 940.982028][ T30] audit: type=1800 audit(1759247131.046:183): pid=16632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3581" name="/" dev="fuse" ino=9 res=0 errno=0 [ 941.150906][T16642] binder: 16640:16642 ioctl c018620c 200000000400 returned -22 [ 942.099263][T16666] 9pnet_fd: Insufficient options for proto=fd [ 942.953116][T16677] fuse: Bad value for 'fd' [ 943.433852][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3599'. [ 946.884593][T16752] siw: device registration error -23 [ 947.695989][T16757] overlayfs: failed to clone upperpath [ 947.959350][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3624'. [ 947.971769][T16759] veth1_macvtap: left promiscuous mode [ 948.959753][T16790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3638'. [ 949.021328][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3637'. [ 949.726489][T16805] siw: device registration error -23 [ 951.743025][T16824] overlayfs: failed to clone upperpath [ 951.803363][T16828] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 952.199299][T16838] IPVS: Scheduler module ip_vs_sip not found [ 953.048125][T16855] siw: device registration error -23 [ 953.867187][T16862] overlayfs: failed to clone upperpath [ 954.011540][ T30] audit: type=1326 audit(1759247144.086:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.147527][ T30] audit: type=1326 audit(1759247144.086:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.206576][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3667'. [ 954.220622][T16876] netlink: 'syz.1.3670': attribute type 1 has an invalid length. [ 954.284779][ T30] audit: type=1326 audit(1759247144.086:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.353523][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3670'. [ 954.366114][T16876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 954.427766][ T30] audit: type=1326 audit(1759247144.086:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.496670][ T30] audit: type=1326 audit(1759247144.106:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.550067][ T30] audit: type=1326 audit(1759247144.106:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.556329][T16870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.590627][ T30] audit: type=1326 audit(1759247144.106:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.618152][ T30] audit: type=1326 audit(1759247144.106:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.641241][ T30] audit: type=1326 audit(1759247144.106:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.664275][ T30] audit: type=1326 audit(1759247144.106:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x7ffc0000 [ 954.898504][T16872] loop7: detected capacity change from 0 to 32768 [ 954.918195][T16872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3668 (16872) [ 954.993871][T16872] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 955.012518][T16872] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 955.199992][T16872] BTRFS info (device loop7): enabling ssd optimizations [ 955.248318][T16872] BTRFS info (device loop7): enabling free space tree [ 956.728898][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 956.792809][T15364] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 958.415987][T16949] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 959.770019][T16990] overlayfs: failed to resolve './file0': -2 [ 959.865204][T16992] netlink: 'syz.5.3708': attribute type 4 has an invalid length. [ 959.889343][T16992] netlink: 'syz.5.3708': attribute type 4 has an invalid length. [ 960.487404][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 961.081423][T17023] loop7: detected capacity change from 0 to 24 [ 961.088240][T17023] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 961.107752][T17023] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 962.940623][T17050] MTD: Couldn't look up 'memory.events': -15 [ 963.501432][T17050] loop7: detected capacity change from 0 to 32768 [ 963.531789][T17050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3729 (17050) [ 963.584423][T17050] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 963.615258][T17050] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 963.865263][T17050] BTRFS info (device loop7): checking UUID tree [ 963.905570][T17050] BTRFS info (device loop7): setting nodatasum [ 963.911785][T17050] BTRFS info (device loop7): setting nodatacow [ 963.957910][T17050] BTRFS info (device loop7): enabling ssd optimizations [ 964.003318][T17050] BTRFS info (device loop7): turning on async discard [ 964.028851][T17050] BTRFS info (device loop7): enabling free space tree [ 964.907620][T15364] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 965.710584][T17135] loop7: detected capacity change from 0 to 256 [ 965.749668][T17135] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 965.803635][T17135] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 966.726336][T17169] kvm: pic: non byte read [ 966.731364][T17169] kvm: pic: level sensitive irq not supported [ 966.731442][T17169] kvm: pic: non byte read [ 966.743297][T17169] kvm: pic: level sensitive irq not supported [ 966.743357][T17169] kvm: pic: non byte read [ 967.163806][T17189] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 967.206827][ T6039] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 967.447530][ T813] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 968.019647][T17193] orangefs_mount: mount request failed with -4 [ 969.115395][ T9587] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 969.363694][ T9587] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 969.427277][ T9587] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.461182][ T9587] usb 8-1: config 0 descriptor?? [ 970.166985][T17257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.501569][ T9587] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 971.531464][ T9587] asix 8-1:0.0: probe with driver asix failed with error -71 [ 971.560158][ T9587] usb 8-1: USB disconnect, device number 6 [ 972.342367][T17328] loop7: detected capacity change from 0 to 1024 [ 978.128947][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3838'. [ 978.269547][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3838'. [ 979.245262][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3843'. [ 979.780948][T17422] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3853'. [ 983.280165][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 983.280183][ T30] audit: type=1326 audit(1759247173.356:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17466 comm="syz.2.3869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f013d78eec9 code=0x0 [ 983.347169][T17465] lo speed is unknown, defaulting to 1000 [ 983.365188][T17465] lo speed is unknown, defaulting to 1000 [ 986.046641][T17497] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3876'. [ 987.519728][T17497] 0ªX¹¦À: renamed from caif0 [ 987.528486][T17497] 0ªX¹¦À: entered allmulticast mode [ 987.533718][T17497] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 988.293027][T17507] syz_tun: entered allmulticast mode [ 990.352500][T17526] loop7: detected capacity change from 0 to 512 [ 990.396289][T17526] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 990.422883][T17526] EXT4-fs (loop7): orphan cleanup on readonly fs [ 990.463554][T17526] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 990.526150][T17526] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 990.551286][T17526] EXT4-fs error (device loop7): __ext4_iget:5435: inode #16: block 127754: comm syz.7.3886: invalid block [ 990.660861][T17526] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3886: couldn't read orphan inode 16 (err -117) [ 990.695238][T17526] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 991.224199][T15364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.536210][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3895'. [ 994.894018][T17587] loop7: detected capacity change from 0 to 164 [ 995.504349][T17598] overlayfs: failed to clone upperpath [ 995.539954][T17598] overlayfs: failed to clone upperpath [ 996.599469][ T30] audit: type=1326 audit(1759247186.676:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 996.876931][ T30] audit: type=1326 audit(1759247186.676:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 996.942082][ T30] audit: type=1326 audit(1759247186.676:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 997.531944][ T30] audit: type=1326 audit(1759247186.676:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 997.554339][ T30] audit: type=1326 audit(1759247186.676:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 997.582890][ T30] audit: type=1326 audit(1759247186.676:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 997.618040][ T30] audit: type=1326 audit(1759247186.676:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 997.683851][ T30] audit: type=1326 audit(1759247186.676:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 997.707194][ T30] audit: type=1326 audit(1759247186.676:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 997.730234][ T30] audit: type=1326 audit(1759247186.676:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.7.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd598eec9 code=0x50000 [ 997.852311][T17634] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 997.877444][T17634] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 999.384625][T17661] overlayfs: failed to clone upperpath [ 999.926539][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.933508][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.419131][T17685] netlink: 'syz.5.3942': attribute type 4 has an invalid length. [ 1000.458780][T17685] netlink: 'syz.5.3942': attribute type 4 has an invalid length. [ 1000.494459][T17690] netlink: 'syz.1.3943': attribute type 10 has an invalid length. [ 1001.261319][T17690] wlan1: mtu less than device minimum [ 1001.271405][T17690] : (slave wlan1): Error -22 calling dev_set_mtu [ 1001.364027][T17700] warn_alloc: 1 callbacks suppressed [ 1001.364047][T17700] syz.3.3946: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1001.435807][T17700] CPU: 1 UID: 0 PID: 17700 Comm: syz.3.3946 Not tainted syzkaller #0 PREEMPT(full) [ 1001.435873][T17700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1001.435886][T17700] Call Trace: [ 1001.435894][T17700] [ 1001.435907][T17700] dump_stack_lvl+0x189/0x250 [ 1001.435940][T17700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1001.435964][T17700] ? __pfx__printk+0x10/0x10 [ 1001.435993][T17700] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1001.436017][T17700] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1001.436041][T17700] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1001.436066][T17700] warn_alloc+0x214/0x310 [ 1001.436090][T17700] ? stack_depot_save_flags+0x40/0x860 [ 1001.436118][T17700] ? __pfx_warn_alloc+0x10/0x10 [ 1001.436142][T17700] ? kasan_save_track+0x3e/0x80 [ 1001.436162][T17700] ? __kasan_kmalloc+0x93/0xb0 [ 1001.436186][T17700] ? xsk_setsockopt+0x4dc/0x8d0 [ 1001.436206][T17700] ? do_sock_setsockopt+0x17c/0x1b0 [ 1001.436229][T17700] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1001.436252][T17700] ? do_syscall_64+0xfa/0xfa0 [ 1001.436275][T17700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.436306][T17700] __vmalloc_node_range_noprof+0x125/0x12d0 [ 1001.436361][T17700] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1001.436388][T17700] ? __kasan_kmalloc+0x93/0xb0 [ 1001.436418][T17700] vmalloc_user_noprof+0xad/0xf0 [ 1001.436441][T17700] ? xskq_create+0xbf/0x170 [ 1001.436465][T17700] xskq_create+0xbf/0x170 [ 1001.436490][T17700] xsk_init_queue+0xb0/0x110 [ 1001.436514][T17700] xsk_setsockopt+0x4dc/0x8d0 [ 1001.436538][T17700] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1001.436562][T17700] ? __pfx_aa_sk_perm+0x10/0x10 [ 1001.436586][T17700] ? aa_sock_opt_perm+0xff/0x1b0 [ 1001.436615][T17700] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1001.436642][T17700] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1001.436664][T17700] do_sock_setsockopt+0x17c/0x1b0 [ 1001.436695][T17700] __x64_sys_setsockopt+0x13f/0x1b0 [ 1001.436726][T17700] do_syscall_64+0xfa/0xfa0 [ 1001.436749][T17700] ? lockdep_hardirqs_on+0x9c/0x150 [ 1001.436774][T17700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.436794][T17700] ? clear_bhb_loop+0x60/0xb0 [ 1001.436818][T17700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.436837][T17700] RIP: 0033:0x7f32cb18eec9 [ 1001.436856][T17700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.436881][T17700] RSP: 002b:00007f32cc0a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1001.436903][T17700] RAX: ffffffffffffffda RBX: 00007f32cb3e5fa0 RCX: 00007f32cb18eec9 [ 1001.436919][T17700] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1001.436932][T17700] RBP: 00007f32cb211f91 R08: 0000000000000004 R09: 0000000000000000 [ 1001.436945][T17700] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 1001.436958][T17700] R13: 00007f32cb3e6038 R14: 00007f32cb3e5fa0 R15: 00007fffbdab7458 [ 1001.436994][T17700] [ 1001.734199][T17700] Mem-Info: [ 1001.738131][T17700] active_anon:27437 inactive_anon:0 isolated_anon:0 [ 1001.738131][T17700] active_file:14109 inactive_file:3611 isolated_file:0 [ 1001.738131][T17700] unevictable:17162 dirty:201 writeback:0 [ 1001.738131][T17700] slab_reclaimable:11917 slab_unreclaimable:129075 [ 1001.738131][T17700] mapped:30791 shmem:23170 pagetables:1601 [ 1001.738131][T17700] sec_pagetables:0 bounce:0 [ 1001.738131][T17700] kernel_misc_reclaimable:0 [ 1001.738131][T17700] free:1265169 free_pcp:22516 free_cma:0 [ 1001.784479][T17700] Node 0 active_anon:109848kB inactive_anon:0kB active_file:56436kB inactive_file:14304kB unevictable:67112kB isolated(anon):0kB isolated(file):0kB mapped:123164kB dirty:804kB writeback:0kB shmem:91144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12136kB pagetables:6172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1001.819507][T17700] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1001.849425][T17700] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1001.880013][T17700] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 1001.886231][T17700] Node 0 DMA32 free:1181996kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112048kB inactive_anon:0kB active_file:56436kB inactive_file:14304kB unevictable:67112kB writepending:804kB zspages:0kB present:3129332kB managed:2551108kB mlocked:0kB bounce:0kB free_pcp:47028kB local_pcp:23396kB free_cma:0kB [ 1001.919873][T17700] lowmem_reserve[]: 0 0 0 0 0 [ 1001.924623][T17700] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1001.953989][T17700] lowmem_reserve[]: 0 0 0 0 0 [ 1001.958812][T17700] Node 1 Normal free:3861352kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:44364kB local_pcp:17432kB free_cma:0kB [ 1001.991686][T17700] lowmem_reserve[]: 0 0 0 0 0 [ 1001.996829][T17700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1002.011368][T17700] Node 0 DMA32: 1048*4kB (M) 477*8kB (UME) 753*16kB (ME) 1008*32kB (UME) 595*64kB (UM) 348*128kB (UME) 102*256kB (UM) 51*512kB (UME) 43*1024kB (UME) 18*2048kB (UME) 223*4096kB (UM) = 1181464kB [ 1002.030610][T17700] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1002.042544][T17700] Node 1 Normal: 9*4kB (UME) 9*8kB (UE) 25*16kB (UME) 143*32kB (UME) 7*64kB (UME) 6*128kB (UME) 5*256kB (UME) 7*512kB (UM) 6*1024kB (UME) 3*2048kB (UE) 937*4096kB (M) = 3861404kB [ 1002.060612][T17700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1002.070346][T17700] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1002.082512][T17700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1002.108698][T17700] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1002.137001][T17700] 57921 total pagecache pages [ 1002.264811][T17700] 0 pages in swap cache [ 1002.269387][T17700] Free swap = 124996kB [ 1002.273562][T17700] Total swap = 124996kB [ 1002.288234][T17700] 2097051 pages RAM [ 1002.292365][T17700] 0 pages HighMem/MovableOnly [ 1002.297144][T17700] 427504 pages reserved [ 1002.301400][T17700] 0 pages cma reserved [ 1003.720422][T17732] siw: device registration error -23 [ 1007.592184][T17771] loop3: detected capacity change from 0 to 7 [ 1007.622553][T17771] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1007.659460][T17771] loop3: p1 start 270073855 is beyond EOD, truncated [ 1007.692785][T17771] loop3: p2 start 65536 is beyond EOD, truncated [ 1007.722147][T17771] loop3: p3 size 524288 extends beyond EOD, truncated [ 1007.763688][T17771] loop3: p4 start 536870912 is beyond EOD, truncated [ 1007.785267][T17771] loop3: p5 size 327680 extends beyond EOD, truncated [ 1007.814805][T17771] loop3: p6 start 526080 is beyond EOD, truncated [ 1007.853955][T17771] loop3: p7 start 2037579779 is beyond EOD, truncated [ 1015.932572][T17859] lo speed is unknown, defaulting to 1000 [ 1015.961347][T17859] lo speed is unknown, defaulting to 1000 [ 1016.310365][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1017.067067][T17881] syz_tun (unregistering): left allmulticast mode [ 1017.320347][T13516] Bluetooth: hci2: command 0x0406 tx timeout [ 1019.154818][T17903] batman_adv: batadv0: Adding interface: dummy0 [ 1019.322585][T17903] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.355575][T17903] batman_adv: batadv0: Interface activated: dummy0 [ 1021.047701][T17912] loop7: detected capacity change from 0 to 1024 [ 1022.156933][T17927] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1029.827881][T17999] tipc: Failed to remove unknown binding: 66,1,1/0:2103423174/2103423176 [ 1029.851126][T17999] tipc: Failed to remove unknown binding: 66,1,1/0:2103423174/2103423176 [ 1029.869633][T17999] tipc: Failed to remove unknown binding: 66,1,1/0:2103423174/2103423176 [ 1038.474780][T18066] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 1038.519866][T18058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 1038.872265][T18058] bond0: (slave dummy0): Releasing backup interface [ 1039.498389][T18068] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1039.574609][T18069] veth5: entered promiscuous mode [ 1039.597335][T18069] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 1039.869661][T18080] netlink: 'syz.7.4051': attribute type 1 has an invalid length. [ 1040.048042][T18080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1040.138317][T18086] vlan2: entered allmulticast mode [ 1040.148864][T18086] bond1: entered allmulticast mode [ 1040.179122][T18089] bond1: (slave gretap1): making interface the new active one [ 1040.188731][T18089] gretap1: entered allmulticast mode [ 1040.198858][T18089] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1040.837419][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1042.487129][T18122] overlayfs: failed to resolve './file0': -2 [ 1043.012733][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4063'. [ 1047.769232][T18186] vlan3: entered promiscuous mode [ 1049.575423][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 1050.345670][ T813] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1050.972732][ T813] usb 8-1: config 0 has no interfaces? [ 1050.979430][ T813] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1051.001232][ T813] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1051.032765][ T813] usb 8-1: Manufacturer: syz [ 1051.056635][ T813] usb 8-1: config 0 descriptor?? [ 1051.552351][T18221] loop7: detected capacity change from 0 to 4096 [ 1051.693018][T18221] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1051.785138][T18221] ntfs3(loop7): Failed to load $Extend (-22). [ 1051.794708][T18221] ntfs3(loop7): Failed to initialize $Extend. [ 1051.884291][ T5949] usb 8-1: USB disconnect, device number 7 [ 1060.188807][T18322] netlink: 'syz.2.4119': attribute type 10 has an invalid length. [ 1060.865190][T18322] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1061.336143][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.342772][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.192059][T18364] netlink: 'syz.5.4130': attribute type 10 has an invalid length. [ 1065.559454][T18365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1066.201106][T18364] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1066.302340][T17768] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1066.318576][T18364] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1066.398103][T17768] bond1: (slave macvlan2): link status up again after 0 ms [ 1066.455166][T17768] bond1: (slave macvlan2): failed to get link speed/duplex [ 1066.578436][T17768] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1066.778793][T17768] bond1: (slave macvlan2): failed to get link speed/duplex [ 1067.295174][T18394] overlayfs: failed to clone upperpath [ 1067.783101][ T1156] bond1: (slave macvlan2): failed to get link speed/duplex [ 1067.912254][T17768] bond1: (slave macvlan2): failed to get link speed/duplex [ 1068.116354][ T1112] bond1: (slave macvlan2): failed to get link speed/duplex [ 1068.996681][ T1156] bond1: (slave macvlan2): failed to get link speed/duplex [ 1069.138680][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1069.147199][T18414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1069.154413][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 1069.161695][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 1069.168946][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.129458][ T9430] net_ratelimit: 3 callbacks suppressed [ 1072.129480][ T9430] bond1: (slave macvlan2): failed to get link speed/duplex [ 1072.364219][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1072.596946][T17768] bond1: (slave macvlan2): failed to get link speed/duplex [ 1073.429148][ T1112] bond1: (slave macvlan2): failed to get link speed/duplex [ 1073.545752][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1073.802439][T18463] sctp: [Deprecated]: syz.2.4156 (pid 18463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1073.802439][T18463] Use struct sctp_sack_info instead [ 1074.648102][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1074.955520][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4157'. [ 1074.959432][ T1156] bond1: (slave macvlan2): failed to get link speed/duplex [ 1075.149596][T18472] vlan2: entered promiscuous mode [ 1075.218978][T18472] bond0: entered promiscuous mode [ 1075.224336][T18472] .@Yÿ: entered promiscuous mode [ 1075.235553][T18472] bond_slave_1: entered promiscuous mode [ 1075.241518][T18472] team0: entered promiscuous mode [ 1075.246677][T18472] team_slave_0: entered promiscuous mode [ 1075.252569][T18472] team_slave_1: entered promiscuous mode [ 1076.125834][T17768] bond1: (slave macvlan2): failed to get link speed/duplex [ 1076.755638][ T1156] bond1: (slave macvlan2): failed to get link speed/duplex [ 1077.198160][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1077.345747][ T1112] bond1: (slave macvlan2): failed to get link speed/duplex [ 1077.595603][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 1078.380503][ T1112] bond1: (slave macvlan2): failed to get link speed/duplex [ 1078.604881][T17768] bond1: (slave macvlan2): failed to get link speed/duplex [ 1078.781063][T18507] loop7: detected capacity change from 0 to 256 [ 1079.423030][ T9430] bond1: (slave macvlan2): failed to get link speed/duplex [ 1079.672940][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 1079.709471][T18507] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1185.295344][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1185.302346][ C0] rcu: 1-...!: (1 GPs behind) idle=c7bc/1/0x4000000000000000 softirq=88731/88732 fqs=836 [ 1185.314574][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18517/1:b..l [ 1185.322597][ C0] rcu: (detected by 0, t=10505 jiffies, g=88137, q=151 ncpus=2) [ 1185.330332][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1185.330361][ C1] NMI backtrace for cpu 1 [ 1185.330377][ C1] CPU: 1 UID: 0 PID: 18518 Comm: syz.3.4172 Not tainted syzkaller #0 PREEMPT(full) [ 1185.330396][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1185.330407][ C1] RIP: 0010:check_preemption_disabled+0x40/0x120 [ 1185.330437][ C1] Code: 08 65 8b 05 e6 64 42 07 65 8b 0d db 64 42 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d bb 64 42 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 04 24 00 00 [ 1185.330453][ C1] RSP: 0018:ffffc90000a08ae8 EFLAGS: 00000046 [ 1185.330467][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: adf8eefa1f7f8700 [ 1185.330478][ C1] RDX: 0000000000000000 RSI: ffffffff8c03da40 RDI: ffffffff8c03da00 [ 1185.330490][ C1] RBP: ffffffff84d744fb R08: 0000000000000001 R09: 0000000000000000 [ 1185.330501][ C1] R10: ffffc90000a08ca0 R11: fffff52000141196 R12: 0000000000000000 [ 1185.330513][ C1] R13: ffffffff99efb650 R14: 0000000000000000 R15: 0000000000000001 [ 1185.330524][ C1] FS: 00007f32cc0636c0(0000) GS:ffff888125afc000(0000) knlGS:0000000000000000 [ 1185.330539][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1185.330550][ C1] CR2: 0000001b33e1dff8 CR3: 00000000227e6000 CR4: 00000000003526f0 [ 1185.330565][ C1] Call Trace: [ 1185.330574][ C1] [ 1185.330584][ C1] ? debug_object_activate+0xbb/0x420 [ 1185.330604][ C1] rcu_is_watching+0x15/0xb0 [ 1185.330620][ C1] lock_acquire+0x5f/0x360 [ 1185.330644][ C1] ? __lock_acquire+0xab9/0xd20 [ 1185.330668][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1185.330687][ C1] ? debug_object_activate+0xbb/0x420 [ 1185.330705][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1185.330724][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1185.330746][ C1] debug_object_activate+0xbb/0x420 [ 1185.330771][ C1] enqueue_hrtimer+0x30/0x3a0 [ 1185.330788][ C1] __hrtimer_run_queues+0x656/0xc60 [ 1185.330822][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1185.330845][ C1] ? read_tsc+0x9/0x20 [ 1185.330870][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1185.330913][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1185.330941][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1185.330961][ C1] [ 1185.330967][ C1] [ 1185.330973][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1185.330991][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1185.331011][ C1] Code: 74 05 e8 2b b2 45 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 3a 0e f6 65 8b 05 dc e8 3f 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1185.331025][ C1] RSP: 0018:ffffc90003097b60 EFLAGS: 00000206 [ 1185.331040][ C1] RAX: adf8eefa1f7f8700 RBX: 0000000000000a06 RCX: adf8eefa1f7f8700 [ 1185.331052][ C1] RDX: 0000000000000007 RSI: ffffffff8dba1162 RDI: 0000000000000001 [ 1185.331063][ C1] RBP: ffffc90003097bf0 R08: ffffffff8fc36c77 R09: 1ffffffff1f86d8e [ 1185.331076][ C1] R10: dffffc0000000000 R11: fffffbfff1f86d8f R12: dffffc0000000000 [ 1185.331088][ C1] R13: ffff8880b8627ac0 R14: ffff8880b8627ac0 R15: 1ffff92000612f6c [ 1185.331111][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1185.331129][ C1] ? read_tsc+0x9/0x20 [ 1185.331152][ C1] clock_was_set+0x63b/0x7c0 [ 1185.331181][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 1185.331202][ C1] ? do_settimeofday64+0x2df/0x630 [ 1185.331222][ C1] ? timekeeping_update_from_shadow+0x2df/0x380 [ 1185.331243][ C1] do_settimeofday64+0x41d/0x630 [ 1185.331264][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 1185.331282][ C1] ? apple_probe+0x11e7/0x12b0 [ 1185.331300][ C1] ? bpf_lsm_settime+0x9/0x20 [ 1185.331316][ C1] ? security_settime64+0x76/0x290 [ 1185.331335][ C1] ? do_sys_settimeofday64+0x163/0x260 [ 1185.331357][ C1] __x64_sys_clock_settime+0x22c/0x280 [ 1185.331380][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1185.331403][ C1] ? do_syscall_64+0xbe/0xfa0 [ 1185.331425][ C1] do_syscall_64+0xfa/0xfa0 [ 1185.331446][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.331462][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1185.331478][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1185.331497][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.331513][ C1] RIP: 0033:0x7f32cb18eec9 [ 1185.331529][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.331543][ C1] RSP: 002b:00007f32cc063038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1185.331560][ C1] RAX: ffffffffffffffda RBX: 00007f32cb3e6180 RCX: 00007f32cb18eec9 [ 1185.331572][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 1185.331583][ C1] RBP: 00007f32cb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1185.331594][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1185.331604][ C1] R13: 00007f32cb3e6218 R14: 00007f32cb3e6180 R15: 00007fffbdab7458 [ 1185.331626][ C1] [ 1185.332355][ C0] task:syz.1.4174 state:R running task stack:21192 pid:18517 tgid:18510 ppid:5881 task_flags:0x400140 flags:0x00080001 [ 1185.821419][ C0] Call Trace: [ 1185.824697][ C0] [ 1185.827641][ C0] __schedule+0x1798/0x4cc0 [ 1185.832188][ C0] ? __pfx___schedule+0x10/0x10 [ 1185.837062][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1185.842362][ C0] preempt_schedule_irq+0xb5/0x150 [ 1185.847485][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1185.853225][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1185.859056][ C0] irqentry_exit+0x6f/0x90 [ 1185.863485][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1185.869474][ C0] RIP: 0010:deref_stack_reg+0x1a7/0x230 [ 1185.875027][ C0] Code: 46 49 8d 40 08 48 39 d8 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 <48> 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 03 a2 b1 00 [ 1185.894639][ C0] RSP: 0018:ffffc9000472da20 EFLAGS: 00000202 [ 1185.900710][ C0] RAX: ffffc9000472f8b0 RBX: ffffc9000472db88 RCX: 0000000000000001 [ 1185.908687][ C0] RDX: ffffc9000472db88 RSI: dffffc0000000000 RDI: ffffc9000472f7b0 [ 1185.916661][ C0] RBP: 1ffff920008e5b69 R08: ffffc9000472f7b0 R09: 0000000000000000 [ 1185.924633][ C0] R10: ffffc9000472db98 R11: fffff520008e5b75 R12: 1ffff920008e5b6a [ 1185.932609][ C0] R13: 1ffff920008e5b6b R14: ffffc9000472f8b0 R15: dffffc0000000000 [ 1185.940617][ C0] unwind_next_frame+0x17c4/0x2390 [ 1185.945744][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1185.950858][ C0] ? netlink_rcv_skb+0x208/0x470 [ 1185.955812][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1185.961979][ C0] arch_stack_walk+0x11c/0x150 [ 1185.966756][ C0] ? netlink_unicast+0x82f/0x9e0 [ 1185.971710][ C0] stack_trace_save+0x9c/0xe0 [ 1185.976409][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1185.981800][ C0] kasan_save_track+0x3e/0x80 [ 1185.986483][ C0] ? kasan_save_track+0x3e/0x80 [ 1185.991337][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1185.996113][ C0] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1186.001666][ C0] ? ref_tracker_alloc+0x133/0x460 [ 1186.006787][ C0] ? netdev_get_by_index+0x79/0xb0 [ 1186.011912][ C0] ? fib6_nh_init+0x1cd/0x2020 [ 1186.016691][ C0] ? ip6_route_info_create_nh+0x16a/0xab0 [ 1186.022418][ C0] ? addrconf_f6i_alloc+0x203/0x450 [ 1186.027620][ C0] ? ipv6_add_addr+0x56e/0x1090 [ 1186.032482][ C0] ? add_addr+0x8b/0x2d0 [ 1186.036729][ C0] ? add_v4_addrs+0x70c/0xbd0 [ 1186.041411][ C0] ? addrconf_init_auto_addrs+0x6da/0xa30 [ 1186.047134][ C0] ? addrconf_notify+0xacc/0x1010 [ 1186.052596][ C0] ? notifier_call_chain+0x1b6/0x3e0 [ 1186.057882][ C0] ? __dev_notify_flags+0x18d/0x2e0 [ 1186.063092][ C0] ? rtnl_newlink_create+0x61c/0xb00 [ 1186.068385][ C0] ? rtnl_newlink+0x16e4/0x1c80 [ 1186.073242][ C0] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 1186.078359][ C0] ? netlink_rcv_skb+0x208/0x470 [ 1186.083342][ C0] __kasan_kmalloc+0x93/0xb0 [ 1186.087948][ C0] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1186.093330][ C0] ? ref_tracker_alloc+0x133/0x460 [ 1186.098459][ C0] ref_tracker_alloc+0x133/0x460 [ 1186.103408][ C0] ? add_v4_addrs+0x70c/0xbd0 [ 1186.108093][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1186.113563][ C0] ? __dev_notify_flags+0x18d/0x2e0 [ 1186.118785][ C0] ? rtnl_newlink_create+0x61c/0xb00 [ 1186.124097][ C0] ? rtnl_newlink+0x16e4/0x1c80 [ 1186.128954][ C0] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 1186.134068][ C0] ? netlink_rcv_skb+0x208/0x470 [ 1186.139012][ C0] ? netlink_unicast+0x82f/0x9e0 [ 1186.143961][ C0] ? dev_get_by_index+0x22/0x2f0 [ 1186.148928][ C0] ? dev_get_by_index+0x22/0x2f0 [ 1186.153878][ C0] ? dev_get_by_index+0x22/0x2f0 [ 1186.158836][ C0] ? dev_get_by_index+0x22/0x2f0 [ 1186.163803][ C0] netdev_get_by_index+0x79/0xb0 [ 1186.168784][ C0] fib6_nh_init+0x1cd/0x2020 [ 1186.173379][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1186.178773][ C0] ? __pfx_fib6_nh_init+0x10/0x10 [ 1186.183807][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1186.188579][ C0] ? __kmalloc_noprof+0x411/0x7f0 [ 1186.193607][ C0] ? fib6_info_alloc+0x30/0xf0 [ 1186.198381][ C0] ? ip6_route_info_create+0x142/0x860 [ 1186.203846][ C0] ? addrconf_f6i_alloc+0x1d2/0x450 [ 1186.209051][ C0] ? ipv6_add_addr+0x56e/0x1090 [ 1186.213922][ C0] ? add_addr+0x8b/0x2d0 [ 1186.218176][ C0] ? add_v4_addrs+0x70c/0xbd0 [ 1186.222860][ C0] ? addrconf_init_auto_addrs+0x6da/0xa30 [ 1186.228591][ C0] ? addrconf_notify+0xacc/0x1010 [ 1186.233621][ C0] ? notifier_call_chain+0x1b6/0x3e0 [ 1186.238937][ C0] ? __dev_notify_flags+0x18d/0x2e0 [ 1186.244144][ C0] ? rtnl_newlink_create+0x61c/0xb00 [ 1186.249438][ C0] ? rtnl_newlink+0x16e4/0x1c80 [ 1186.254293][ C0] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 1186.259452][ C0] ? netlink_rcv_skb+0x208/0x470 [ 1186.264398][ C0] ? netlink_unicast+0x82f/0x9e0 [ 1186.269336][ C0] ? netlink_sendmsg+0x805/0xb30 [ 1186.274277][ C0] ? __sock_sendmsg+0x21c/0x270 [ 1186.279146][ C0] ? ____sys_sendmsg+0x505/0x830 [ 1186.284089][ C0] ? ___sys_sendmsg+0x21f/0x2a0 [ 1186.288952][ C0] ? __x64_sys_sendmsg+0x19b/0x260 [ 1186.294067][ C0] ? do_syscall_64+0xfa/0xfa0 [ 1186.298752][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.304852][ C0] ? ip_fib_metrics_init+0x404/0x6f0 [ 1186.310161][ C0] ip6_route_info_create_nh+0x16a/0xab0 [ 1186.315725][ C0] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 1186.321811][ C0] addrconf_f6i_alloc+0x203/0x450 [ 1186.326852][ C0] ? __pfx_addrconf_f6i_alloc+0x10/0x10 [ 1186.332428][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1186.337202][ C0] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1186.342767][ C0] ipv6_add_addr+0x56e/0x1090 [ 1186.347465][ C0] ? __pfx_ipv6_add_addr+0x10/0x10 [ 1186.352585][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1186.357972][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1186.362651][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1186.368039][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1186.373785][ C0] add_addr+0x8b/0x2d0 [ 1186.377873][ C0] add_v4_addrs+0x70c/0xbd0 [ 1186.382398][ C0] ? __pfx_add_v4_addrs+0x10/0x10 [ 1186.387429][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1186.392832][ C0] ? addrconf_add_dev+0x24f/0x340 [ 1186.397863][ C0] ? __pfx_addrconf_add_dev+0x10/0x10 [ 1186.403266][ C0] ? addrconf_permanent_addr+0x917/0x9d0 [ 1186.408926][ C0] addrconf_init_auto_addrs+0x6da/0xa30 [ 1186.414490][ C0] ? __pfx_addrconf_init_auto_addrs+0x10/0x10 [ 1186.420571][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1186.426224][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1186.432216][ C0] ? tls_dev_event+0x720/0xec0 [ 1186.437004][ C0] ? addrconf_link_ready+0x112/0x170 [ 1186.442303][ C0] addrconf_notify+0xacc/0x1010 [ 1186.447170][ C0] notifier_call_chain+0x1b6/0x3e0 [ 1186.452292][ C0] __dev_notify_flags+0x18d/0x2e0 [ 1186.457329][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 1186.462880][ C0] ? __dev_change_flags+0x4cc/0x6d0 [ 1186.468100][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 1186.473664][ C0] rtnl_newlink_create+0x61c/0xb00 [ 1186.478799][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1186.484448][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1186.489501][ C0] ? ns_capable+0x8a/0xf0 [ 1186.493846][ C0] rtnl_newlink+0x16e4/0x1c80 [ 1186.498532][ C0] ? ____sys_sendmsg+0x505/0x830 [ 1186.503490][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1186.508548][ C0] ? __lock_acquire+0xab9/0xd20 [ 1186.513420][ C0] ? __lock_acquire+0xab9/0xd20 [ 1186.518303][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1186.523522][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1186.528819][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1186.534032][ C0] ? kernel_text_address+0xa5/0xe0 [ 1186.539150][ C0] ? __kernel_text_address+0xd/0x40 [ 1186.544351][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1186.549993][ C0] ? __lock_acquire+0xab9/0xd20 [ 1186.554888][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1186.559919][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1186.564873][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1186.570001][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1186.575465][ C0] ? netlink_sendmsg+0x805/0xb30 [ 1186.580501][ C0] ? __sock_sendmsg+0x21c/0x270 [ 1186.585365][ C0] ? ____sys_sendmsg+0x505/0x830 [ 1186.590307][ C0] ? ___sys_sendmsg+0x21f/0x2a0 [ 1186.595162][ C0] ? __x64_sys_sendmsg+0x19b/0x260 [ 1186.600282][ C0] ? do_syscall_64+0xfa/0xfa0 [ 1186.604988][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.611092][ C0] netlink_rcv_skb+0x208/0x470 [ 1186.615879][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1186.621345][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1186.626645][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.631862][ C0] netlink_unicast+0x82f/0x9e0 [ 1186.636641][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1186.641934][ C0] ? netlink_sendmsg+0x642/0xb30 [ 1186.646877][ C0] ? skb_put+0x11b/0x210 [ 1186.651134][ C0] netlink_sendmsg+0x805/0xb30 [ 1186.655916][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.661211][ C0] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1186.666162][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1186.671457][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.676755][ C0] __sock_sendmsg+0x21c/0x270 [ 1186.681459][ C0] ____sys_sendmsg+0x505/0x830 [ 1186.686242][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1186.691548][ C0] ? import_iovec+0x74/0xa0 [ 1186.696061][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 1186.700753][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1186.706002][ C0] ? __fget_files+0x2a/0x420 [ 1186.710604][ C0] ? __fget_files+0x3a0/0x420 [ 1186.715301][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 1186.720254][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1186.725739][ C0] ? do_syscall_64+0xbe/0xfa0 [ 1186.730429][ C0] do_syscall_64+0xfa/0xfa0 [ 1186.734946][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1186.740150][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.746223][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1186.750911][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.756812][ C0] RIP: 0033:0x7efe05f8eec9 [ 1186.761229][ C0] RSP: 002b:00007efe06d65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.769651][ C0] RAX: ffffffffffffffda RBX: 00007efe061e5fa0 RCX: 00007efe05f8eec9 [ 1186.777628][ C0] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1186.785601][ C0] RBP: 00007efe06011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1186.793573][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.801548][ C0] R13: 00007efe061e6038 R14: 00007efe061e5fa0 R15: 00007fff368a7268 [ 1186.809546][ C0] [ 1186.812568][ C0] rcu: rcu_preempt kthread starved for 6325 jiffies! g88137 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1186.823680][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1186.833648][ C0] rcu: RCU grace-period kthread stack dump: [ 1186.839530][ C0] task:rcu_preempt state:R running task stack:26464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1186.853032][ C0] Call Trace: [ 1186.856316][ C0] [ 1186.859254][ C0] __schedule+0x1798/0x4cc0 [ 1186.863797][ C0] ? __pfx___schedule+0x10/0x10 [ 1186.868672][ C0] ? schedule+0x91/0x360 [ 1186.872950][ C0] schedule+0x165/0x360 [ 1186.877117][ C0] schedule_timeout+0x12b/0x270 [ 1186.881973][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1186.887345][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1186.893250][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1186.898543][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1186.904104][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1186.908983][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1186.915151][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1186.920445][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1186.926004][ C0] ? finish_swait+0xcd/0x1f0 [ 1186.930606][ C0] rcu_gp_kthread+0x99/0x390 [ 1186.935216][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1186.940427][ C0] ? __kthread_parkme+0x7b/0x200 [ 1186.945371][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1186.950410][ C0] kthread+0x711/0x8a0 [ 1186.954490][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1186.959707][ C0] ? __pfx_kthread+0x10/0x10 [ 1186.964308][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1186.969518][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1186.974728][ C0] ? __pfx_kthread+0x10/0x10 [ 1186.979331][ C0] ret_from_fork+0x4bc/0x870 [ 1186.983939][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1186.989070][ C0] ? __switch_to_asm+0x39/0x70 [ 1186.993853][ C0] ? __switch_to_asm+0x33/0x70 [ 1186.998625][ C0] ? __pfx_kthread+0x10/0x10 [ 1187.003229][ C0] ret_from_fork_asm+0x1a/0x30 [ 1187.008021][ C0] [ 1187.011040][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1187.017366][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1187.026305][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1187.036368][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1187.042101][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 71 28 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1187.061715][ C0] RSP: 0018:ffffffff8e007d80 EFLAGS: 000002c6 [ 1187.067799][ C0] RAX: c48495e83244d300 RBX: ffffffff81971c07 RCX: c48495e83244d300 [ 1187.075781][ C0] RDX: 0000000000000001 RSI: ffffffff8dba1162 RDI: ffffffff8c03da60 [ 1187.083757][ C0] RBP: ffffffff8e007ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 1187.091743][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8fc36c70 [ 1187.099725][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c12a40 [ 1187.107727][ C0] FS: 0000000000000000(0000) GS:ffff8881259fc000(0000) knlGS:0000000000000000 [ 1187.116672][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1187.123261][ C0] CR2: 00007fbfcaf8dd30 CR3: 000000007548e000 CR4: 00000000003526f0 [ 1187.131241][ C0] Call Trace: [ 1187.134526][ C0] [ 1187.137458][ C0] default_idle+0x13/0x20 [ 1187.141807][ C0] default_idle_call+0x73/0xb0 [ 1187.146588][ C0] do_idle+0x1e7/0x510 [ 1187.150683][ C0] ? __pfx_do_idle+0x10/0x10 [ 1187.155338][ C0] cpu_startup_entry+0x44/0x60 [ 1187.160123][ C0] rest_init+0x2de/0x300 [ 1187.164373][ C0] start_kernel+0x3ae/0x410 [ 1187.169001][ C0] x86_64_start_reservations+0x24/0x30 [ 1187.174572][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1187.179702][ C0] common_startup_64+0x13e/0x147 [ 1187.184671][ C0]