last executing test programs: 11m33.963642448s ago: executing program 2 (id=2501): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x9, 0x13, @l2={'ib', 0x3a, 'pim6reg\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x880) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000c0a01, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket(0x2c, 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000080)) 11m33.783285043s ago: executing program 2 (id=2502): getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000080)=0x31) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket$kcm(0xa, 0x3, 0x73) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 11m33.410969956s ago: executing program 2 (id=2503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) io_pgetevents(0x0, 0xa5, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x832, 0x5f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000000)=0x4, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00000000000000000000000700000001070b05e00000010a0101010000000020687b"], 0x20}, 0x800) 11m32.432213098s ago: executing program 2 (id=2504): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x4}) 11m25.179127068s ago: executing program 2 (id=2520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff78, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d33c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) socket$inet_tcp(0x2, 0x1, 0x0) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f00000003c0), 0x0, 0x0) 11m23.520986673s ago: executing program 2 (id=2524): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) io_setup(0x200, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x197, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)=ANY=[]) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0x44, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 11m7.721154406s ago: executing program 32 (id=2524): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) io_setup(0x200, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x197, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)=ANY=[]) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0x44, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 8m0.067443597s ago: executing program 4 (id=3019): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r1 = socket$key(0xf, 0x3, 0x2) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r1) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="100000002500040026bd7000ffdbdf252049127a59b68955328fff56043b109de769763124f475a7e7d4873079365bfc40a28c6089c08aa5e2fa9991e649af7fc2a2e80494cf550c0e6d642246"], 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {0x0}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/222, 0xde}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/161, 0xa1}], 0x5}, 0x1000}], 0x3, 0x8042, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 7m59.241652715s ago: executing program 4 (id=3022): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x100) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000040)=0x35, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shmctl$IPC_RMID(0x0, 0x0) ioctl$sock_bt_hci(r6, 0x400448e7, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x18) 7m58.218057529s ago: executing program 4 (id=3024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [{0x2, 0x3, 0xee01}], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) 7m54.53901398s ago: executing program 4 (id=3035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) 7m51.544505659s ago: executing program 4 (id=3042): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 7m50.256242842s ago: executing program 4 (id=3045): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0xa, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)) epoll_create1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) socket$tipc(0x1e, 0x5, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x82, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x5, 0x300000, 0x9f, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199e, 0x8, 0x2, 0x9, 0x8000, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x0, 0x3, 0x8000, 0xfffffffe, 0x2, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7fffffff, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x1ff, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x3, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x880, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x2, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x5, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x6, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x7ff, 0xf, 0x133, 0x6]}, 0x45c) 7m34.896990221s ago: executing program 33 (id=3045): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0xa, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)) epoll_create1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) socket$tipc(0x1e, 0x5, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x82, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x5, 0x300000, 0x9f, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199e, 0x8, 0x2, 0x9, 0x8000, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x0, 0x3, 0x8000, 0xfffffffe, 0x2, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7fffffff, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x1ff, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x3, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x880, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x2, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x5, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x6, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x7ff, 0xf, 0x133, 0x6]}, 0x45c) 7m2.947711128s ago: executing program 1 (id=3142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7m2.179411513s ago: executing program 1 (id=3143): socket$nl_route(0x10, 0x3, 0x0) gettid() fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001800)={'#! ', './file1', [{0x20, '\x01\x00\x00\x00@'}], 0xa, "5c1d9dc6f0da07945803b3a377a2b4c3bfe2bd396d7854931341f485f3f5f5a2cce92c0cc9c422affb87a2823500000000f372f2b751cd8878986dd79cad07ccb58855b9694f22b5915cd9c169d8df336d00000000"}, 0x66) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000300)={0x200, 0x8, 0x1, 0xfffffffc}) r6 = fcntl$getown(r4, 0x9) syz_open_procfs(r6, &(0x7f0000000100)='net/kcm\x00') sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x6a, 0x119, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4000000}}, 0x18}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file1\x00', 0x808080, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x3, 0x26f, &(0x7f0000001500)="$eJzs2k9rJEUYB+C348bEhNkZ8R+7IBZ6UC/NJmcPG2QXxICiO8IqyPaaiQ5pZ0J6CIyI5qRXP4Jn8ehNkD16ycVP4MFbQHLMQWyZTFaTkERHxET3eS790lU/ZoquLqqhdl764sO11SpfLQYxlWUxdT22Yi+LVkzFfVvx4vO3v3/6zdtvv7q0vHzjjZRuLt1aWEwpXX7mu3c+/vrZe4P5t765/O1MbLfe3dld/Gn7ye0rO7/e+qBbpW6Vev1BKtLdfn9Q3C07aaVbreUpvV52iqqTur2qs3GkfbXsr68PU9Fbacytb3SqKhW9YVrrDNOgnwYbw1S8X3R7Kc/z1JgLRn6e/Xu59ld7dR279fSdqOv6kS9j/l40foxmZI+m7LHr2RN3sqe2siu7dd38p/8yF8JePRMRnv+D6tCiPhtRfr7Z3myPr+P2pdXoRhmduBbN+CVG0+TAuL75yvKNa2lfKz4rP91sb85HjK4PHc0vRDNaJ+cXxvl0kG+P8zMxFzEdcZBfjGY8fnJ+8cT8bLzw3KHfz6MZP7wX/ShjJUbZP/KfLKT08mvLx/JX9/sBAPzf5Ol3raP7n/H+Lc9Pax/nJ9gfHttfXYqrl8537ERUw4/WirLsbPxJ0fgLfS5mMRrlWX3Gc/XsPmcWo2+UCzHSiYvWBBPgYhUzMVEqi9iK83pMWWT7r9r9Ow9P+OqdU3F+axL/nqPrJAAAAAAAAAAAAP8Vx0//TR/cn+zMYOPQ8caTT+ACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc5rcAAAD//9efviE=") renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x2) 7m0.659788594s ago: executing program 1 (id=3146): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x23, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x10, {{0xa, 0x4e23, 0xfffffffe, @private1, 0x9}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x8, @mcast2, 0xffffffff}}, {{0xa, 0x4e24, 0xa7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80}}, {{0xa, 0x4e21, 0x5edca0b2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}]}, 0x290) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0x5, 0x0, 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000780)=ANY=[], 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="fa0a00ff00f2ff0f8d0000003dd31bee23abcb0cd7ad1700ee6ee3b16b5681a0dbbddee6db8fd3bdf06b501c5880e121f58c6378c07140bb023af2c6f1200413282ce63846ace6a3543d22c57e7e2952aaab8719b96a7ecb1b73d89b857867d2e4941476f2e054aef6d134e1ecfcb6c8c7f71453d83439c6daaba11fedc38598bb242f5cd5ee655e"], &(0x7f0000000480)='GPL\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 6m58.559442373s ago: executing program 1 (id=3148): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r1 = socket$key(0xf, 0x3, 0x2) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r1) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="100000002500040026bd7000ffdbdf252049127a59b68955328fff56043b109de769763124f475a7e7d4873079365bfc40a28c6089c08aa5e2fa9991e649af7fc2a2e80494cf550c0e6d642246"], 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/222, 0xde}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/161, 0xa1}], 0x5}, 0x1000}], 0x3, 0x8042, 0x0) write$char_usb(r2, 0x0, 0x0) 6m56.890753999s ago: executing program 1 (id=3151): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x26020480) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f00000008c0)='./file0\x00', 0x180) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='nfs4\x00', 0x400, &(0x7f00000009c0)='\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000ec0), 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 6m56.030180417s ago: executing program 1 (id=3154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, 0x0}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) fchmod(r3, 0x29) syz_emit_ethernet(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 6m40.635155507s ago: executing program 34 (id=3154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, 0x0}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) fchmod(r3, 0x29) syz_emit_ethernet(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1m28.011421558s ago: executing program 5 (id=4272): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000028c0)='./file1\x00', 0x2a08800, &(0x7f0000000040)=ANY=[], 0x1, 0x6af, &(0x7f0000003180)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000000180)=""/184, 0xac) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m26.982760682s ago: executing program 5 (id=4276): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 1m25.998271044s ago: executing program 5 (id=4277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) 1m25.930666866s ago: executing program 5 (id=4279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x2400, 0x0) 1m25.489221801s ago: executing program 5 (id=4283): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x5, 0x4fa, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) socket(0x10, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0040, 0x180) 1m21.560718649s ago: executing program 5 (id=4298): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) 1m21.392195185s ago: executing program 35 (id=4298): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) 17.770153398s ago: executing program 6 (id=4546): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf5, &(0x7f0000000140)="b9425b44651dd232419635990000e0110d855ac1d7fcf2b877fceaffff2c77000000000000000000d26dd714c6a3b27ccfe2202e9e1cbfa3057e12cc04e3635ca6810b0461032236436b71f700e8e5c06f26a052c87690ce0e2be115ee2213a6dd7b844b9061188778a21a9d366ee84e3af42f2b0a0e0b56bf4a7a3f0f14405e24c0246f9a520bb994550586f7d6a43e974dd1fb58ca7230b81375eeab045b3befdec9f61b160ac139eff5d741fd38e98fe9989e7a511e04ebfa42cf05c1305a61e3ddfe01e7734cbfb24b5f99afba865431abd482aa792424c90bf777e1b8537cf069dd848399073eb2c7c40ff13f5e53adbd86d7") 13.229298777s ago: executing program 6 (id=4562): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x23, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x10, {{0xa, 0x4e23, 0xfffffffe, @private1, 0x9}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x8, @mcast2, 0xffffffff}}, {{0xa, 0x4e24, 0xa7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80}}, {{0xa, 0x4e21, 0x5edca0b2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}]}, 0x290) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0x5, 0x0, 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000780)=ANY=[], 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="fa0a00ff00f2ff0f8d0000003dd31bee23abcb0cd7ad1700ee6ee3b16b5681a0dbbddee6db8fd3bdf06b501c5880e121f58c6378c07140bb023af2c6f1200413282ce63846ace6a3543d22c57e7e2952aaab8719b96a7ecb1b73d89b857867d2e4941476f2e054aef6d134e1ecfcb6c8c7f71453d83439c6daaba11fedc38598bb242f5cd5ee655e"], &(0x7f0000000480)='GPL\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 13.084233782s ago: executing program 3 (id=4563): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x23, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x10, {{0xa, 0x4e23, 0xfffffffe, @private1, 0x9}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x8, @mcast2, 0xffffffff}}, {{0xa, 0x4e24, 0xa7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80}}, {{0xa, 0x4e21, 0x5edca0b2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}]}, 0x290) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0x5, 0x0, 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000780)=ANY=[], 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="fa0a00ff00f2ff0f8d0000003dd31bee23abcb0cd7ad1700ee6ee3b16b5681a0dbbddee6db8fd3bdf06b501c5880e121f58c6378c07140bb023af2c6f1200413282ce63846ace6a3543d22c57e7e2952aaab8719b96a7ecb1b73d89b857867d2e4941476f2e054aef6d134e1ecfcb6c8c7f71453d83439c6daaba11fedc38598bb242f5cd5ee655e"], &(0x7f0000000480)='GPL\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 8.453468573s ago: executing program 3 (id=4574): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {}, {0xfff3, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4d, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x40, 0x7, 0x7, 0x1, 0x6, 0xd, 0x0, 0x4, 0x4, 0x5, 0x1, 0x2, 0x2, 0xe1aa, 0x400, 0x0, 0x7, 0x4, 0x95f, 0x0, 0x6, 0x4, 0x2, 0x3, 0x7ff, 0xffffff87, 0x6, 0x7, 0x5, 0x8, 0xffff7fff, 0x800, 0x6, 0x6, 0x5c46, 0xc2, 0x3ff, 0xc3, 0x6, 0x5, 0x800, 0x476, 0x662, 0xffffffff, 0x3, 0x2, 0x3, 0x6, 0xb, 0x6b, 0x7, 0x4, 0x7, 0x8, 0x3, 0x7, 0x400, 0x4, 0x298, 0x6, 0x8, 0x100, 0x1, 0x7, 0x9, 0xfffff66f, 0x5, 0x80000001, 0x99, 0x2f, 0x3, 0xff, 0x1f3, 0x80000000, 0x3, 0x7, 0x3, 0x3, 0xf1c1, 0x4, 0x3, 0x5, 0x7, 0x0, 0x8, 0xb89, 0x80000000, 0xd92, 0x5, 0xac1, 0xffff0001, 0x0, 0x7, 0x1, 0x1000, 0xc799, 0x2, 0xfffffff9, 0x0, 0x7, 0x0, 0xfffffff8, 0xbf5, 0x8, 0x80000001, 0x7, 0x2ea9, 0x5, 0x1, 0x20, 0x4b, 0x5, 0x42, 0x1, 0xfffffff7, 0x9d, 0x7fff, 0x8, 0x7fffffff, 0x5, 0x8, 0x6, 0x2, 0x6, 0x9, 0x8001, 0x4, 0xfffffffa, 0x2, 0x8, 0x9, 0x6567, 0x9, 0x0, 0x400, 0x33, 0x4, 0x86, 0xe, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1, 0x8, 0x400, 0x5, 0x3, 0x5, 0x84, 0xb, 0x4, 0x6, 0x5, 0xa9f, 0x6, 0x0, 0x1, 0x7, 0x4, 0x25a7e80b, 0x1, 0x5, 0x5, 0x0, 0x8, 0x87, 0x9, 0x1, 0x1, 0x8, 0xffffffff, 0x5, 0xffffff00, 0x326, 0x2, 0x9, 0xe, 0x4, 0x7, 0x4, 0x4, 0xff, 0x2, 0x5, 0x7, 0x1, 0xffffff00, 0x1, 0x0, 0x158, 0x1, 0x0, 0x7fffffff, 0x7, 0x6, 0x0, 0x0, 0xb, 0x80000001, 0x5, 0x1, 0x7a69bb2c, 0x6, 0x0, 0xf, 0x2, 0xcc, 0xb31b, 0xd5a3, 0x2, 0xd8, 0x9, 0xffffff81, 0xba4, 0x59, 0x0, 0x6, 0x1cf47395, 0xc5, 0x9, 0xfffffe00, 0x8, 0x8, 0x100, 0x2, 0xffff9013, 0x6, 0x5, 0x80, 0xb2, 0x0, 0x80000000, 0x4e, 0x10001, 0x7f2, 0x8, 0x1, 0x4, 0x461, 0x954f, 0x1, 0x8, 0x4, 0x8, 0x0, 0x0, 0x39813501, 0x5, 0x8, 0x80, 0x1000, 0x6, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x7, 0x3, 0x1, {0x3, 0x0, 0xa, 0xa, 0xfffc, 0x401}, {0x7, 0x0, 0xba, 0x8, 0x200, 0x200}, 0x1, 0xffffff80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x7fff, 0x90a, 0x9, 0xd, 0x4, 0x1, 0x3, 0x9, 0x8, 0x6ac, 0x6, 0x0, 0xfffffff2, 0x238000, 0x8, 0x8c7, 0x50, 0x101, 0x2, 0x6, 0x2, 0xa, 0x5, 0x80000000, 0x1, 0x5, 0x9, 0x2, 0x7, 0x5, 0x0, 0x4, 0x1, 0x4f, 0x4, 0x2f91, 0x5, 0x6, 0x8, 0x40, 0x1, 0x5, 0x9, 0x9, 0x1, 0x5, 0xff, 0x4, 0xffffffff, 0x3, 0x0, 0x3, 0xaea3, 0x7ff, 0x1, 0x5, 0x4, 0xf, 0x3ff, 0x7, 0x6, 0x4, 0x2, 0xe7f6, 0x2, 0xfffffff9, 0x3, 0xda, 0x100, 0x7, 0x8, 0x2, 0x2, 0x8001, 0x6, 0x82bc, 0x0, 0x2, 0xffffffff, 0xff, 0xf7b, 0x6, 0x9, 0x7ff, 0x6, 0x5, 0x6, 0x6, 0x9, 0x1, 0xa09, 0x8001, 0x1000, 0x8, 0x7, 0x100, 0x81, 0x5, 0x7f, 0xfffffff8, 0x10, 0x0, 0x6, 0xe0, 0x1ff, 0x29, 0x7e, 0x7a42, 0x7, 0x225, 0x7, 0xa, 0x8, 0x80, 0x1, 0x3ef, 0x7, 0x6, 0x174, 0x18, 0x0, 0x6, 0x9, 0x5, 0x458, 0x2, 0x6, 0x10000, 0xb, 0x9, 0xb, 0x5, 0x8, 0x6, 0xaf0, 0x4, 0x3, 0x1, 0xd, 0xf, 0xc, 0x4b0, 0x1, 0x3, 0x100, 0x4, 0x9, 0x4, 0x6, 0x10, 0x7fffffff, 0xfffffffd, 0x6, 0x2, 0x3, 0x8, 0x1, 0x26a99613, 0x5, 0x7, 0xad9, 0x8, 0xbd1, 0x80000000, 0x2, 0xe5b, 0x5, 0x3, 0x6, 0x2, 0x53d0, 0x100, 0x401, 0x3, 0x1, 0x8, 0x4ad2, 0xed, 0x4, 0x9b402b0, 0x8, 0xff, 0x7, 0x8e, 0xffff, 0x1, 0x4, 0x9, 0x7, 0x6, 0x1, 0x1, 0x8, 0x7ff, 0xb04, 0x5, 0x1, 0x7, 0x6, 0x3, 0x9, 0x101, 0xfffffffe, 0x4, 0x8, 0x5, 0x8, 0x9, 0x13, 0x0, 0x5, 0x5, 0x3, 0x0, 0xc000000, 0x7dab19e1, 0x5, 0xff, 0x9, 0x2, 0x2, 0x6, 0x9, 0x8297, 0x9, 0x9, 0x7fffffff, 0x1ff, 0x9e, 0x4, 0x9, 0x7fff, 0x4, 0x40bf, 0x4, 0x8, 0x49eb, 0x3, 0x7fffffff, 0x7, 0x2, 0x7, 0x4, 0x9, 0xb, 0x1, 0x84, 0x3, 0x80, 0x3ff, 0x25460ab5, 0x75b4, 0x952, 0x3]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}]}}]}, 0x884}, 0x1, 0x4000000, 0x0, 0x50}, 0x0) 8.209005571s ago: executing program 0 (id=4577): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) fcntl$addseals(r0, 0x409, 0xc) 8.178597992s ago: executing program 3 (id=4578): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) truncate(0x0, 0x7f0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=""/189, 0x0, 0xbd, 0x1}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r5, 0x3) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 6.567102975s ago: executing program 3 (id=4580): bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x8, @empty, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x18a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="41000200010006", 0x7) listen(r0, 0x2) syz_emit_ethernet(0x467, &(0x7f0000001c00)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x42d, 0x3a, 0x0, @private2, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x9, '\x00', {0xc, 0x6, 'F#Y', 0x4, 0x0, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, [@dstopts={0x2b, 0xb, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x2, 0xed6, [0x3, 0x4, 0x50a, 0x8, 0x9, 0x8, 0x4, 0x7, 0x7, 0x68]}}]}, @routing={0x3a, 0x2, 0x2, 0x6, 0x0, [@mcast2]}, @dstopts={0x0, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @pad1, @ra, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x7, 0x23, "f36ea389fd04698198430f2e07ed915b1d1d5b8c2c161f94bd93704f45e243a0a1c125"}]}, @srh={0x2c, 0x6, 0x4, 0x3, 0xea, 0x68, 0x9, [@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}, @dstopts={0x33, 0x1b, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @ra={0x5, 0x2, 0x23}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x1ff, [0x7ec2, 0x5, 0x7, 0x1f6d, 0x551, 0x10000, 0x5]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0xb3d, [0x5, 0x10000, 0x4, 0xb, 0x5000000, 0x31, 0x14000000000000, 0x6]}}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x7, [0xffffffff, 0xd6, 0x9, 0x5]}}]}, @hopopts={0x21, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}, @hopopts={0xe6, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xf491}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0xd5}, @generic={0x3, 0xe0, "366627f5cd4aa92d72bdfa853c17af07ec505954cdb54c07747797ecca5635856a7021c378b8f1bacb30e824b24022046f937f3a7f56d1850a8b9214b0a16a68766d64dd33e6ec3ac1e59360bacae6150c101d13d5ada040685fe67940ed5f34e7799ff207657f4ba0cbdcec549ea1ffba37f406387292485a8903f10e28c25a0e5827254e9177c02acadd9b49c347bfe6d8922836d1a672a5bfa2fd2bb7b7aba5bdc8d40b8a18cee93ed0589de39aa5bd4e217edd829585ac77ea97ea975bbd7f20187282d11b24d520927893828907d5b64e56b5ff64339578d61700ef740c"}, @enc_lim={0x4, 0x1, 0x8}]}], "5b8a617d88121dcf9ae41722a799571b44ffad109742eba0494a3a6102ceab10c15d9b5ce25b3fc1925b23e51703bc21c1b55dc4b79d9c9ac3d3d447fdb40ad75ac879e508624c4683392baa96b7538a1504415fd098e7944be1d8086cd4aa7630f89f37a103dd54eedf5985403d5fdbeca30443d76eae4efa45889e63703506cd86d1a91814c88ba4ef0e021aa5297c9ed9e7d74070d6cd29cb64c181d1792769570cb2fd97c688278955c4ccc9627da9af53f9546f3c5d0bab49cde3ff13a450ed86e26414f53c351eb1a0ebb94033f14a08674c65303744bebdacb10302fc2301513bbd72b3d8c25b272375a429ab0e196a79de"}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e24, @local}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="2ed626e60a4f83973155a273275f910000", @ANYRES16=r6, @ANYBLOB="01032cbd70000000000001000000080001001400000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ffffffff74000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x44) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x2000412, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f6d706f73652c6465636f6d706f73652c6e6c733d6b6f69382d72752c004c1617877e60c71f1056d113307ece5ae55bc340c31166fbbfc582"], 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) listen(r3, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') openat$cgroup_freezer_state(r8, &(0x7f0000000040), 0x2, 0x0) 6.475411118s ago: executing program 0 (id=4582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socket$nl_audit(0x10, 0x3, 0x9) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000300)={0x2, r1}) eventfd2(0xd, 0x80800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x6a002, 0x0) r2 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000180)={@hyper}) r3 = fsmount(r2, 0x0, 0x8c) fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r8 = dup(r7) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x404004}, 0x1c) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x106, 0x0, 0x0, 0x0, 0x0}) 5.780462731s ago: executing program 3 (id=4585): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x23, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x10, {{0xa, 0x4e23, 0xfffffffe, @private1, 0x9}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x8, @mcast2, 0xffffffff}}, {{0xa, 0x4e24, 0xa7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80}}, {{0xa, 0x4e21, 0x5edca0b2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}]}, 0x290) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0x5, 0x0, 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000780)=ANY=[], 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="fa0a00ff00f2ff0f8d0000003dd31bee23abcb0cd7ad1700ee6ee3b16b5681a0dbbddee6db8fd3bdf06b501c5880e121f58c6378c07140bb023af2c6f1200413282ce63846ace6a3543d22c57e7e2952aaab8719b96a7ecb1b73d89b857867d2e4941476f2e054aef6d134e1ecfcb6c8c7f71453d83439c6daaba11fedc38598bb242f5cd5ee655e"], &(0x7f0000000480)='GPL\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 5.550719508s ago: executing program 0 (id=4586): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 4.424687035s ago: executing program 6 (id=4588): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000001b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 4.327295678s ago: executing program 6 (id=4590): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) truncate(0x0, 0x7f0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=""/189, 0x0, 0xbd, 0x1}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r5, 0x3) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 4.214447732s ago: executing program 0 (id=4591): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_usbip_server_init(0x5) writev(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) fcntl$setpipe(r0, 0x407, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc28c554a, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 3.37023081s ago: executing program 8 (id=4592): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 3.280268063s ago: executing program 7 (id=4593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x5c, r1, 0x101, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x7, 0x34, @random="deae21"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}]}, 0x5c}}, 0x0) 3.095350299s ago: executing program 7 (id=4594): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 3.071641239s ago: executing program 8 (id=4595): bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x8, @empty, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x18a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="41000200010006", 0x7) listen(r0, 0x2) syz_emit_ethernet(0x467, &(0x7f0000001c00)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x42d, 0x3a, 0x0, @private2, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x9, '\x00', {0xc, 0x6, 'F#Y', 0x4, 0x0, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, [@dstopts={0x2b, 0xb, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x2, 0xed6, [0x3, 0x4, 0x50a, 0x8, 0x9, 0x8, 0x4, 0x7, 0x7, 0x68]}}]}, @routing={0x3a, 0x2, 0x2, 0x6, 0x0, [@mcast2]}, @dstopts={0x0, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @pad1, @ra, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x7, 0x23, "f36ea389fd04698198430f2e07ed915b1d1d5b8c2c161f94bd93704f45e243a0a1c125"}]}, @srh={0x2c, 0x6, 0x4, 0x3, 0xea, 0x68, 0x9, [@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}, @dstopts={0x33, 0x1b, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @ra={0x5, 0x2, 0x23}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x1ff, [0x7ec2, 0x5, 0x7, 0x1f6d, 0x551, 0x10000, 0x5]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0xb3d, [0x5, 0x10000, 0x4, 0xb, 0x5000000, 0x31, 0x14000000000000, 0x6]}}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x7, [0xffffffff, 0xd6, 0x9, 0x5]}}]}, @hopopts={0x21, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}, @hopopts={0xe6, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xf491}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0xd5}, @generic={0x3, 0xe0, "366627f5cd4aa92d72bdfa853c17af07ec505954cdb54c07747797ecca5635856a7021c378b8f1bacb30e824b24022046f937f3a7f56d1850a8b9214b0a16a68766d64dd33e6ec3ac1e59360bacae6150c101d13d5ada040685fe67940ed5f34e7799ff207657f4ba0cbdcec549ea1ffba37f406387292485a8903f10e28c25a0e5827254e9177c02acadd9b49c347bfe6d8922836d1a672a5bfa2fd2bb7b7aba5bdc8d40b8a18cee93ed0589de39aa5bd4e217edd829585ac77ea97ea975bbd7f20187282d11b24d520927893828907d5b64e56b5ff64339578d61700ef740c"}, @enc_lim={0x4, 0x1, 0x8}]}], "5b8a617d88121dcf9ae41722a799571b44ffad109742eba0494a3a6102ceab10c15d9b5ce25b3fc1925b23e51703bc21c1b55dc4b79d9c9ac3d3d447fdb40ad75ac879e508624c4683392baa96b7538a1504415fd098e7944be1d8086cd4aa7630f89f37a103dd54eedf5985403d5fdbeca30443d76eae4efa45889e63703506cd86d1a91814c88ba4ef0e021aa5297c9ed9e7d74070d6cd29cb64c181d1792769570cb2fd97c688278955c4ccc9627da9af53f9546f3c5d0bab49cde3ff13a450ed86e26414f53c351eb1a0ebb94033f14a08674c65303744bebdacb10302fc2301513bbd72b3d8c25b272375a429ab0e196a79de"}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e24, @local}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="2ed626e60a4f83973155a273275f910000", @ANYRES16=r6, @ANYBLOB="01032cbd70000000000001000000080001001400000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ffffffff74000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x44) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x2000412, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f6d706f73652c6465636f6d706f73652c6e6c733d6b6f69382d72752c004c1617877e60c71f1056d113307ece5ae55bc340c31166fbbfc582"], 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) listen(r3, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') openat$cgroup_freezer_state(r8, &(0x7f0000000040), 0x2, 0x0) 2.76400436s ago: executing program 8 (id=4596): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socket$nl_audit(0x10, 0x3, 0x9) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000300)={0x2, r1}) eventfd2(0xd, 0x80800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x6a002, 0x0) r2 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000180)={@hyper}) r3 = fsmount(r2, 0x0, 0x8c) fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r8 = dup(r7) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x404004}, 0x1c) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x106, 0x0, 0x0, 0x0, 0x0}) 1.922169397s ago: executing program 0 (id=4597): unshare(0x8040480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x2, 0xffffffffffffffff, 0x1}) 1.843417879s ago: executing program 7 (id=4598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000092, 0x0, 0x1}]}) 1.765213103s ago: executing program 8 (id=4599): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x10, {{0xa, 0x4e23, 0xfffffffe, @private1, 0x9}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x8, @mcast2, 0xffffffff}}, {{0xa, 0x4e24, 0xa7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80}}, {{0xa, 0x4e21, 0x5edca0b2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}]}, 0x290) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0x5, 0x0, 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000780)=ANY=[], 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="fa0a00ff00f2ff0f8d0000003dd31bee23abcb0cd7ad1700ee6ee3b16b5681a0dbbddee6db8fd3bdf06b501c5880e121f58c6378c07140bb023af2c6f1200413282ce63846ace6a3543d22c57e7e2952aaab8719b96a7ecb1b73d89b857867d2e4941476f2e054aef6d134e1ecfcb6c8c7f71453d83439c6daaba11fedc38598bb242f5cd5ee655e"], &(0x7f0000000480)='GPL\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.651335406s ago: executing program 6 (id=4600): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0xb, 0x2002) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) 1.542438189s ago: executing program 7 (id=4601): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.511582541s ago: executing program 3 (id=4602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0xffffffffffffff78, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d33c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) socket$inet_tcp(0x2, 0x1, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0), 0x0, 0x0) 1.485565262s ago: executing program 0 (id=4603): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000500)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@nouser_xattr}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@data_err_ignore}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x8d9, 0xfffffff5, 0x0, 0x6, 0x8}) 610.37618ms ago: executing program 6 (id=4604): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x23, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x10, {{0xa, 0x4e23, 0xfffffffe, @private1, 0x9}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x8, @mcast2, 0xffffffff}}, {{0xa, 0x4e24, 0xa7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80}}, {{0xa, 0x4e21, 0x5edca0b2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}]}, 0x290) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0x5, 0x0, 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000780)=ANY=[], 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="fa0a00ff00f2ff0f8d0000003dd31bee23abcb0cd7ad1700ee6ee3b16b5681a0dbbddee6db8fd3bdf06b501c5880e121f58c6378c07140bb023af2c6f1200413282ce63846ace6a3543d22c57e7e2952aaab8719b96a7ecb1b73d89b857867d2e4941476f2e054aef6d134e1ecfcb6c8c7f71453d83439c6daaba11fedc38598bb242f5cd5ee655e"], &(0x7f0000000480)='GPL\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 556.522852ms ago: executing program 8 (id=4605): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 133.361756ms ago: executing program 7 (id=4606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000440)={{0xdddd0000, 0xffffffff, 0x3, 0x2, 0xce, 0x6, 0x0, 0x2, 0x49, 0x2, 0x33, 0x1}, {0x2000, 0x0, 0xb, 0x8, 0x4, 0x4, 0x2, 0x1, 0x7, 0x81, 0x2, 0x6}, {0x30000, 0x8000000, 0x10, 0x9, 0xcd, 0x9b, 0x3, 0x6e, 0xe8, 0x52, 0x40, 0x8}, {0x54000, 0x50000, 0x9, 0x4, 0x7, 0x8, 0xe, 0x9, 0x4, 0x8, 0x5, 0x1}, {0x200000, 0x41000, 0xe, 0x8, 0x8, 0x5, 0xfe, 0x3, 0x6, 0xf0, 0x9, 0xd}, {0x54000, 0x5000, 0xa, 0x62, 0x3, 0x7, 0x7c, 0x7, 0x5, 0x3, 0x8, 0xce}, {0x9000, 0x10000, 0x0, 0x2, 0x2, 0x51, 0x38, 0x4, 0x9, 0xf8, 0x1e, 0x3}, {0x2000, 0x1000, 0x8, 0x0, 0x8, 0x3, 0x80, 0x2, 0x40, 0x7, 0xf7, 0x6}, {0xffff1000, 0x9}, {0x7000, 0x3}, 0x80040020, 0x0, 0xfec00000, 0x4, 0xa, 0x2501, 0x80a0000, 0x0, [0x0, 0xbb, 0x3, 0x6]}) 689.31µs ago: executing program 7 (id=4607): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_usbip_server_init(0x5) writev(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) fcntl$setpipe(r0, 0x407, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc28c554a, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 0s ago: executing program 8 (id=4608): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x8, 0xc3b, 0x0, 0x0, 0x1c, 0xd, "faf983fde4a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe0b9eabe686a18ea74bd399e70c7f3f809a00", "675237601a8ca5b07dcc141802f9e4162e43ac61b7ad33000000e800", [0xfffffffffffffce8, 0x6]}}) sendfile(r0, r1, 0x0, 0x200) kernel console output (not intermixed with test programs): id board names for adq12b driver are: [ 1429.107939][T19317] adq12b [ 1429.111151][T19317] comedi: valid board names for mpc624 driver are: [ 1429.130323][T19317] mpc624 [ 1429.234739][T19317] comedi: valid board names for c6xdigio driver are: [ 1431.972970][T19317] c6xdigio [ 1431.983870][T19317] comedi: valid board names for aio_iiro_16 driver are: [ 1432.051515][T19317] aio_iiro_16 [ 1432.066273][T19317] comedi: valid board names for aio_aio12_8 driver are: [ 1432.066335][T19317] aio_aio12_8 [ 1432.066343][T19317] aio_ai12_8 [ 1432.066350][T19317] aio_ao12_4 [ 1432.066358][T19317] comedi: valid board names for fl512 driver are: [ 1432.108804][T19317] fl512 [ 1432.111784][T19317] comedi: valid board names for dmm32at driver are: [ 1432.119293][T19317] dmm32at [ 1432.122655][T19317] comedi: valid board names for dt282x driver are: [ 1432.137688][T19317] dt2821 [ 1432.142125][T19317] dt2821-f [ 1432.148014][T19317] dt2821-g [ 1432.151653][T19317] dt2823 [ 1432.154762][T19317] dt2824-pgh [ 1432.158125][T19317] dt2824-pgl [ 1432.162007][T19317] dt2825 [ 1432.165019][T19317] dt2827 [ 1432.168014][T19317] dt2828 [ 1432.173559][T19317] dt2829 [ 1432.208096][T19317] dt21-ez [ 1432.211169][T19317] dt23-ez [ 1432.217104][T19317] dt24-ez [ 1432.221327][T19317] dt24-ez-pgl [ 1432.231210][T19317] comedi: valid board names for dt2817 driver are: [ 1432.254562][T19317] dt2817 [ 1432.260384][T19317] comedi: valid board names for dt2815 driver are: [ 1432.268782][T19317] dt2815 [ 1432.275615][T19317] comedi: valid board names for dt2814 driver are: [ 1432.282803][T19317] dt2814 [ 1432.285750][T19317] comedi: valid board names for dt2811 driver are: [ 1432.300751][T19317] dt2811-pgh [ 1432.304860][T19317] dt2811-pgl [ 1432.308148][T19317] comedi: valid board names for dt2801 driver are: [ 1432.316382][T19317] dt2801 [ 1432.319332][T19317] comedi: valid board names for das6402 driver are: [ 1432.338038][T19317] das6402-12 [ 1432.341365][T19317] das6402-16 [ 1432.825744][T19388] loop5: detected capacity change from 0 to 1024 [ 1433.046836][T19317] comedi: valid board names for das1800 driver are: [ 1433.092311][T19317] das-1701st [ 1433.095777][T19317] das-1701st-da [ 1433.099532][T19317] das-1702st [ 1433.103786][T19317] das-1702st-da [ 1433.107483][T19317] das-1702hr [ 1433.110976][T19317] das-1702hr-da [ 1433.115108][T19317] das-1701ao [ 1433.118540][T19317] das-1702ao [ 1433.122008][T19317] das-1801st [ 1433.125937][T19317] das-1801st-da [ 1433.166695][T19317] das-1802st [ 1433.177486][T19317] das-1802st-da [ 1433.181319][T19317] das-1802hr [ 1433.184621][T19317] das-1802hr-da [ 1433.188186][T19317] das-1801hc [ 1433.241918][T19317] das-1802hc [ 1433.245599][T19317] das-1801ao [ 1433.248901][T19317] das-1802ao [ 1433.252194][T19317] comedi: valid board names for das800 driver are: [ 1433.258997][T19317] das-800 [ 1433.262042][T19317] cio-das800 [ 1433.265431][T19317] das-801 [ 1433.268461][T19317] cio-das801 [ 1433.297138][T19317] das-802 [ 1433.300221][T19317] cio-das802 [ 1433.311623][T19317] cio-das802/16 [ 1433.315978][T19317] comedi: valid board names for isa-das08 driver are: [ 1433.326625][T19317] isa-das08 [ 1433.335609][T19317] das08-pgm [ 1433.340137][T19317] das08-pgh [ 1433.346946][T19317] das08-pgl [ 1433.352657][T19317] das08-aoh [ 1433.361611][T19317] das08-aol [ 1433.372931][T19317] das08-aom [ 1433.376163][T19317] das08/jr-ao [ 1433.379535][T19317] das08jr-16-ao [ 1433.383068][T19317] pc104-das08 [ 1433.387634][T19317] das08jr/16 [ 1433.390937][T19317] comedi: valid board names for das16m1 driver are: [ 1433.401546][T19317] das16m1 [ 1433.404629][T19317] comedi: valid board names for dac02 driver are: [ 1433.411196][T19317] dac02 [ 1433.414068][T19317] comedi: valid board names for rti802 driver are: [ 1433.420621][T19317] rti802 [ 1433.423571][T19317] comedi: valid board names for rti800 driver are: [ 1433.446754][T19317] rti800 [ 1433.459355][T19317] rti815 [ 1433.462335][T19317] comedi: valid board names for pcm3724 driver are: [ 1433.482986][T19317] pcm3724 [ 1433.486061][T19317] comedi: valid board names for pcl818 driver are: [ 1433.658653][T19317] pcl818l [ 1433.662484][T19317] pcl818h [ 1433.666587][T19317] pcl818hd [ 1433.669802][T19317] pcl818hg [ 1433.672900][T19317] pcl818 [ 1433.675840][T19317] pcl718 [ 1433.679647][T19317] pcm3718 [ 1433.682685][T19317] comedi: valid board names for pcl816 driver are: [ 1433.689639][T19317] pcl816 [ 1433.692599][T19317] pcl814b [ 1433.696235][T19317] comedi: valid board names for pcl812 driver are: [ 1434.711557][T19317] pcl812 [ 1434.714529][T19317] pcl812pg [ 1434.721369][T19317] acl8112pg [ 1434.724590][T19317] acl8112dg [ 1434.742617][T19317] acl8112hg [ 1434.746052][T19317] a821pgl [ 1435.565242][T19317] a821pglnda [ 1435.600282][T19317] a821pgh [ 1435.734980][T19317] a822pgl [ 1435.738053][T19317] a822pgh [ 1435.741113][T19317] a823pgl [ 1435.759755][T19317] a823pgh [ 1435.762821][T19317] pcl813 [ 1435.795348][T19317] pcl813b [ 1435.799340][T19317] acl8113 [ 1435.821758][T19317] iso813 [ 1435.824740][T19317] acl8216 [ 1435.827786][T19317] a826pg [ 1435.874647][T19317] comedi: valid board names for pcl730 driver are: [ 1435.907626][T19317] pcl730 [ 1435.910587][T19317] iso730 [ 1435.913529][T19317] acl7130 [ 1435.916545][T19317] pcm3730 [ 1435.939308][T19317] pcl725 [ 1435.949902][T19317] p8r8dio [ 1435.960398][T19317] acl7225b [ 1435.971107][T19317] p16r16dio [ 1435.985801][T19317] pcl733 [ 1435.993897][T19317] pcl734 [ 1436.005947][T19317] opmm-1616-xt [ 1436.017900][T19317] pearl-mm-p [ 1436.037558][T19317] ir104-pbf [ 1436.048071][T19317] comedi: valid board names for pcl726 driver are: [ 1436.069076][T19415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1436.069981][T19317] pcl726 [ 1436.186277][T19419] loop5: detected capacity change from 0 to 1024 [ 1436.225391][T19317] pcl727 [ 1436.265730][T19317] pcl728 [ 1436.294722][T19317] acl6126 [ 1436.476648][T19317] acl6128 [ 1436.574775][T19317] comedi: valid board names for pcl724 driver are: [ 1436.713879][T19317] pcl724 [ 1436.729769][T19317] pcl722 [ 1436.733151][T19317] pcl731 [ 1436.810674][T19317] acl7122 [ 1436.847253][T19317] acl7124 [ 1436.851653][T19317] pet48dio [ 1436.854816][T19317] pcmio48 [ 1436.857951][T19317] onyx-mm-dio [ 1436.903955][T19317] comedi: valid board names for pcl711 driver are: [ 1436.915009][T19317] pcl711 [ 1436.921531][T19317] pcl711b [ 1436.924610][T19317] acl8112hg [ 1436.937509][T19317] acl8112dg [ 1436.940858][T19317] comedi: valid board names for amplc_pc263 driver are: [ 1436.975228][T19317] pc263 [ 1436.980824][T19317] comedi: valid board names for amplc_pc236 driver are: [ 1436.998824][T19317] pc36at [ 1437.001967][T19317] comedi: valid board names for amplc_dio200 driver are: [ 1437.009131][T19317] pc212e [ 1437.023419][T19317] pc214e [ 1437.026555][T19317] pc215e [ 1437.034327][T19317] pc218e [ 1437.037298][T19317] pc272e [ 1437.040235][T19317] comedi: valid board names for comedi_parport driver are: [ 1437.090194][T19317] comedi_parport [ 1437.093873][T19317] comedi: valid board names for comedi_test driver are: [ 1437.123032][T19317] comedi_test [ 1437.134630][T19317] comedi: valid board names for comedi_bond driver are: [ 1437.149416][T19317] comedi_bond [ 1437.155325][T19352] comedi comedi3: fl512: I/O port conflict (0xa,16) [ 1437.173381][T19410] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 1437.183976][T19410] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 1437.257145][T19410] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 1437.371996][T19410] comedi comedi1: 8255: I/O port conflict (0x800afa3,4) [ 1438.209524][T19410] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 1438.225010][T19445] loop5: detected capacity change from 0 to 16 [ 1438.268733][T19410] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 1438.295562][T19410] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 1438.312059][T19410] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 1438.321304][T19410] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 1438.356123][T19445] erofs: (device loop5): mounted with root inode @ nid 36. [ 1438.395127][T19445] attempt to access beyond end of device [ 1438.395127][T19445] loop5: rw=524288, want=1342177304, limit=16 [ 1438.450968][T19445] attempt to access beyond end of device [ 1438.450968][T19445] loop5: rw=0, want=1342177280, limit=16 [ 1438.469102][ T25] audit: type=1800 audit(1420.403:139): pid=19445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3893" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 1438.856027][T19486] [U] ƒCQ(QÆXÖ«òØryÛNpìc)üuû7¸loÜë@¥Øsú>_”7ǹkò­{v$¹ÕbÙœÑÑÙ…›ØŽY:Š²sšµ(ÿ GYO"oN/"kn6Ãîjü—éoæ'šj6²ã ´0‹Ö„Ô1obuÈ‹[v›‘¦÷özh¯öþù†8uﲤ ó:Dx-'zµe XypÓ^]b<„sÂßð~Y8w+}š/NRœ@üÛ^•¬\M5û¨ Û£ˆ‰ŠQT4Þò«;Ì]"ŽO´Tä=8ê±·§W’31¯t/c¡º‡M“Ÿê¥Øå)‹~@4ºBã’‹'ÛË»aùôSÐÝõé<™!¯M‰³'’±ÙÙéJ‡Oç8ß$ôöJ«ÑiE°l¿©ñ¼;ÍØñ)ÒìUG½‡üQoÆ+Áz‚úMYuz*µ3û¼µ—úA—zœ'½âU<ÍÊPr?¤ûéþ“?£‡SÕ&…¡<ž‰9 [ 1438.893894][T19486] [U] ê/óÏÈF+5ÖÔ£"I‘+C±»Ä¡¹">·˜Ö™ÎóŽ« 3Ž%lÝc~öís„Ô#Ý´Ç#„  ‡¬Ü‡Âuc`¨1ö“©Šq¸ŒÓEm [ 1438.904236][T19486] [U] ¥tÖ[ [ 1438.907624][T19486] [U] œ‰$ø¹§òý‰‚–¹êÚ è„ñúñ¶ydeÉ(i= ?KÈ_Æ'xç§ð[øÐ-HŒŸ_+'‹s!¾g"ÊqkD,S¹`äyÈMº0Äu绀 [ 1438.918078][T19486] [U] š+‚fiËÝ0,-@|A¿(Pã™qh&s¡²È‰ fF¾ŒªÀLZÚ ½ét£ÆÅ^°qFP}ÂNK2(˜@l1 …\£ßG¯* Tô'\—ÉR ÀëñÖO»Ĉ/âÒpIV|®dÿت¥ñÂçÚ•|Ü{ôæVs{â¢?\ê8½!™ [ 1438.932658][T19486] [U] ¦\!>Ñáªÿ3¹ ¸•ËPÞÔ²Xò`¤¤ÅUPþÎàÔ=‹ÜL­1Ó¬yÂUì`¢lB2'«•;ѯÑ,JÀÓ[M¸‹‹jŒ ¶m`;?lÕäE;0ü>@i^žEk )8ª¤,Ù¶0ó6¾6p³¬¡{ùÀ¹®…Á*a‰9S«ësK7jÔ:]ðj増jÿBÞnh<Ø<ÏNj°¯‰æQ [ 1438.949067][T19486] [U] XxP ^ÑàË8e,xa§•Ê®lß ÁF¨‹…¬¿öpQ@XçâÀgì Èt˜U…œ^1IYÇþ >¿i¹±œø)¢oå÷®3iÎ0a¦~X+EòR¾3r¹,Ôêyu"†ô#Oo*Ïç3p60þ%Þ{W9]©<èPÎD˜œWáI•0T\ìRZ$1éïR™Il,Š­¶âž% ™¯;"Yc]up¯ך‘fZ˜Ë[è¼ lOÇê)¿VhÛ¨Œ78Êj"œü‹ÄÿÔo‡m™ˆM“e[”Yˆ‘¿(@ <Ñ™5 ³·‹1{;Ef”pdE‚íã9Ÿvp3vËéÕv>§Í/cP$wøaFkË·.Þ­·W7†]v‰Ÿ‡öéÍÂÚöí™#"+!ÛÓfïºå9ü‚lgìZ’n%.Þ§]Qy]vszKý/MR&"CÆ8oz'ZO gʳå¯;’bú8Ï‹„z1ÊóäTÒ&Lç°–í [ 1438.984567][T19486] [U] ¹ÍÚF(ŽûCwò®0¬eë&\CÒäìdb°Ú‰LñÁÃâ éÛï­ŽŒCÎòsDWž6Þ|iW*š<3¥¶ƒÈˆ}‚ÊFÉp¼ [ 1438.993836][T19486] [U] ;¾pœ”ÉDÍ,g¨>Xª”‰ÏXL7ÆÒÛm‡`.j·@þgï S]xŽ1šg7K„âÖc¾Í •Ý/=€Í [ 1439.046375][T19486] [U] ˆ [ 1439.049133][T19486] [U] ]@ÈŠ· [ 1439.052247][T19486] [U] ÂÏŠÐàhšKª`л߹}‡p ¡‹6ñò‚PºI\ãµ,{“¢loÌJ¥‰Šc.måÐ}ýJßÆH-4üõíèíoo~yAþ‡c¶¤?á˜dåÀÛ@pΓ¦oYcà"Ëw¿õ’ÞŠ²¦ÂJOÏ”fÎq‹§ÝÉzÄ^Õü‹‚{§ ¦ )Ñ%'#&^#o”A°¼/V½A)9刡Ê×ÿ¸3?|ƒifŽåëw,>E?+q}Zœ$r9={2¤×Äž9úæ9‘ºÜ1P|—k2PG°fŒñJBY¸X¿íÑ®äûG«ýó¡–ûûÞ¸‚ŒZ[¡þ/sÚÆkEk)M,Wiï [ 1439.077844][T19486] [U] Íù==å¸Vç¶Dr•mòF9Ö½ ñy±œ&Hú¨ë¥7´ÑÚ¸/—¤,ÊT{ÙN`©’ªGN”–¿³M¦/ËWÒ8Ï¡YÏP-&“•ÄöGë`a.áhΟÇ<°DˆèS1ñ-fÄê«A+iz º–­ðvÔ¶ÇÑDX)A‹ëlêï™.¥°Bp c¤¤AÏ(ãÙ¡>åûF‰Ò—â»9µ^zhK¶kœ}ܨӲŽî [ 1439.097288][T19486] [U] ]•b@7P÷z®C½K¬Wò$ .ãî. rejected, failed to enable media [ 1540.359753][T15734] usb 8-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1540.369199][T15734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.377818][T21108] loop8: detected capacity change from 0 to 256 [ 1540.384593][T15734] usb 8-1: Product: syz [ 1540.389102][T15734] usb 8-1: Manufacturer: syz [ 1540.394321][T15734] usb 8-1: SerialNumber: syz [ 1540.455277][T21108] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1540.455540][T15740] usb 1-1: USB disconnect, device number 19 [ 1540.563235][T21110] loop8: detected capacity change from 0 to 512 [ 1540.585038][T21110] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1540.607886][T21110] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.4400: Invalid block bitmap block 0 in block_group 0 [ 1540.634253][T21110] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1540.643361][T21110] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.4400: attempt to clear invalid blocks 983261 len 1 [ 1540.659253][T21110] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.4400: Invalid inode table block 0 in block_group 0 [ 1540.696626][T21110] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1540.740654][T21110] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1540.771320][T15734] usb 8-1: unit 3 not found! [ 1540.833827][T21110] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.4400: Invalid inode table block 0 in block_group 0 [ 1540.849188][T15734] usb 8-1: USB disconnect, device number 14 [ 1540.909451][T21110] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1540.923539][T21110] EXT4-fs error (device loop8): ext4_truncate:4286: inode #11: comm syz.8.4400: mark_inode_dirty error [ 1540.935339][T21110] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1540.953116][T21110] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.4400: Invalid inode table block 0 in block_group 0 [ 1540.968895][T21110] EXT4-fs (loop8): 1 truncate cleaned up [ 1540.991424][T21110] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 1541.110447][T21110] EXT4-fs (loop8): Ignoring removed bh option [ 1541.130578][T16259] udevd[16259]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1541.137930][T21110] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 1541.364918][T21120] loop7: detected capacity change from 0 to 256 [ 1541.509462][T21121] loop0: detected capacity change from 0 to 1024 [ 1542.242852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.441371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.512470][T21135] loop7: detected capacity change from 0 to 256 [ 1542.578141][T21135] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 1542.883896][T16316] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1543.016125][T21147] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4411'. [ 1543.317365][T16316] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1543.390011][T16316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.580505][T16316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1543.668590][T16316] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.692467][T21150] netlink: 'syz.7.4412': attribute type 9 has an invalid length. [ 1543.726550][T21150] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.4412'. [ 1543.858396][T16316] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1543.883176][T16316] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1543.905260][T16316] usb 1-1: Product: syz [ 1543.909460][T16316] usb 1-1: Manufacturer: syz [ 1543.968595][T16316] cdc_wdm 1-1:1.0: skipping garbage [ 1543.978715][T16316] cdc_wdm 1-1:1.0: skipping garbage [ 1544.011302][T16316] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1544.042182][ T13] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1544.050164][T16316] cdc_wdm 1-1:1.0: Unknown control protocol [ 1544.280875][T15740] usb 1-1: USB disconnect, device number 20 [ 1544.291648][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1544.299586][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1544.305680][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1544.346792][ T13] usb 8-1: Using ep0 maxpacket: 16 [ 1544.648922][ T13] usb 8-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 1544.658003][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.680301][ T13] usb 8-1: Product: syz [ 1544.692514][T21160] loop8: detected capacity change from 0 to 32768 [ 1544.725292][ T13] usb 8-1: Manufacturer: syz [ 1544.729954][ T13] usb 8-1: SerialNumber: syz [ 1544.764674][T21160] ERROR: (device loop8): dbAllocBits: leaf page corrupt [ 1544.764674][T21160] [ 1544.793678][T21177] loop6: detected capacity change from 0 to 1024 [ 1544.815719][T21160] ERROR: (device loop8): remounting filesystem as read-only [ 1544.837386][T21183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1544.863365][T21160] ERROR: (device loop8): dbAllocBits: leaf page corrupt [ 1544.863365][T21160] [ 1544.911312][T21160] ERROR: (device loop8): dbAllocBits: leaf page corrupt [ 1544.911312][T21160] [ 1544.938294][T21160] attempt to access beyond end of device [ 1544.938294][T21160] loop8: rw=2051, want=4696064, limit=32768 [ 1544.939742][T21182] attempt to access beyond end of device [ 1544.939742][T21182] loop8: rw=1, want=4680040, limit=32768 [ 1544.957477][T21160] JFS: sb_issue_discard(ffff88804f520000, 585984, 1024, GFP_NOFS, 0) = -5 => failed! [ 1544.989119][T21160] blkno = 8f100, nblocks = 400 [ 1544.993919][T21160] ERROR: (device loop8): dbFree: block to be freed is outside the map [ 1544.993919][T21160] [ 1545.005225][T21160] attempt to access beyond end of device [ 1545.005225][T21160] loop8: rw=2051, want=4696064, limit=32768 [ 1545.014993][T21182] metapage_write_end_io: I/O error [ 1545.019297][T21160] JFS: sb_issue_discard(ffff88804f520000, 585984, 1024, GFP_NOFS, 0) = -5 => failed! [ 1545.031745][T21160] blkno = 8f100, nblocks = 400 [ 1545.036797][T21160] ERROR: (device loop8): dbFree: block to be freed is outside the map [ 1545.036797][T21160] [ 1545.048801][T21160] attempt to access beyond end of device [ 1545.048801][T21160] loop8: rw=2051, want=4696064, limit=32768 [ 1545.069916][T21160] JFS: sb_issue_discard(ffff88804f520000, 585984, 1024, GFP_NOFS, 0) = -5 => failed! [ 1545.086959][T21160] blkno = 8f100, nblocks = 400 [ 1545.100091][T21160] ERROR: (device loop8): dbFree: block to be freed is outside the map [ 1545.100091][T21160] [ 1545.103669][T21182] blkno = 8ed2c, nblocks = 1 [ 1545.111611][T21192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4426'. [ 1545.123987][T21182] ERROR: (device loop8): dbUpdatePMap: blocks are outside the map [ 1545.123987][T21182] [ 1545.179639][ T13] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1545.198695][T21182] UFO tlock:0xffffc900028e20d8 [ 1545.212095][ T13] usb 8-1: unit 2 not found! [ 1545.264689][ T13] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 1545.289080][ T13] usb 8-1: USB disconnect, device number 15 [ 1545.308875][ T275] blkno = 8ed2c, nblocks = 4 [ 1545.315970][ T275] ERROR: (device loop8): dbUpdatePMap: blocks are outside the map [ 1545.315970][ T275] [ 1545.317761][T18771] udevd[18771]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1545.328255][T20647] attempt to access beyond end of device [ 1545.328255][T20647] loop8: rw=1, want=4680040, limit=32768 [ 1545.357086][T20647] metapage_write_end_io: I/O error [ 1545.364282][T20647] JFS: metapage_get_blocks failed [ 1545.369598][T20647] JFS: metapage_get_blocks failed [ 1545.374982][T20647] JFS: metapage_get_blocks failed [ 1545.380022][T20647] JFS: metapage_get_blocks failed [ 1545.515462][T16316] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1545.833064][T21212] loop7: detected capacity change from 0 to 1024 [ 1545.972985][T16316] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1546.101819][T16316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.313595][T16316] usb 1-1: config 0 descriptor?? [ 1546.454385][T16316] cp210x 1-1:0.0: cp210x converter detected [ 1546.901789][T16316] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1547.010734][T16316] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1547.120669][T21237] netlink: 63 bytes leftover after parsing attributes in process `syz.3.4445'. [ 1547.197589][T13846] usb 1-1: USB disconnect, device number 21 [ 1547.227019][T13846] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1547.257481][T21242] Set syz1 is full, maxelem 0 reached [ 1547.273261][T13846] cp210x 1-1:0.0: device disconnected [ 1548.340410][T21261] loop6: detected capacity change from 0 to 512 [ 1548.377412][T21245] loop8: detected capacity change from 0 to 32768 [ 1548.424823][T21257] loop7: detected capacity change from 0 to 8192 [ 1548.514974][T21261] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1548.636697][T21257] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1548.664361][T21261] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.4455: invalid indirect mapped block 256 (level 2) [ 1548.680808][T21257] REISERFS (device loop7): using ordered data mode [ 1548.768117][T21257] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1548.834720][T21261] EXT4-fs (loop6): 2 truncates cleaned up [ 1548.887481][T21261] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1548.949343][T21257] REISERFS (device loop7): checking transaction log (loop7) [ 1549.006765][T21257] REISERFS (device loop7): Using r5 hash to sort names [ 1549.042338][ T25] audit: type=1800 audit(1522.472:2704): pid=21261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4455" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1549.086694][T21257] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1549.133219][ T7262] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:16: bg 0: block 5: invalid block bitmap [ 1549.187312][T15740] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1549.209328][T21257] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1549.214545][ T7262] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1549.284748][ T7262] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1549.284748][ T7262] [ 1549.333172][ T7262] EXT4-fs (loop6): Total free blocks count 0 [ 1549.359531][ T7262] EXT4-fs (loop6): Free/Dirty block details [ 1549.382243][ T7262] EXT4-fs (loop6): free_blocks=0 [ 1549.387244][ T7262] EXT4-fs (loop6): dirty_blocks=2 [ 1549.410777][ T7262] EXT4-fs (loop6): Block reservation details [ 1549.428227][ T7262] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 1549.448293][ T6267] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16843019 with max blocks 1 with error 28 [ 1549.520369][ T6267] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1549.520369][ T6267] [ 1549.609895][T15740] usb 9-1: Using ep0 maxpacket: 16 [ 1550.414866][T21293] loop7: detected capacity change from 0 to 512 [ 1550.422620][T15740] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.476433][T15740] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1550.639328][T15740] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1550.648421][T15740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.661609][T15740] usb 9-1: config 0 descriptor?? [ 1550.706234][T21293] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.4460: inode #1: comm syz.7.4460: iget: illegal inode # [ 1550.867034][T21293] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.4460: error while reading EA inode 1 err=-117 [ 1551.131926][T21293] EXT4-fs (loop7): 1 orphan inode deleted [ 1551.256573][T21293] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000007,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,abort,noquota,dioread_lock,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none. [ 1551.570440][T15740] usbhid 9-1:0.0: can't add hid device: -71 [ 1551.576454][T15740] usbhid: probe of 9-1:0.0 failed with error -71 [ 1551.585031][T21293] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.4460: bg 0: block 376: padding at end of block bitmap is not set [ 1551.944431][T21293] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1552.329099][T15740] usb 9-1: USB disconnect, device number 4 [ 1552.510129][T21324] loop8: detected capacity change from 0 to 1024 [ 1553.852150][T21347] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1555.202600][T21354] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1555.209164][T21354] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1555.217301][T21354] vhci_hcd vhci_hcd.0: Device attached [ 1555.632596][T16314] usb 48-1: SetAddress Request (3) to port 0 [ 1555.647205][T16314] usb 48-1: new SuperSpeed USB device number 3 using vhci_hcd [ 1556.402822][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1556.416952][T21356] vhci_hcd: connection reset by peer [ 1556.419152][T21373] loop0: detected capacity change from 0 to 1024 [ 1556.429057][ T7262] vhci_hcd: stop threads [ 1556.433846][ T7262] vhci_hcd: release socket [ 1556.440884][ T7262] vhci_hcd: disconnect device [ 1556.832691][T21388] loop8: detected capacity change from 0 to 1024 [ 1556.997154][T15740] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1557.124179][T21397] loop8: detected capacity change from 0 to 512 [ 1557.197974][T21397] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1557.262998][T15740] usb 1-1: Using ep0 maxpacket: 8 [ 1557.340034][T21397] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1557.408942][T15740] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1557.429153][T15740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.459801][T21397] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.4480: bg 0: block 248: padding at end of block bitmap is not set [ 1557.541841][T15740] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1557.557365][T21397] Quota error (device loop8): write_blk: dquota write failed [ 1557.560658][T15740] pvrusb2: ********** [ 1557.586488][T21397] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1557.593100][T15740] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1557.605339][T21397] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.4480: Failed to acquire dquot type 1 [ 1557.701427][T15740] pvrusb2: Important functionality might not be entirely working. [ 1557.716314][T15740] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1557.731753][T21397] EXT4-fs (loop8): 1 truncate cleaned up [ 1557.748965][T21397] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 1557.776926][T15740] pvrusb2: ********** [ 1558.240906][T21398] loop7: detected capacity change from 0 to 32768 [ 1558.271986][T15740] usb 1-1: USB disconnect, device number 22 [ 1558.297103][ T2419] pvrusb2: Invalid write control endpoint [ 1558.486487][T21437] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1558.493034][T21437] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1558.501127][T21437] vhci_hcd vhci_hcd.0: Device attached [ 1558.560892][T21398] XFS (loop7): Mounting V5 Filesystem [ 1558.793358][T21398] XFS (loop7): Ending clean mount [ 1558.804967][T21448] lo speed is unknown, defaulting to 1000 [ 1558.871423][ T2419] pvrusb2: Invalid write control endpoint [ 1558.877979][ T2419] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1558.949100][T16810] XFS (loop7): Unmounting Filesystem [ 1558.979825][T16315] usb 50-1: SetAddress Request (2) to port 0 [ 1558.986510][T16315] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1559.044118][ T2419] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1559.187491][T21438] vhci_hcd: connection reset by peer [ 1559.205383][ T7266] vhci_hcd: stop threads [ 1559.210215][ T7266] vhci_hcd: release socket [ 1559.214853][ T2419] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1559.225123][ T7266] vhci_hcd: disconnect device [ 1559.948036][ T2419] pvrusb2: Device being rendered inoperable [ 1560.059303][ T2419] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1560.068658][ T2419] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1560.142821][T21462] loop0: detected capacity change from 0 to 512 [ 1560.147638][ T2419] pvrusb2: Attached sub-driver cx25840 [ 1560.156390][T21458] loop8: detected capacity change from 0 to 1024 [ 1560.169179][ T2419] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1560.267398][ T2419] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1560.328552][T21462] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1561.324362][T21494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1561.677887][T16314] usb 48-1: device descriptor read/8, error -110 [ 1562.063932][T21490] loop0: detected capacity change from 0 to 8192 [ 1562.091465][T21502] loop7: detected capacity change from 0 to 1024 [ 1562.208001][T16314] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 1562.244422][T16314] usb usb48-port1: attempt power cycle [ 1562.784633][T16314] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 1562.868033][T21490] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1562.877678][T21490] REISERFS (device loop0): using ordered data mode [ 1563.057566][T21490] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1563.182223][T16314] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 1563.198584][T16314] usb usb48-port1: unable to enumerate USB device [ 1564.021103][T21490] REISERFS (device loop0): checking transaction log (loop0) [ 1564.086154][T21490] REISERFS (device loop0): Using r5 hash to sort names [ 1564.096783][T21490] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1565.161081][T16315] usb 50-1: device descriptor read/8, error -110 [ 1565.190718][T21490] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1565.585554][T21547] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4509'. [ 1566.251500][T16315] usb usb50-port1: Cannot enable. Maybe the USB cable is bad? [ 1566.294160][T16315] usb usb50-port1: attempt power cycle [ 1566.948404][T16315] usb usb50-port1: Cannot enable. Maybe the USB cable is bad? [ 1568.135564][T21572] loop7: detected capacity change from 0 to 1024 [ 1568.145965][T16315] usb usb50-port1: Cannot enable. Maybe the USB cable is bad? [ 1568.165827][T16315] usb usb50-port1: unable to enumerate USB device [ 1568.743878][T21579] loop6: detected capacity change from 0 to 1024 [ 1569.022114][T15740] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1569.231072][T14198] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1569.292131][T15740] usb 1-1: Using ep0 maxpacket: 32 [ 1569.454093][T15740] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.486459][T15734] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1569.521745][T21601] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4524'. [ 1570.304030][T14198] usb 9-1: Using ep0 maxpacket: 16 [ 1570.428926][T15740] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1570.439489][T14198] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.667101][T15734] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1571.289573][T15734] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.300583][T15740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.309010][T14198] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.318844][T15740] usb 1-1: Product: syz [ 1571.323042][T15734] usb 8-1: config 220 has no interface number 2 [ 1571.329383][T14198] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1571.336048][T14198] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1571.345197][T15740] usb 1-1: Manufacturer: syz [ 1571.349916][T15734] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1571.363321][T15740] usb 1-1: SerialNumber: syz [ 1571.368679][T14198] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.377857][T15734] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1571.385505][T15734] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1571.392396][T15734] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1571.399426][T15740] usb 1-1: can't set config #1, error -71 [ 1571.407055][T14198] usb 9-1: config 0 descriptor?? [ 1571.413276][T15740] usb 1-1: USB disconnect, device number 23 [ 1571.446847][T14198] usb 9-1: can't set config #0, error -71 [ 1571.467195][T14198] usb 9-1: USB disconnect, device number 5 [ 1571.587845][T15734] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1571.631295][T15734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.639328][T15734] usb 8-1: Product: syz [ 1572.328261][T15734] usb 8-1: Manufacturer: syz [ 1572.334095][T15734] usb 8-1: SerialNumber: syz [ 1572.614631][T15734] usb 8-1: can't set config #220, error -71 [ 1572.658598][T15734] usb 8-1: USB disconnect, device number 16 [ 1572.752130][T21633] loop6: detected capacity change from 0 to 1024 [ 1573.698101][T21650] loop7: detected capacity change from 0 to 128 [ 1573.782547][T21650] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1573.932406][T21658] netem: change failed [ 1575.415792][ T4199] Bluetooth: hci0: link tx timeout [ 1575.421068][ T4199] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1575.429156][ T4199] Bluetooth: hci0: link tx timeout [ 1575.437759][ T4199] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1578.309294][T21705] loop7: detected capacity change from 0 to 1024 [ 1578.598718][T21716] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1578.605267][T21716] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1578.613236][T21716] vhci_hcd vhci_hcd.0: Device attached [ 1578.738638][T13846] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1579.482928][T21717] vhci_hcd: connection closed [ 1579.483185][ T7269] vhci_hcd: stop threads [ 1579.492457][ T7269] vhci_hcd: release socket [ 1579.497312][ T7269] vhci_hcd: disconnect device [ 1579.559938][T16315] usb 34-1: enqueue for inactive port 0 [ 1579.702815][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1579.709213][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1579.717629][ T1420] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1581.437426][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4561'. [ 1581.512951][T13846] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1581.528031][T13846] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1581.549177][T13846] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1581.571033][T13846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.772929][T13846] usb 9-1: can't set config #17, error -71 [ 1581.781450][T16315] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 1581.828734][T13846] usb 9-1: USB disconnect, device number 6 [ 1581.835081][T16315] usb usb34-port1: attempt power cycle [ 1582.390642][T16315] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 1582.820344][T16315] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 1582.840346][T16315] usb usb34-port1: unable to enumerate USB device [ 1582.893080][T21751] loop0: detected capacity change from 0 to 1024 [ 1586.029670][T21760] loop8: detected capacity change from 0 to 32768 [ 1586.305420][T21784] netlink: 2044 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1586.326510][T21784] netlink: 73 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1588.169720][T21801] syz.8.4581[21801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.169864][T21801] syz.8.4581[21801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1590.478891][T21832] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1590.496861][T21832] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1590.505091][T21832] vhci_hcd vhci_hcd.0: Device attached [ 1591.424907][T21833] vhci_hcd: connection closed [ 1591.429250][T11906] vhci_hcd: stop threads [ 1591.529970][T11906] vhci_hcd: release socket [ 1591.551486][T11906] vhci_hcd: disconnect device [ 1591.605110][T15740] usb 34-1: enqueue for inactive port 0 [ 1591.694702][T21847] loop7: detected capacity change from 0 to 1024 [ 1591.702407][T21846] loop8: detected capacity change from 0 to 1024 [ 1591.774144][T21847] EXT4-fs (loop7): Ignoring removed bh option [ 1591.876490][T21847] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 1591.972360][T21847] EXT4-fs (loop7): shut down requested (2) [ 1592.006760][T21847] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 1592.712394][T15740] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 1592.763224][T15740] usb usb34-port1: attempt power cycle [ 1593.176487][T15740] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 1594.421297][T15740] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 1594.495314][T21873] loop0: detected capacity change from 0 to 4096 [ 1594.515332][T15740] usb usb34-port1: unable to enumerate USB device [ 1594.625532][T21873] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1594.686760][T21873] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1594.713690][T21873] EXT4-fs (loop0): inline encryption not supported [ 1594.738693][T21892] loop7: detected capacity change from 0 to 6 [ 1594.747986][T21873] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 1594.747986][T21873] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1594.747986][T21873] [ 1594.781110][T21892] Dev loop7: unable to read RDB block 6 [ 1594.799908][T21892] loop7: unable to read partition table [ 1594.817425][T21890] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1594.825363][T21890] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1594.836993][T21890] vhci_hcd vhci_hcd.0: Device attached [ 1594.858712][T21892] loop7: partition table beyond EOD, truncated [ 1594.870163][T21873] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1594.908846][T21892] loop_reread_partitions: partition scan of loop7 (úùƒýä¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1594.927042][T21873] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv0,inlinecrypt,nouser_xattr,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,data_err=ignore,,errors=continue. Quota mode: writeback. [ 1595.002822][T21894] vhci_hcd: connection closed [ 1595.013600][ T7269] vhci_hcd: stop threads [ 1595.045361][ T7269] vhci_hcd: release socket [ 1595.061438][T21891] [ 1595.063218][ T7269] vhci_hcd: disconnect device [ 1595.063898][T21891] ====================================================== [ 1595.063905][T21891] WARNING: possible circular locking dependency detected [ 1595.085504][T21891] syzkaller #0 Not tainted [ 1595.092201][T21891] ------------------------------------------------------ [ 1595.099314][T21891] syz.8.4608/21891 is trying to acquire lock: [ 1595.106085][T21891] ffff888079f1e138 ((wq_completion)loop7){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 1595.116576][T21891] [ 1595.116576][T21891] but task is already holding lock: [ 1595.124248][T21891] ffff888147fb8468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 1595.133939][T21891] [ 1595.133939][T21891] which lock already depends on the new lock. [ 1595.133939][T21891] [ 1595.146073][T21891] [ 1595.146073][T21891] the existing dependency chain (in reverse order) is: [ 1595.158246][T21891] [ 1595.158246][T21891] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 1595.166703][T21891] __mutex_lock_common+0x1e3/0x2400 [ 1595.172828][T21891] mutex_lock_killable_nested+0x17/0x20 [ 1595.181610][T21891] lo_open+0x6a/0x100 [ 1595.186485][T21891] blkdev_get_whole+0x90/0x390 [ 1595.193879][T21891] blkdev_get_by_dev+0x2d0/0xa60 [ 1595.201058][T21891] blkdev_open+0x12d/0x2c0 [ 1595.208584][T21891] do_dentry_open+0x7ff/0xf80 [ 1595.215090][T21891] path_openat+0x26f5/0x2fa0 [ 1595.222949][T21891] do_filp_open+0x1e2/0x410 [ 1595.228689][T21891] do_sys_openat2+0x150/0x4b0 [ 1595.233994][T21891] __x64_sys_openat+0x135/0x160 [ 1595.240837][T21891] do_syscall_64+0x4c/0xa0 [ 1595.245997][T21891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1595.253131][T21891] [ 1595.253131][T21891] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 1595.262798][T21891] __mutex_lock_common+0x1e3/0x2400 [ 1595.270390][T21891] mutex_lock_nested+0x17/0x20 [ 1595.276476][T21891] blkdev_get_by_dev+0x157/0xa60 [ 1595.282152][T21891] swsusp_check+0xa1/0x2b0 [ 1595.288581][T21891] software_resume+0xc6/0x3b0 [ 1595.295143][T21891] resume_store+0xe4/0x130 [ 1595.300101][T21891] kernfs_fop_write_iter+0x379/0x4c0 [ 1595.307870][T21891] vfs_write+0x745/0xd60 [ 1595.313677][T21891] ksys_write+0x152/0x260 [ 1595.322966][T21891] do_syscall_64+0x4c/0xa0 [ 1595.330494][T21891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1595.339713][T21891] [ 1595.339713][T21891] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 1595.350676][T21891] __mutex_lock_common+0x1e3/0x2400 [ 1595.357082][T21891] mutex_lock_nested+0x17/0x20 [ 1595.363506][T21891] software_resume+0x7c/0x3b0 [ 1595.372756][T21891] resume_store+0xe4/0x130 [ 1595.379966][T21891] kernfs_fop_write_iter+0x379/0x4c0 [ 1595.388967][T21891] vfs_write+0x745/0xd60 [ 1595.397443][T21891] ksys_write+0x152/0x260 [ 1595.405105][T21891] do_syscall_64+0x4c/0xa0 [ 1595.411630][T21891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1595.420660][T21891] [ 1595.420660][T21891] -> #3 (&of->mutex){+.+.}-{3:3}: [ 1595.430678][T21891] __mutex_lock_common+0x1e3/0x2400 [ 1595.437708][T21891] mutex_lock_nested+0x17/0x20 [ 1595.444123][T21891] kernfs_seq_start+0x51/0x3c0 [ 1595.450185][T21891] seq_read_iter+0x3c4/0xd50 [ 1595.455308][T21891] vfs_read+0x759/0xd60 [ 1595.460626][T21891] ksys_read+0x152/0x260 [ 1595.466269][T21891] do_syscall_64+0x4c/0xa0 [ 1595.472536][T21891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1595.479769][T21891] [ 1595.479769][T21891] -> #2 (&p->lock){+.+.}-{3:3}: [ 1595.487121][T21891] __mutex_lock_common+0x1e3/0x2400 [ 1595.493275][T21891] mutex_lock_nested+0x17/0x20 [ 1595.499038][T21891] seq_read_iter+0xad/0xd50 [ 1595.504927][T21891] do_iter_readv_writev+0x47e/0x5f0 [ 1595.510994][T21891] do_iter_read+0x20b/0x7c0 [ 1595.516435][T21891] loop_process_work+0x16dd/0x24a0 [ 1595.522828][T21891] process_one_work+0x85f/0x1010 [ 1595.528530][T21891] worker_thread+0xaa6/0x1290 [ 1595.533706][T21891] kthread+0x436/0x520 [ 1595.538345][T21891] ret_from_fork+0x1f/0x30 [ 1595.543461][T21891] [ 1595.543461][T21891] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1595.553072][T21891] process_one_work+0x7bb/0x1010 [ 1595.559901][T21891] worker_thread+0xaa6/0x1290 [ 1595.566700][T21891] kthread+0x436/0x520 [ 1595.571565][T21891] ret_from_fork+0x1f/0x30 [ 1595.576946][T21891] [ 1595.576946][T21891] -> #0 ((wq_completion)loop7){+.+.}-{0:0}: [ 1595.586281][T21891] __lock_acquire+0x2c42/0x7d10 [ 1595.591982][T21891] lock_acquire+0x19e/0x400 [ 1595.598069][T21891] flush_workqueue+0x16c/0x13d0 [ 1595.604452][T21891] drain_workqueue+0xcf/0x380 [ 1595.610009][T21891] destroy_workqueue+0x7b/0xb20 [ 1595.615570][T21891] __loop_clr_fd+0x234/0xb90 [ 1595.620753][T21891] blkdev_put+0x53f/0x7d0 [ 1595.627089][T21891] blkdev_close+0x76/0xa0 [ 1595.633277][T21891] __fput+0x234/0x930 [ 1595.639825][T21891] task_work_run+0x125/0x1a0 [ 1595.645151][T21891] exit_to_user_mode_loop+0x10f/0x130 [ 1595.652953][T21891] exit_to_user_mode_prepare+0xee/0x180 [ 1595.659280][T21891] syscall_exit_to_user_mode+0x16/0x40 [ 1595.666173][T21891] do_syscall_64+0x58/0xa0 [ 1595.671102][T21891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1595.677912][T21891] [ 1595.677912][T21891] other info that might help us debug this: [ 1595.677912][T21891] [ 1595.688341][T21891] Chain exists of: [ 1595.688341][T21891] (wq_completion)loop7 --> &disk->open_mutex --> &lo->lo_mutex [ 1595.688341][T21891] [ 1595.703034][T21891] Possible unsafe locking scenario: [ 1595.703034][T21891] [ 1595.711555][T21891] CPU0 CPU1 [ 1595.717735][T21891] ---- ---- [ 1595.723443][T21891] lock(&lo->lo_mutex); [ 1595.728380][T21891] lock(&disk->open_mutex); [ 1595.737961][T21891] lock(&lo->lo_mutex); [ 1595.746753][T21891] lock((wq_completion)loop7); [ 1595.752377][T21891] [ 1595.752377][T21891] *** DEADLOCK *** [ 1595.752377][T21891] [ 1595.760509][T21891] 2 locks held by syz.8.4608/21891: [ 1595.765808][T21891] #0: ffff88802013bd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 1595.775121][T21891] #1: ffff888147fb8468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 1595.784330][T21891] [ 1595.784330][T21891] stack backtrace: [ 1595.790216][T21891] CPU: 1 PID: 21891 Comm: syz.8.4608 Not tainted syzkaller #0 [ 1595.797696][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1595.807741][T21891] Call Trace: [ 1595.811005][T21891] [ 1595.813917][T21891] dump_stack_lvl+0x188/0x250 [ 1595.818623][T21891] ? load_image+0x400/0x400 [ 1595.823154][T21891] ? show_regs_print_info+0x20/0x20 [ 1595.829650][T21891] ? print_circular_bug+0x12b/0x1a0 [ 1595.835087][T21891] check_noncircular+0x296/0x330 [ 1595.840300][T21891] ? add_chain_block+0x940/0x940 [ 1595.845238][T21891] ? lockdep_lock+0xf1/0x1f0 [ 1595.850166][T21891] ? mark_lock+0x94/0x320 [ 1595.854518][T21891] ? _find_first_zero_bit+0xce/0xf0 [ 1595.859848][T21891] __lock_acquire+0x2c42/0x7d10 [ 1595.864693][T21891] ? __lock_acquire+0x13bc/0x7d10 [ 1595.869723][T21891] ? verify_lock_unused+0x140/0x140 [ 1595.875574][T21891] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1595.882890][T21891] ? verify_lock_unused+0x140/0x140 [ 1595.888397][T21891] ? __perf_event_task_sched_in+0x4e6/0x560 [ 1595.894334][T21891] ? memset+0x1e/0x40 [ 1595.898451][T21891] lock_acquire+0x19e/0x400 [ 1595.902953][T21891] ? flush_workqueue+0x150/0x13d0 [ 1595.907959][T21891] ? __mutex_trylock_common+0x155/0x260 [ 1595.913482][T21891] ? read_lock_is_recursive+0x10/0x10 [ 1595.918832][T21891] ? __init_swait_queue_head+0xa5/0x150 [ 1595.924355][T21891] flush_workqueue+0x16c/0x13d0 [ 1595.929181][T21891] ? flush_workqueue+0x150/0x13d0 [ 1595.934180][T21891] ? __lock_acquire+0x7d10/0x7d10 [ 1595.939182][T21891] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1595.945325][T21891] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1595.950774][T21891] ? rcu_work_rcufn+0x120/0x120 [ 1595.956310][T21891] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1595.962214][T21891] ? finish_wait+0xc0/0x1d0 [ 1595.967236][T21891] drain_workqueue+0xcf/0x380 [ 1595.971906][T21891] destroy_workqueue+0x7b/0xb20 [ 1595.976887][T21891] __loop_clr_fd+0x234/0xb90 [ 1595.981581][T21891] ? lo_release+0x172/0x1f0 [ 1595.986108][T21891] ? lo_open+0x100/0x100 [ 1595.990335][T21891] blkdev_put+0x53f/0x7d0 [ 1595.994648][T21891] blkdev_close+0x76/0xa0 [ 1595.998956][T21891] ? blkdev_open+0x2c0/0x2c0 [ 1596.003518][T21891] __fput+0x234/0x930 [ 1596.007490][T21891] task_work_run+0x125/0x1a0 [ 1596.012054][T21891] exit_to_user_mode_loop+0x10f/0x130 [ 1596.017438][T21891] exit_to_user_mode_prepare+0xee/0x180 [ 1596.022984][T21891] syscall_exit_to_user_mode+0x16/0x40 [ 1596.028442][T21891] do_syscall_64+0x58/0xa0 [ 1596.032844][T21891] ? clear_bhb_loop+0x30/0x80 [ 1596.037513][T21891] ? clear_bhb_loop+0x30/0x80 [ 1596.042168][T21891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1596.048049][T21891] RIP: 0033:0x7f18a5c91e59 [ 1596.052457][T21891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.072129][T21891] RSP: 002b:00007ffd12de36a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1596.080533][T21891] RAX: 0000000000000000 RBX: 00007f18a5f0cda0 RCX: 00007f18a5c91e59 [ 1596.088482][T21891] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1596.096432][T21891] RBP: 00007f18a5f0cda0 R08: 00007f18a5f0b038 R09: 0000000000000000 [ 1596.104389][T21891] R10: 00000000003ffd80 R11: 0000000000000246 R12: 000000000017e328 [ 1596.112344][T21891] R13: 00007f18a5f0b09c R14: 000000000017e065 R15: 00007f18a5f0b090 [ 1596.120320][T21891]