last executing test programs: 10m49.842118118s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040814) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m47.48124665s ago: executing program 2 (id=8): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="13000000100000000800", @ANYRES32=0x0], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timerfd_create(0x7, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r3, 0x1, 0x0, @val=@iter={0x0}}, 0x20) 10m46.328833865s ago: executing program 2 (id=10): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @empty}}) socket$tipc(0x1e, 0x5, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 10m31.135966837s ago: executing program 32 (id=10): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @empty}}) socket$tipc(0x1e, 0x5, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 8m34.530831574s ago: executing program 5 (id=238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14c, r4, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x800000000000007}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000810) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) 8m27.382708677s ago: executing program 5 (id=253): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x20000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x28, r2, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000200)=@llc={0x1a, 0x201, 0x8, 0x8a, 0x9, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x80, &(0x7f0000001880)=[{0x0}, {&(0x7f0000000340)="d54d90597e0e9bb3f960360f9fdff55c2202b3ea1d2211f79e961da2eb24ab2fb178ef8b98df6693f5485180885643f28ff0502038de106147f7bfb60ade4260b546d23d642883b3d51f0a467f562d8f472d9ee8ba54028e66d160df2908d475ccaed2a5bd15056cc36976f10598c522", 0x70}, {&(0x7f00000003c0)}, {&(0x7f0000000480)="fa8cf24294446add3f7369d12a353484db95efa9309ad5504d17e3bde06e546490e39560611880d5fc4d86ec86325d022faeff0b84d03431053aceeddd08d3fc91df46523593bea1200e9f6fce9040d5e3ae3a8c2fb5203b0123e5b6cb9b5cb33912a4be0069a806f60604f1f64d468a57d58ecbbf27822611d89d2bb26801994611ee83b854af6e20bc123ad0be4a32b1261a9b2b67887a27c9d2065ac3afd91decc4cd779d2bb404af98560c055ce1566d5e8d2dcfe501a756", 0xba}, {&(0x7f0000000580)="a736dd7730099bbc8bf131628acf993d53ddbfe2d736fd9edd688c24a125e30f7b61d761ae45386a0d0eab9dde7061cb7c214ec4c7f2343f5675a2d7b037a40f9829fb984d50ea3030ffe5a9f5c667cc449bc945e360cea878864d92702ed74edff288cca265456b7115d681d36049de4e4e31d2445824142ef8ef3395efbe45f8dbac5cb8b5b8d3949d4fd4e37d5b40b8d5c503bd02f41b7e76c159b6bb87f95685a31a073ec69fcd5ac22f1106c2c5c9dee0aee342d97e7aaed4a36c6ca76aa50820cb1f3563db1c669d2abaee3de8964ce8b8b7", 0xd5}, {0x0}], 0x6, &(0x7f0000001900)=ANY=[], 0x248}, 0x8880) recvfrom$inet(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 8m25.501139061s ago: executing program 5 (id=257): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@dev, @multicast1}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x40) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000080)='./file1\x00') 8m24.620527778s ago: executing program 5 (id=261): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000440), 0x3, r2, 0xeeeeeeee}) 8m23.367695597s ago: executing program 3 (id=262): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r1 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext\xf1\xab>\x01\xa8\xdbx3\xbe\x9ch\x1c\xdc\x99\xc0\xd0?\"d\xc6\x9d\x1c_Y\xabr_\xd4\xbc\x04\x03\xc9d\x1d\xc7\xd0f\xf2\xe5\xb2-\x86\x83\xa3+L\x02S=\x12\xc0;\x9c\xa1=\xe7\xa2\x88\twS\xf6Z\xed\xbf\xaa\xa0\x8a\xcb\xce\xeeMh{\xf1<}\xe6\xb5\xd6\xbb\xdf\xa4', &(0x7f0000001400)='sysfs\x00', 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r2) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x26}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$inet(r0, 0x0, 0x4040001) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000100), 0x10) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000580)={0x0, 0x15, 0xe, "85a42632d0492f24bf8012dd86a6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="e8f8f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x2000000, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3de4004575f0ee22656f80dad493f32bedd1ac95d926fe82072dece069c727ce610b42b945802771dddfd5471f97b5b583bb41a2b026f6eaf3fcae4c0ab1fae25d7d7a70a859aeec21fba8de5a79aec9bed9838345c01858172fab0087616dc095c0", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRES32, @ANYBLOB="2c00b2969989c09d1498c6d2400403993ead1b5318e2e8ead5d2f05cca6c5e7a3436472255772bdef5ffc7ebcb18e1f4e553ae6632"]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000400)={@remote}, 0xffb6) 8m18.549849219s ago: executing program 5 (id=274): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 8m18.070187167s ago: executing program 3 (id=275): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@loopback, 0x0, 0x3c00, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8bbb}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d5, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00', 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xfffffffc}}, 0xe8) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x634e9f9427bbb997, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921cacd900, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010001", 0x7) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0), 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) r5 = getpgid(r4) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x2, 0x5001) r6 = open(&(0x7f0000000000)='.\x00', 0x420082, 0x24d) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x3ff) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004550f, &(0x7f0000002a40)) 8m16.817276924s ago: executing program 3 (id=280): bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 8m16.066236082s ago: executing program 5 (id=283): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000bfd50000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 8m15.928245615s ago: executing program 3 (id=284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX]) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') syz_open_dev$sg(&(0x7f00000001c0), 0x10000000000003, 0x141102) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) 8m14.526973781s ago: executing program 3 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x7fff, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) 8m13.935604726s ago: executing program 3 (id=292): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@loopback, 0x0, 0x3c00, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8bbb}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d5, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00', 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xfffffffc}}, 0xe8) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x634e9f9427bbb997, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921cacd900, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010001", 0x7) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0), 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) r5 = getpgid(r4) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x2, 0x5001) r6 = open(&(0x7f0000000000)='.\x00', 0x420082, 0x24d) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x3ff) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004550f, &(0x7f0000002a40)) 8m0.632232786s ago: executing program 33 (id=283): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000bfd50000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 7m58.834154608s ago: executing program 34 (id=292): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@loopback, 0x0, 0x3c00, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8bbb}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d5, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00', 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xfffffffc}}, 0xe8) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x634e9f9427bbb997, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921cacd900, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010001", 0x7) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0), 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) r5 = getpgid(r4) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x2, 0x5001) r6 = open(&(0x7f0000000000)='.\x00', 0x420082, 0x24d) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x3ff) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004550f, &(0x7f0000002a40)) 5m11.654021823s ago: executing program 0 (id=694): r0 = syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0xd, 0xf3, {0xf3, 0x31, "84e454f5edbf6c620cb0c536f933b5cfbc76da176804a51fe0e593e64e93e7e57f721a555f92a400bde192b7a281ef916cf4ef06d8e6ccfd5dc105fc34780c7424ff29036a01cc560839fbcf9313c35bb08e858a4d2718561fc1252d130d15ae06255c54b113eda70c65e38c820faa841f97d9e2d1ad9fc9f6079d797fb4f767fd92927fc457853b9cb116b191683129f4db1ec6a356ac9a4e257fdcd528e213f7f0ac84aa2edcce0f16c0653048e835bfb83cc84479f6e6fee0ce1750ee5b750fe1504a5b5b48374224eecbb0e9cb6058f016d0243374994f17b99f6c998217744fd304099b3865aa83b1b61a79654214"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000300)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xb}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x9, 0x9, "90b16107", "adadf20b"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0xda, 0x3, 0x5, 0xa736}}}, &(0x7f0000000840)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, '.F'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "3eba"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="3383d6fefd7ad5b5d9289de0ff6abe975774c6a73c6aee39313f33013a71adef21e1bd5f46a567adc3768369fd74b4a2952d908b479f68bcdf1995d4a3", 0x3d}, {0x0}], 0x2, 0xfffffffe, 0x7) 5m7.936806853s ago: executing program 0 (id=700): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000800) close(r0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429", 0x12}], 0x1}, 0x2400c000) 5m6.709290691s ago: executing program 0 (id=703): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc020000a9c2e51b9950c5fd0000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff"], 0xcc}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000040)) 5m5.215499384s ago: executing program 0 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = io_uring_setup(0x2624, &(0x7f0000000800)={0x0, 0xfffffffc, 0x800}) r3 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup3(r3, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 5m3.432309913s ago: executing program 0 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x8fc2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x50007a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000080000000006001d00fffe00006c2ada20aa609726a630909c3cabac29ac9b77cef306a9baa2304f2769dbd77f1d1d4528d47c1632f3b3bedeeb7f1c41955826892967052a37b69f1acf9bc77bab006a8c4535b03577ce14efb9008423fab007151bfa8fddf933daf37e121b5e88e45d6c48e536ed22eaeada4c"], 0x24}}, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000001c0)='./file0/file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='lastblock=00000000000000000226,gid=', @ANYRESDEC=0x0, @ANYRES8=r6, @ANYRESDEC=r1, @ANYRES16=r4], 0x0, 0xc50, &(0x7f0000001940)="$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") sync() getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5m1.247945396s ago: executing program 0 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(&(0x7f0000000040)='./file0\x00', 0x6b) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYRES64=r4, @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x1) 4m45.919949201s ago: executing program 35 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(&(0x7f0000000040)='./file0\x00', 0x6b) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYRES64=r4, @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x1) 1m32.298438302s ago: executing program 7 (id=1093): syz_open_dev$radio(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xfe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x8000000000000000, 0x8000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000700)={'\x00', 0x3, 0x9, 0xdfe, 0x7, 0x3, 0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) 1m28.797583352s ago: executing program 7 (id=1097): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m28.316712502s ago: executing program 7 (id=1099): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x161}, 0x0, &(0x7f0000000100)) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c3, 0x0) r2 = msgget$private(0x0, 0x41) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000440)=""/198) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) 1m26.730644456s ago: executing program 7 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x8fc2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x50007a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000080000000006001d00fffe00006c2ada20aa609726a630909c3cabac29ac9b77cef306a9baa2304f2769dbd77f1d1d4528d47c1632f3b3bedeeb7f1c41955826892967052a37b69f1acf9bc77bab006a8c4535b03577ce14efb9008423fab007151bfa8fddf933daf37e121b5e88e45d6c48e536ed22eaeada4c"], 0x24}}, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000001c0)='./file0/file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='lastblock=00000000000000000226,gid=', @ANYRESDEC=0x0, @ANYRES8=r6, @ANYRESDEC=r1, @ANYRES16=r4], 0x0, 0xc50, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtR96mmd1snA/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKHluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvYjKmXlHGnllS7v+kLz+/Yz9n3PmOTPvmdWjOWf2nDkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER8/RvHh0fSbo8CAHiUTk29OTzq/R8Anihn7P8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALC9FEV8N1K8+4N2OtuZ7qqebLYuX5memNx6saEUKSpRdOrLv9WRw6NHXnn16Fgv7738g/aFeGPqzPH6iYX5xaXZ5eXZmfp0q3l+YWZ2x49wv8vf6VDnBajPv3155sKF5frhl0c33X2ldnvf0wdqx8YOjr7Vq52emJyc6qsZGNzicbeatwPp4y3GJ9xTUcQ3I8V7L32QGhFRifvvhW1+dzxsQzFQ9l9nJaYnJjsrMtdstFbKO1MlVw1E1PoWGu/1yEfpxd0wHnG1/O9UDvhQOaipxcZS49zcbP10Y2mludJcaKVKd7Tl+tSiEmMpYjEi2sVuD569ZjCKOBIpbv+6nc5FRNHrgxdPTb05PLr9Aww8gkHe5WlrRcRqxL48a+/2LOxR+6KIv4wUPzw7HOdzX3Xa5v2Ir5T5WsSlMm+muJanU/kLYiziV95P4LE2EEX8IlIspHaa6fX+oXKz+eS36q+3Liz01fa2Kx+n/YMtNgGGHsHTbtjr+xM80apRxLnOFn87ffwPuwAAAAAAAAAAAACAR6OIn0aKG/MvpMXoHfs/tdhYarYu1s80zs11jwruHftfz0utra2t1VI36zmHc47nPJ3zbBrs5GKevprzWs7rOW/kvJlzNeetnO2cUcnPn7OeczjneM7TOc92shqLefpqzms5r+e8kfNmztWct3K2c4bzngAAAAAAAAAAAAAAAAAAAHjAhqKIyUhx/d0/6lxXOjrXpf/0sbFTE8/1XzP+c9s8Tln7ckT8NDrX5N32uneD+VrjqVL+efDrBWyvGkV8J1//7092ezAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCeUIkivhspfvSbdooUEeMRZ6Obt4rdHh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUKqmIk5Eiv/6RrUzvRoRX4yI366VfyL+d+1Ouz1iAAAAAAAAAAAAAAAAAAAA+ARKRVyKFD9+r51qEXGldnvf0wdqx8YOjr5VRBGpLOmvf2PqzPH6iYX5xaXZ5eXZmfp0q3l+YWZ2p09XPdlsXb4yPTH5UFZmW0MPefxD1RMLi+8sNS/+4cqW9++vHj+3vLLUOL/13TEUAxHD/XMOdQY8PTHZGfRcs9HqLJoqdxngQER9pysDAAAAAAAAAAAAAAAAAADAnrE/FTERKZ7/2ZHUO298oHvO/6e6U8V67U/+eOO7AObuyJ7+7w/Yye2004Ee6px4X5+emJyc6ps9MPjh0nJMKRXx2Uhx8O8/3zkfPsX+Lc+NL+v+LFKM/d+RXFc7WNaNb6qqHpqemKyfWmi9dHxubuF8Y6Vxbm62PrXYOL/jLw4AAAAAAAAAAAAAAAAAAACAe9ifivjzSHHk9dXUu+58Pv9/oDvVd/7/axG9y85X0+Zc1zm3/3c75/Z3b3/62Njrh5+/2/yHcf5/OaaUivhtpHjmrz7fuZ5+7/z/4Ttqy7ofR4pffO9Lua7yVFk30lud7iNeaM7NDpe1L0aK75/u1Uan9tVc+5mN2pGy9h8ixbN/sLn2aK59bqP2cFl7O1JMntq69rMbtaNl7VCk+Oqf1nu1+8var+faAxu1L59fmJvZ6cvLk6ns/3+LFF8e+Wbq/czftf/7vv/j6h257kM9f+/bD6r/a33zrua+Xsv9P7JN/1+KFH9x7Uu5rtt7h/P9z3T+3ej/70eK3/vU5tpXcu2zG7UjO10t2E1l//9TpFi99S/rP/O5/3NnbXRof/9/cWBz9rYLdqv/n+mbV8vjGv2IrwU8aZbf+fbbjbm52SU37uPGUH4198p43HDjfm/s8i8m4KErt///O1J87VKRevuxefv/d7pTG/v///Odje3/Y3fkul3a/n+2b96xvNcyOBBRXZlfHPxcRHX5nW+/1JxvXJy9ONsaHR07+vtHRg4fHRl8qrdzv3Frx68dPO7K/n87Uvzkb/55/XPszfv/W3/+t/+OXLdL/f+Z/nXatF+z45cCnjhl//91pPjX6x+s//+me33+1/uc74XnN2dvD3i3+v+5vnn1/M9Y37wXiojjO30uAAAAAAAAAAB4TOxPRfwsUvxt+x/Xr3m/+fif+HKvtv/4v7vZC9f/BwDurXz/n4oUP9//1dT7DpmdHP8/c0eu26Xjfw/0zZt5ROc17/hFBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAjylFEfsixbs/aKdbRTndVT3ZbF2+Mj0xufViQylSVKLo1Jd/qyOHR4+88urRsV7ee/kH7QvxxtSZ4/UTC/OLS7PLy7Mz9elW8/zCzOwWtU9v+Qg7X35nDnVegPr825dnLlxYrh9+eXTT3Vdqt/c9faB2bOzg6Fu92umJycmpvpqBwY/97B+SHtxD8QnyVBTx80jx3ksfpH8vIipx/72wze+Oh20oBsr+66zE9MRkZ0Xmmo3WSnlnquSqgYha30LjvR55BL14X8YjrkZEpRzwoXL1phYbS41zc7P1042lleZKc6GVKt3RlutTi0qMpYjFiGgXuz149prBKOLvIsXtX7fTfxQRRa8PXjw19ebw6PYPMPAIBnmXp60VEavxGPQs7FH7oojnIsUPzw7Hfxbdvuq0zfsRXynztYhLZd5McS1Pp/IXxFjEr7yfwGNtIIo4HSkWUju9X+Te72xXnvxW/fXWhYW+2t525WO/f/Ao2TZhD6tGEb/sbPG30y+9nwMAAAAAAAAAAADAHlfE1yLFjfkXUuf80PVzSputi/UzjXNz3cP6e8f+1/NSa2tra7XUzXrO4ZzjOU/nPJtzMefVnNdyXs95I+fNnKs5b+Vs54xKfv6cQ3k8w3l6POfpnGdzLua8Wume79tbj+t5/o2cN3Ou5ryVs50zHCcNAAAAAAAAAAAAAAAAAMBDUokivhcpfvSbdloruteXPRvdvOU8V/hE+/8AAAD//9oqOjc=") sync() rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m24.913447589s ago: executing program 7 (id=1105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00"/12], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 1m23.449506313s ago: executing program 7 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 1m8.134159094s ago: executing program 36 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 13.003082923s ago: executing program 9 (id=1210): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 12.836107087s ago: executing program 1 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x48, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "e179e421a388f7b1ec2e9293f1"}]}]}]}, 0x48}}, 0x0) 12.77577638s ago: executing program 4 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000280)=""/2, 0x2, 0x0, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791096000000000061000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605e46e00ded1acb26f8fa9c2702a8aac94fcbbdd2fbbba184bc337d5cb0c04a788fd76b402d5229125c274b171290fdfb32d00504a2a4f797a0103b19a04911e2ab1f208858be1873ee684e45ce2dd5de070f1aabdaa2de7edcbd27f403caffe57995b4e2d914a3c5b9bcf7ba242d1ed391d564b18b3de9c1db2b9232c5e"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xcd, &(0x7f0000000d80)=""/205, 0x0, 0x3b, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f00000006c0)=ANY=[], 0x1, 0x1506, &(0x7f0000004000)="$eJzs3QnYj9XWMPC19t43D0n/JPNee938k2GTJBmSZEiSJEkyJSRJjiQkHjIlIQmZk8whmUIyz1PmJDmSJAkJSfZ3PXXOcc7b+d7e853zft73POt3Xfd173Xte+177//ifw/Xcz3PNx0HV61frVJdZoZ/Cv66SwWAFADoBwDXAEAEAKWylcqW1p9JY+o/dxLxr/XQtCs9A3ElSf3TN6l/+ib1T9+k/umb1D99k/qnb1L/9E3qL0R6tm167mtlS7/bP//+P+XXnbz//19Irv/pm9T/382ZTP/I0VL/fyeXQgj/WIbUP32T+qdvUv/0Teqfvkn90zepvxDp2ZV+/yzbld2u9L8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDpw/lwmQGAtH10pSclhBBCCCGEEEKIf6mQ8UrPQAghhBBCCCGEEP/9EBRoMBBBBsgIKZAJMsNVkAWuhqxwDSTgWsgG10F2uB5yQE7IBbkhD+SFfGCBwAFDDPmhACThBigIN0IhKAxFoCh4KAbF4SYoATdDSbgFSsGtUBpugzJQFspBebgdKsAdUBHuhEpwF1SGKlAVqsHdUB3ugRpwL9SE+6AW3A+14QGoAw9CXXgI6sHDUB8egQbwKDSERtAYmkDT/6f8F6ArvAjdoDukQg/oCS9BL+gNfaAv9IOXoT+8AgPgVRgIg2AwvAZD4HUYCm/AMBgOI+BNGAmjYDSMgbEwDsbDWzAB3oaJ8A5MgskwBabCNJgOM+BdmAmzYDa8B3PgfZgL82A+LICF8AEsgsWwBD6EpfARLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg49hO+yAnbALdsMe2AufwD74FPbDZ3AAPv8H88/9h/xOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwByYC3NhHsyD+TAfEhIyMubH/JjEJBbEglgIC2ERLIIePRbH4lgCb8aSWBJLYSksjaWxDJbFslgey2MFrIAVsSJWwkpYGStjVayKd+PdeA/WwBpYE2tiLayFtbE21sE6WBfrYj2sh/WxPjbABtgQG2JjbIxNsSk2w2bYHJtjS2yJrbAVtsbW2AbbYFtsi+2wHbbH9tgBO2BH7IidsDN2xhfwBXwRX8TuWFn1wJ7YE3thL+yDfbEvvoz98RV8BV/FgTgIB+Nr+Bq+jkPxLA7D4TgCR2AFNQpH4xhkNQ7H43icgBNwIk7ESTgZJ+NUnIbTcQbOwJk4C2fhezgH38f3cR7OwwW4EBfiIlyMS3AJLsVzuAyX4wpciatwNa7CtbgO1+IG3IgbcDNuxq24FT/Gj3EH7sBduAv34B78BD/BT/FTHIgH8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7EU3gaT+EZPINn8Ryex/N4AS/gRbyIl/BS2n9+lcYoozKoDCpFpajMKrPKorKorCqrSqiEyqayqewqu8qhcqhcKpfKo/KofCqfIkWKVazyq/wqqZKqoCqoCqlCqogqorzyqrgqrkqoEqqkKqlKqVtVaXWbKqPKqha+vCqvKqiWvqK6U1VSlVRlVUVVVdVUNVVdVVc1VA1VU9VUtVQtVVs9oOqoHtgHH1JplamvBmEDNRgbqkaqsWqiXsfHVDM1FJurFqqlekINx2HYWjXzbdTTqq0aje3UH9QYfFZ1UOOwo3pedVKdVRf1guqqmvtuqruahD1UTzUVe6neqo/qq2ZiFZVWsarqVTVQDVKD1WtqAb6uhqo31DA1XI1Qb6qRapQarcaosWqcGq/eUhPU22qiekdNUpPVFDVVTVPT1Yy0r1Y1S81W76k56n01V81T89UCtVB9oBapxWqJ+lAtVR+pZWq5WqFWqlVqtVqj1qp1ar3aoDaqTRGoLWqr2qY+VtvVDrVT7VK71R61V32i9qlP1X71mTqgPlcH1R/VIfWFOqy+VEfUV+qo+lodU9+o4+pbdUJ9p06qU+q0+l6dUT+os+qcOq9+VBfUT+qi+lldUkGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36kK6sC6ii2qvi+ni+iZdQt+sS+pbdCl9qy6tb9NldFldTpfXt+sK+g5dUd+pK+m7dGVdRVfV1fTdurq+R9fQ9+qa+j5dS9+va+sHdB39oK6rH9L19MO6vn5EN9CP6oa6kW6sm+im+jHdTD+um+sWuqV+QrfST+rW+indRj+t2+pndDv9B91eP6s76Od0R/287qQ76y76Z31JB91Nd9epuofuqV/SvXRv3Uf31f30y7q/fkUP0K/qgXqQHqxf00P063qofkMP08P1CP2mHqlH6dF6jB6rx+nx+i09Qb+tJ+p39CQ9WU/RU/U0PV33+dNIs/8L+W//nfwBv5x9q96mP9bb9Q69U+/Su/UevVfv1fv0Pr1f79cH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/QJfVKf0j/q7/UZ/YM+q8/pc/pHfUFf0Bf/9BmAQaOMNsZEJoPJaFJMJpPZXGWymKtNVnONSZhrTTZznclurjc5TE6Ty+Q2eUxek89YQ8YZNrHJbwqYpLnBFDQ3mkKmsCliihpvipni5qZ/Ov/35tfUNDXNTDPT3DQ3LU1L08q0Mq1Na9PGtDFtTVvTzrQz7U1708F0MB1NR9PJdDJdTBfT1XQ1AQBSTarpaV4yvUxv08f0Nf3My6a/6W8GmAFmoBloBpvBZogZYoaaoWaYGWZGmBFmpBlpRpvRZqwZa8ab8WaCmWAmmolmkplkppgpZpqZZmaYGWammWlmm9lmjplj5pq5Zr6ZbxaahWaRWWSWmCVmqVlqlpnlZrlZaVaa1Wa1WWvWmvVmvdloNprNZrNZZv78A5o7zU6z2+w2e81es8/sM/vNfnPAHDAHzUFzyBwyh81hc8QcMUfNUXPMHDPHzXFzwpwwJ81Jc9qcNmfMGXPWnDXnzXlzwVwwF81Fc8lcSrvti1SkIhOZKEOUIUqJUqLMUeYoS5QlyhpljRJRIsoWZYuyR9dHOaKcUa4od5Qnyhvli2xEkYs4iqP8UYEoGd0QFYxujApFhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv5Lxw/hbM7HfTfb3abaHranfcn2sr1tH9vX9rMv2/72FTvAvmoH2kF2sH3NDrGv26H2DTvMDrcj7Jt2pB1lR9sxdqwdZ8fbt+wE+7adaN+xk+xkO8VOtdPsdDvDvmtn2ll2tn3PzrHv27l2np1vF9iF9gO7yC62S+yHdqn9yC6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9Vusx/b7XaH3Wl32d12j91rP7H77Kd2v/3MHrCf24P2j/aQ/cIetl/aI/Yre9R+bY/Zb+xx+609Yb+zJ+0pe9p+b8/YH+xZe86etz/aC/Yne9H+bC/ZkHZzn3Z5J0OGMlAGSqEUykyZKQtloayUlRKUoGyUjbJTdspBOSgX5aI8lIfyUT5Kw8SUn/JTkpJUkApSISpERagIefJUnIpTCSpBJakklaJSVJpKUxkqQ+Uo7aJ5O91Bd9CddCfdRXdRFapC1agaVafqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUgBpQQ2pIjakxNaWm1IyaUXNqTi2pJbWiVtSaWlMbakNtqS21o3bUntpTB+pAHakjdaJO1IW6UFfqSt2oG6VSKvWkntSLelEf6kP9qB/1p/40gAbQQBpIg2kwDaEhNJSG0jAaTiPoTRpJo2g0jaGxNI7G03iaQBNoIk2kSTSJptAUmkbTaAbNoJk0k2bTbJpDc2guzaX5NJ8W0kJaRItoCS2hpbSUltEyWkEraBWtojW0htbROtpAG2gTbaIttIW20TbaTttpJ+2k3bSb9tJe2kf7aD/tpwN0gA7SQTpEh+gwHaYjdISO0lE6RsfoOB2nE3SCTtJJPE2n6QydobN0ls7TebpAP9FF+pkuUaAUl8lldle5LO5ql9Vd41Jcpu4A8Jc4l8vt8ri8Lp+zLofL+TcxOecKucKuiCvqvCvmirubfhOX6VHWlXPl3e2ugrvDVXRl3N/G1d09roa719V097lq7u6/iWu5+11t94ir4x51dV0jV881cfXdI66Be9Q1dI1cY9fEtXJPutbuKdfGPe3aumd+Ey9yi906t95tcBvdPvepO+9+dMfcN+6C+8l1c91dP/ey6+9ecQPcq26gG/SbeIR70410o9xoN8aNdeN+E09xU900N93NcO+6mW7Wb+KF7gM3xy1xc908N98t+CVOm9MS96Fb6j5yy9xyt8KtdKvcarfGrf3LXFe6zW6L2+r2uk/cdrfD7XS73G6355c4bR373WfugPvcHXVfu0PuC3fYHXdH3Fe/xGnrO+6+dSfcd+6kO+VOu+/dGfeDO+vO/bL+tLV/7352l1xwwMiKNRuOOANn5BTOxJn5Ks7CV3NWvoYTfC1n4+s4O1/POTgn5+LcnIfzcj62TOyYOeb8XICTfAMX5Bu5EBfmIlyUPRfj4nwTl+CbuSTfwqX4Vi7Nt3EZLsvluDzfzhX4Dq7Id3IlvosrcxWuytX4bq7O93ANvpdr8n1ci+/n2vwA1+EHuS4/xPX4Ya7Pj3ADfpQbciNuzE24KT/Gzfhxbs4tuCU/wa34SW7NT3Ebfprb8jPcjv/A7flZ7sDPcUd+njtxZ+7CL3BXfpG7cXdO5R7ck1/iXtyb+3Bf7scvc39+hQfwqzyQB/Fgfo2H8Os8lN/gYTycR/CbPJJH8Wgew2N5HI/nt3gCv80T+R2exJN5Ck/laTydZ/C7PJNn8Wx+j+fw+zyX5/F8XsAL+QNexIt5CX/IS/kjXsbLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexh/zdt7BO3kX7+Y9vJc/4X38Ke/nz/gAf84H+Y98iL/gw/wlH+Gv+Ch/zcf4Gz7O3/IJ/o5P8ik+zd/zGf6Bz/I5Ps8/8gX+iS/yz3yJA0OMsYp1bOIozhBnjFPiTHHm+Ko4S3x1nDW+Jk7E18bZ4uvi7PH1cY44Z5wrzh3nifPG+WIbU+xijuM4f1wgTsY3xAXjG+NCceG4SFw09nGxuHh8U1wivjkuGd8Sl4pvjUvHt8Vl4rJxubh8fHtcIb4jrhjfGVeK74orx1XiqnG1+O64enxPXCO+N64Z3xeXjO+Pa8cPxHXiB+O68UNxvfjhuH78SNwgfjRuGDeKG8dN4qbxY3Gz+PG4edwibhk/EbeKn4xbx0/FbeKn47bxM7/bnxr3iHvGL8UvxSHcq+cnFyQXJj9ILkouTi5JfphcmvwouSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObkluTUZQrWM4NErr73xkc/gM/oUn8ln9lf5LP5qn9Vf4xP+Wp/NX+ez++t9Dp/T5/K5fR6f1+fz1pN3nn3s8/sCPulv8AX9jb6QL+yL+KLe+2K+uG/im/qmvpl/3Df3LXxL/4R/wj/pn/RP+af8076tf8a385Bo75/1Hfxz/jn/vO/kO/su/gXf1b/ou/nuPtWn+p6+p+/le/k+vo/v5/v5/r6/H+AH+IF+oB/sB/shfogf6of6YX6YH+FH+JF+pB/tR/uxfqwf78f7CX6Cn+gn+kl+kp/ip/hpfpqf4Wf4mX6mn+1n+zl+jp/r5/r5fr5f6Bf6RX6RX+KX+KV+qV/ml/kVfoVf5Vf5NX6NX+fX+Q1+g9/kN/ktfovf5rf57X673+l3+t1+t9/r9/p9fp/f7/f7A/6AP+gP+kP+kD/sv/RH/Ff+qP/aH/Pf+OP+W3/Cf+dP+lP+tP/en/E/+LP+nD/vf/QX/E/+ov/ZX/LBj0+8lZiQeDsxMfFOYlJicmJKYmpiWmJ6Ykbi3cTMxKzE7MR7iTmJ9xNzE/MS8xMLEgsTHyQWJRYnliQ+TCxNfJRYllieWJFYmViVWJ0IIe/2OOQPBUIy3BAKhhtDoVA4FAlFgw/FQvFwUygRbg4lwy2hVLg1lA63hTKhbCgXHg0NQ6PQODQJTcNjoVl4PDQPLULL8ERoFZ4MrcNToU14OrQNz4R24Q+hfXg2dAjPhY7h+dApdA5dwguha3gxdAvdQ2roEXqGl0Kv0Dv0CX1Dv/By6B9eCQPCq2FgGBQGh9fCkPB6GBreCMPC8DAivBlGhlFhdBgTxoZxYXx4K0wIb4eJ4Z0wKUwOU8LUMC1MDzPCu2FmmBVmh/fCnPB+mBvmhflhQVgYPgiLwuKwJHwYloaPwrKwPKwIK8OqsDqsCWvDurA+bAgbw6awOWwJW8O28HHYHnaEnWFX2B32hL3hk7AvfBr2h8/CgfB5OBj+GA6FL8Lh8GU4Er4KR8PX4Vj4JhwP34YT4btwMpwKp8P34Uz4IZwN58L58GO4EH4KF8PP4VII4Uq/SRdCCCGE+N9A/05/j/9LjvpTuycAXL0j95H/2L8px6/t3hnztEoAwNPdOz70561y5dTU1D8du0xDVGAeACQu52eAy/FyaAlPQhtoASX+0p/yV+fqrTpf4P9sfIAoeStA5r/KScv/c3x5/Jv/7vp7q1Fz/tPxNUTJeQCFClzOyQSX48vjl/y746eqnM1+Z/xMX4wHaP5XOVngcnx5/OLwODwDbf7mSCGEEEIIIYQQ4le9Vbn2v/d8m/Z8nsdczskIl+O/93wuhBBCCCGEEEKI/1me7dzlqcfatGnRXhr/HY0UAAjX/PpR/0+YjzSk8V9sXOlvJiGEEEIIIcS/2uWb/is9EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIv36//HrxP58rt/7W4NCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHEv6v/EwAA//8oYjL2") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 11.996542488s ago: executing program 9 (id=1213): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000000)={0x7f, 0x100000000}) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 10.727544699s ago: executing program 4 (id=1215): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000c80)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x3, r2}) 10.703878655s ago: executing program 9 (id=1216): syz_mount_image$hfs(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x2000400, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2e0, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7800, 0x0, 0x3) 10.11107361s ago: executing program 9 (id=1217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) r1 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x2, 0x4000020}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x36314247}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, 0xfffffffffffffffe) getpid() close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b, 0x0, 0x0, 0x10, 0x0, @value}, 0xa1) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r8, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x2f}}, 0x10) 8.835711146s ago: executing program 4 (id=1218): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) syz_open_dev$video4linux(&(0x7f00000003c0), 0x7, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="050200000000000000200f00000008000300bf8e3cf4342357ab98177ec5219c0f1ff1cc54c6e9b1aa31ab0130d1e4eb241aa1475029f7be327258b3966eb4d38c3c3ac50d773059d5666ce221acab39d02a8771747052e07fe3d3accb0feacfb0d007ab7c4ac3a36e5e0561c9a5b925e0bc075eeb328225e1b4cde6c2e345e7afc43daffe2df4e74c", @ANYRES32, @ANYBLOB="52000e0080000000080211000001ffffffffffff0802110000010000000000000000000064007f5d01000301b82a01023c0401030a012d1a1000190900000000000000c90007001900000008000b0000000400000400800008000c006400000008000d0000000000"], 0x84}}, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) userfaultfd(0x800) process_mrelease(0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) 8.470604498s ago: executing program 6 (id=1219): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 7.86660317s ago: executing program 6 (id=1220): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) 7.15474577s ago: executing program 1 (id=1221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.835080657s ago: executing program 6 (id=1222): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x5, 0x9, 0x0, &(0x7f0000048000)=0xffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000010400)={0x7, 0x616, 0x7, 0xffffffff, 0x3, "972c700500141000000000002000052c707400"}) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0xcaa6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x80) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53dedc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = mq_open(&(0x7f0000000140)='@\x00', 0x80, 0x101, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x7f}) mq_timedreceive(r7, &(0x7f0000000700)=""/4096, 0x1000, 0x3, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x10029f8) close_range(r6, 0xffffffffffffffff, 0x0) 6.589460912s ago: executing program 1 (id=1223): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(0xffffffffffffffff, 0x88804) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000007c0)={0x52}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r6, 0x0, 0x4091) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fbffc001) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1a00000008330000a612db02ffff00", @ANYRES32=0x1, @ANYBLOB="0500"/13, @ANYRES32=0x0, @ANYRES32=r0], 0x50) 5.426458801s ago: executing program 9 (id=1224): syz_usb_connect$uac1(0x3, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010902960003010088d30904000000010300"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 4.864849874s ago: executing program 4 (id=1225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000280)=""/2, 0x2, 0x0, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791096000000000061000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605e46e00ded1acb26f8fa9c2702a8aac94fcbbdd2fbbba184bc337d5cb0c04a788fd76b402d5229125c274b171290fdfb32d00504a2a4f797a0103b19a04911e2ab1f208858be1873ee684e45ce2dd5de070f1aabdaa2de7edcbd27f403caffe57995b4e2d914a3c5b9bcf7ba242d1ed391d564b18b3de9c1db2b9232c5e"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xcd, &(0x7f0000000d80)=""/205, 0x0, 0x3b, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f00000006c0)=ANY=[], 0x1, 0x1506, &(0x7f0000004000)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 4.699814385s ago: executing program 1 (id=1226): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x44) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.570368931s ago: executing program 6 (id=1227): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(0xffffffffffffffff, 0x88804) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000007c0)={0x52}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r6, 0x0, 0x4091) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fbffc001) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1a00000008330000a612db02ffff00", @ANYRES32=0x1, @ANYBLOB="0500"/14, @ANYRES32=0x0, @ANYRES32=r0], 0x50) 2.493389324s ago: executing program 1 (id=1228): r0 = socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000004000000030000000000"], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7], 0x4c}}, 0x4000804) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x801) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000040)={0x2, {0xc, 0xfd5e4cf, 0x1613, 0x5}}) 2.41774024s ago: executing program 6 (id=1229): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="a32a001aab872dc812b6a472fcf8ef023ed10899ec4832b15f35763bffebba43ff0bc143b1ce6a562a5175eae865f01459a373d6289f00d43eebddc4da73198f41928f3f528353bc166e8f0ec48c174bef08f26b1e21bde4c7b503a2000180000061aa14522bd465e6a583f62c9f911b7cbcef7f0d4211"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./file1\x00', 0xe0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000001800)='./bus\x00', 0x0, 0x4000000, 0x0) write(r1, &(0x7f00000001c0)="240000005800410f9c00f4f90085b302", 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="0ce14abb3bbeaa4b6d47533210012ea9b1adc9d4935deb4e4a61f4793c476f5daea2dd2e0c91be03de1d6acb67bdb167b453260a4c", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRES32], 0x1, 0x2ca, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000400)='./file0\x00') io_setup(0x5, &(0x7f0000000200)) 2.002730966s ago: executing program 4 (id=1230): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.227819925s ago: executing program 9 (id=1231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x48, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "e179e421a388f7b1ec2e9293f1"}]}]}]}, 0x48}}, 0x0) 308.61533ms ago: executing program 6 (id=1232): r0 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x50) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x4000, r2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, 0x0, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 219.295965ms ago: executing program 4 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000280)=""/2, 0x2, 0x0, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xcd, &(0x7f0000000d80)=""/205, 0x0, 0x3b, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x18, 0x1412, 0x20, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f00000006c0)=ANY=[], 0x1, 0x1506, &(0x7f0000004000)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 1 (id=1234): prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x840) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000240)='mounts\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc2, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8b3700000000000000000500000008000300", @ANYRES32=r7], 0x28}}, 0x0) kernel console output (not intermixed with test programs): packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.093404][ T5887] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 487.108746][ T8991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.320984][ T8936] hsr_slave_0: entered promiscuous mode [ 487.796874][ T8936] hsr_slave_1: entered promiscuous mode [ 488.300013][ T5887] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 488.328521][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.347572][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.375147][ T8946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.472915][ T5887] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.485884][ T5887] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 488.507197][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.995994][ T5887] usb 7-1: config 0 descriptor?? [ 489.018916][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 489.061775][ T8991] hsr_slave_0: entered promiscuous mode [ 489.074061][ T8991] hsr_slave_1: entered promiscuous mode [ 489.081674][ T8991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.089593][ T8991] Cannot create hsr debugfs directory [ 489.113566][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.126760][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.160581][ T8946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.360788][ T9159] xt_CT: No such helper "snmp" [ 489.437857][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 489.453646][ T5887] pwc: recv_control_msg error -32 req 02 val 2700 [ 489.466053][ T5887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 489.553117][ T5887] pwc: recv_control_msg error -32 req 04 val 1000 [ 489.655810][ T5887] pwc: recv_control_msg error -32 req 04 val 1300 [ 489.712700][ T5887] pwc: recv_control_msg error -32 req 04 val 1400 [ 489.860225][ T5887] pwc: recv_control_msg error -32 req 02 val 2000 [ 489.868191][ T5887] pwc: recv_control_msg error -32 req 02 val 2100 [ 489.889236][ T5887] pwc: recv_control_msg error -32 req 04 val 1500 [ 489.977591][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 490.178497][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 490.188619][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 490.207438][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 490.222453][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 490.249063][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 490.268325][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 490.349265][ T5887] pwc: Registered as video103. [ 490.401942][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input17 [ 490.471472][ T5887] usb 7-1: USB disconnect, device number 10 [ 490.861618][ T8946] hsr_slave_0: entered promiscuous mode [ 490.868517][ T8946] hsr_slave_1: entered promiscuous mode [ 490.896038][ T8946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.913830][ T8946] Cannot create hsr debugfs directory [ 490.935471][ T5913] bridge_slave_1: left allmulticast mode [ 490.946215][ T5913] bridge_slave_1: left promiscuous mode [ 490.956896][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.983629][ T5913] bridge_slave_0: left allmulticast mode [ 490.989686][ T5913] bridge_slave_0: left promiscuous mode [ 491.008015][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.190530][ T5887] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 492.075412][ T5887] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.120013][ T5887] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 492.157614][ T5887] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 492.195663][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.219005][ T5887] usb 7-1: config 0 descriptor?? [ 492.237209][ T5887] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 492.304244][ T9181] netlink: 124 bytes leftover after parsing attributes in process `syz.4.786'. [ 492.349359][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 492.360903][ T5887] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 492.380440][ T5887] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 492.387822][ T5887] usb 7-1: media controller created [ 492.399386][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.471319][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 492.488398][ T5887] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 492.577097][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input18 [ 492.619367][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 492.675593][ T5887] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 492.828965][ T9185] dibusb: i2c wr: len=61 is too big! [ 492.828965][ T9185] [ 492.830256][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 492.855291][ T5887] dvb-usb: error while querying for an remote control event. [ 493.025887][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 493.046017][ T5887] dvb-usb: error while querying for an remote control event. [ 493.559156][ T9193] netlink: 48 bytes leftover after parsing attributes in process `syz.4.790'. [ 493.932189][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 493.938033][ T5887] dvb-usb: error while querying for an remote control event. [ 494.067459][ T5890] usb 7-1: USB disconnect, device number 11 [ 494.444154][ T5890] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 495.190489][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.208572][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.229673][ T5913] bond0 (unregistering): Released all slaves [ 496.418832][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 497.133249][ T9223] netlink: 124 bytes leftover after parsing attributes in process `syz.6.796'. [ 498.165876][ T5913] hsr_slave_0: left promiscuous mode [ 498.215802][ T9219] xt_CT: No such helper "snmp" [ 498.243610][ T5913] hsr_slave_1: left promiscuous mode [ 498.251665][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.302828][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.414288][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.443560][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.491698][ T5913] veth1_macvtap: left promiscuous mode [ 498.521302][ T5913] veth0_macvtap: left promiscuous mode [ 498.533545][ T5913] veth1_vlan: left promiscuous mode [ 498.550210][ T5913] veth0_vlan: left promiscuous mode [ 501.113616][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.120264][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.192442][ T5887] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 501.768999][ T5887] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.830069][ T5887] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 501.839108][ T5887] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 501.856181][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.881271][ T5887] usb 7-1: config 0 descriptor?? [ 501.974564][ T5887] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 502.053317][ T9240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.803'. [ 502.063722][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 502.432166][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 502.807278][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 502.834395][ T5887] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 502.848775][ T5887] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 502.858610][ T5887] usb 7-1: media controller created [ 502.874781][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.898500][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 502.907168][ T5887] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 502.920285][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input19 [ 502.934662][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 502.941845][ T5887] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 503.102554][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 503.109019][ T5887] dvb-usb: error while querying for an remote control event. [ 503.280375][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 503.286233][ T5887] dvb-usb: error while querying for an remote control event. [ 503.469969][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 503.475874][ T9] dvb-usb: error while querying for an remote control event. [ 503.681994][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 503.688128][ T9] dvb-usb: error while querying for an remote control event. [ 503.839942][ T5834] usb 7-1: USB disconnect, device number 12 [ 503.898288][ T5834] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 504.225235][ T8936] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 504.242349][ T8936] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 504.294502][ T8936] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 504.547187][ T8936] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 505.010662][ T9256] loop4: detected capacity change from 0 to 128 [ 505.079952][ T9256] EXT4-fs (loop4): Test dummy encryption mode enabled [ 505.133236][ T9256] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 505.194146][ T9256] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 505.660451][ T8991] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 505.678921][ T8991] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 505.696762][ T9263] fscrypt (loop4): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 506.529084][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 506.606127][ T8991] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 506.674030][ T8991] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 506.755166][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.885178][ T9271] loop4: detected capacity change from 0 to 4096 [ 507.133101][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.258139][ T8946] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 507.421563][ T8946] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 508.145214][ T8946] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 508.161192][ T9280] loop1: detected capacity change from 0 to 8 [ 508.200311][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 508.200337][ T30] audit: type=1800 audit(1745887378.139:206): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.811" name="file1" dev="loop4" ino=34 res=0 errno=0 [ 509.042277][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.049542][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.087770][ T8946] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 509.140401][ T30] audit: type=1326 audit(1745887379.829:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0138e969 code=0x7fc00000 [ 509.186556][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.193871][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.317608][ T30] audit: type=1326 audit(1745887379.999:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9b0138e969 code=0x7fc00000 [ 510.129757][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.562537][ T8991] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.851199][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.858440][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.468722][ T9296] loop4: detected capacity change from 0 to 128 [ 511.512110][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.519493][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.550195][ T9296] EXT4-fs (loop4): Test dummy encryption mode enabled [ 511.632013][ T9296] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 511.921092][ T9296] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 513.527096][ T9311] fscrypt (loop4): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 513.891747][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.462181][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 515.472988][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.482534][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.520613][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.529710][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.616997][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 515.629889][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 515.639430][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 515.648809][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 515.659233][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.784205][ T8991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.442320][ T9358] loop1: detected capacity change from 0 to 8 [ 517.620713][ T5828] Bluetooth: hci1: command tx timeout [ 517.711049][ T30] audit: type=1326 audit(1745887388.409:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0138e969 code=0x7fc00000 [ 517.860770][ T5828] Bluetooth: hci4: command tx timeout [ 518.446588][ T30] audit: type=1326 audit(1745887389.129:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9b0138e969 code=0x7fc00000 [ 518.522862][ T8991] veth0_vlan: entered promiscuous mode [ 518.885350][ T9372] loop4: detected capacity change from 0 to 32768 [ 519.395620][ T9383] 9pnet_fd: Insufficient options for proto=fd [ 519.720081][ T5828] Bluetooth: hci1: command tx timeout [ 519.827680][ T9391] loop4: detected capacity change from 0 to 128 [ 519.836636][ T9391] EXT4-fs (loop4): Test dummy encryption mode enabled [ 519.879790][ T8991] veth1_vlan: entered promiscuous mode [ 519.941217][ T5828] Bluetooth: hci4: command tx timeout [ 520.008541][ T9391] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.070400][ T9391] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 520.349008][ T9337] chnl_net:caif_netlink_parms(): no params data found [ 520.687938][ T9399] fscrypt (loop4): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 520.858947][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.897379][ T9340] chnl_net:caif_netlink_parms(): no params data found [ 521.659309][ T8991] veth0_macvtap: entered promiscuous mode [ 521.788653][ T5828] Bluetooth: hci1: command tx timeout [ 521.824712][ T6054] bridge_slave_1: left allmulticast mode [ 521.830714][ T6054] bridge_slave_1: left promiscuous mode [ 521.847266][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.900128][ T5828] Bluetooth: hci4: command tx timeout [ 522.934242][ T6054] bridge_slave_0: left allmulticast mode [ 522.940061][ T6054] bridge_slave_0: left promiscuous mode [ 523.468900][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.721872][ T9430] loop1: detected capacity change from 0 to 8 [ 523.860149][ T5828] Bluetooth: hci1: command tx timeout [ 523.927715][ T30] audit: type=1326 audit(1745887394.609:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0138e969 code=0x7fc00000 [ 524.575397][ T30] audit: type=1326 audit(1745887395.259:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9b0138e969 code=0x7fc00000 [ 524.796812][ T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.813887][ T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.823574][ T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.834374][ T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.842970][ T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.992335][ T5828] Bluetooth: hci4: command tx timeout [ 527.460387][ T5828] Bluetooth: hci5: command tx timeout [ 527.474144][ T9444] loop4: detected capacity change from 0 to 512 [ 527.491029][ T9444] ext4: Unknown parameter 'noacl' [ 529.173298][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.273754][ T9453] loop6: detected capacity change from 0 to 128 [ 529.309058][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.337958][ T9453] EXT4-fs (loop6): Test dummy encryption mode enabled [ 529.354237][ T9453] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 529.385496][ T6054] bond0 (unregistering): Released all slaves [ 529.441520][ T9453] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 529.540516][ T5828] Bluetooth: hci5: command tx timeout [ 530.111087][ T9458] fscrypt (loop6): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 530.335810][ T6589] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 531.317555][ T6054] hsr_slave_0: left promiscuous mode [ 531.370107][ T6054] hsr_slave_1: left promiscuous mode [ 531.390505][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.454897][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.624275][ T5828] Bluetooth: hci5: command tx timeout [ 533.711104][ T5828] Bluetooth: hci5: command tx timeout [ 533.984946][ T9489] loop6: detected capacity change from 0 to 8 [ 534.137060][ T30] audit: type=1326 audit(1745887404.819:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d8e969 code=0x7fc00000 [ 534.449639][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 534.745313][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 534.973817][ T30] audit: type=1326 audit(1745887405.639:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb619d8e969 code=0x7fc00000 [ 535.719466][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.851'. [ 536.140561][ T9518] loop4: detected capacity change from 0 to 32768 [ 536.645372][ T9524] loop4: detected capacity change from 0 to 128 [ 536.680617][ T9524] EXT4-fs (loop4): Test dummy encryption mode enabled [ 536.711616][ T9524] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 536.741829][ T9524] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 537.231142][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.284449][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.327061][ T9337] bridge_slave_0: entered allmulticast mode [ 537.357608][ T9337] bridge_slave_0: entered promiscuous mode [ 537.423555][ T9524] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 537.630748][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 537.710385][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.737480][ T9536] loop6: detected capacity change from 0 to 512 [ 537.748960][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.761770][ T9536] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 537.773517][ T9337] bridge_slave_1: entered allmulticast mode [ 537.845550][ T9337] bridge_slave_1: entered promiscuous mode [ 537.884450][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.909802][ T9536] EXT4-fs (loop6): 1 truncate cleaned up [ 537.914646][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.924122][ T9340] bridge_slave_0: entered allmulticast mode [ 537.949036][ T9340] bridge_slave_0: entered promiscuous mode [ 538.160064][ T9536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.160431][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.180261][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.187720][ T9340] bridge_slave_1: entered allmulticast mode [ 538.196952][ T9340] bridge_slave_1: entered promiscuous mode [ 539.296253][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.301739][ T9543] loop4: detected capacity change from 0 to 8 [ 539.453343][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.467614][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.614551][ T9332] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 539.740403][ T9551] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 540.056530][ T9332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.190323][ T30] audit: type=1326 audit(1745887410.879:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.4.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 540.191494][ T9337] team0: Port device team_slave_0 added [ 540.218750][ T9332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 540.239586][ T9332] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 540.313264][ T9337] team0: Port device team_slave_1 added [ 540.322245][ T9332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.368280][ T9332] usb 2-1: config 0 descriptor?? [ 540.383526][ T9340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.408793][ T9332] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 540.419155][ T9332] dvb-usb: bulk message failed: -22 (3/0) [ 540.461093][ T9332] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 540.487713][ T9332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 540.508473][ T9332] usb 2-1: media controller created [ 540.524276][ T9332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.642606][ T9557] loop6: detected capacity change from 0 to 4096 [ 540.679000][ T9332] dvb-usb: bulk message failed: -22 (6/0) [ 540.700007][ T9332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 540.730062][ T9332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 540.765834][ T9332] dvb-usb: schedule remote query interval to 150 msecs. [ 540.774504][ T9332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 540.807569][ T9340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.877525][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.901061][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.938272][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 540.948421][ T9332] dvb-usb: error while querying for an remote control event. [ 540.980988][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.991100][ T9563] dibusb: i2c wr: len=61 is too big! [ 540.991100][ T9563] [ 541.040355][ T30] audit: type=1800 audit(1745887411.729:216): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.862" name="file1" dev="loop6" ino=34 res=0 errno=0 [ 541.180277][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 541.186147][ T9332] dvb-usb: error while querying for an remote control event. [ 541.265433][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.288574][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.360284][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 541.366111][ T9332] dvb-usb: error while querying for an remote control event. [ 541.445725][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.589969][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 541.602800][ T9332] dvb-usb: error while querying for an remote control event. [ 541.678490][ T9436] chnl_net:caif_netlink_parms(): no params data found [ 541.769958][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 541.775879][ T9332] dvb-usb: error while querying for an remote control event. [ 541.854798][ T9340] team0: Port device team_slave_0 added [ 541.941036][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 541.950022][ T9332] dvb-usb: error while querying for an remote control event. [ 542.105148][ T9340] team0: Port device team_slave_1 added [ 542.140234][ T5998] dvb-usb: bulk message failed: -22 (1/0) [ 542.147684][ T5998] dvb-usb: error while querying for an remote control event. [ 542.167900][ T9337] hsr_slave_0: entered promiscuous mode [ 542.175415][ T9337] hsr_slave_1: entered promiscuous mode [ 542.310045][ T9332] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 542.327459][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.334659][ T5998] dvb-usb: bulk message failed: -22 (1/0) [ 542.341717][ T5998] dvb-usb: error while querying for an remote control event. [ 542.349316][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.400468][ T5998] usb 2-1: USB disconnect, device number 10 [ 542.415348][ T9340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.490010][ T9332] usb 5-1: Using ep0 maxpacket: 32 [ 542.509802][ T5998] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 542.524682][ T9332] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 542.552361][ T9332] usb 5-1: config 0 has no interface number 0 [ 542.575161][ T9332] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 542.597812][ T9332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.781958][ T9332] usb 5-1: Product: syz [ 542.786304][ T9332] usb 5-1: Manufacturer: syz [ 542.791767][ T9332] usb 5-1: SerialNumber: syz [ 542.817403][ T9332] usb 5-1: config 0 descriptor?? [ 542.853535][ T9332] smsc95xx v2.0.0 [ 542.857400][ T9332] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 542.874707][ T9332] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 543.556332][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.638567][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.676212][ T9340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.345879][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 544.551427][ T9436] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.574953][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.626990][ T9436] bridge_slave_0: entered allmulticast mode [ 544.647637][ T9436] bridge_slave_0: entered promiscuous mode [ 544.677271][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.716387][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.730828][ T9436] bridge_slave_1: entered allmulticast mode [ 544.746317][ T9436] bridge_slave_1: entered promiscuous mode [ 544.844861][ T9593] loop1: detected capacity change from 0 to 512 [ 544.898616][ T9593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 544.971474][ T9593] EXT4-fs (loop1): 1 truncate cleaned up [ 544.995416][ T9593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.456285][ T9332] usb 5-1: USB disconnect, device number 5 [ 545.546086][ T9340] hsr_slave_0: entered promiscuous mode [ 545.688089][ T9340] hsr_slave_1: entered promiscuous mode [ 545.724401][ T9340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.807437][ T9340] Cannot create hsr debugfs directory [ 546.056713][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.372335][ T9436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.409339][ T9436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.426363][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.867'. [ 546.689498][ T9610] loop4: detected capacity change from 0 to 8 [ 546.871803][ T9436] team0: Port device team_slave_0 added [ 546.942362][ T9436] team0: Port device team_slave_1 added [ 547.295076][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.309313][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.389289][ T9436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.412872][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.456606][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.907912][ T30] audit: type=1326 audit(1745887418.599:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 548.205045][ T9436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.446894][ T9627] loop6: detected capacity change from 0 to 2048 [ 548.550026][ T5834] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 548.715602][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 548.717562][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.849412][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 548.859172][ T5834] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 548.871973][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.906431][ T5834] usb 5-1: config 0 descriptor?? [ 548.930646][ T5834] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 548.946631][ T5834] dvb-usb: bulk message failed: -22 (3/0) [ 549.020411][ T5834] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 549.047201][ T5834] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 549.124302][ T5834] usb 5-1: media controller created [ 549.246969][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.298793][ T5834] dvb-usb: bulk message failed: -22 (6/0) [ 549.327755][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.875'. [ 549.374085][ T5834] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 549.415106][ T5834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 549.601046][ T5834] dvb-usb: schedule remote query interval to 150 msecs. [ 549.696986][ T5834] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 549.731650][ T9436] hsr_slave_0: entered promiscuous mode [ 549.738307][ T9436] hsr_slave_1: entered promiscuous mode [ 549.770564][ T9436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.778279][ T9436] Cannot create hsr debugfs directory [ 549.851020][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 549.857051][ T5834] dvb-usb: error while querying for an remote control event. [ 549.969223][ T9641] loop1: detected capacity change from 0 to 512 [ 549.989367][ T9641] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 550.024889][ T9641] EXT4-fs (loop1): 1 truncate cleaned up [ 550.030134][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 550.036483][ T5834] dvb-usb: error while querying for an remote control event. [ 550.077944][ T9641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.242927][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 550.251153][ T5924] dvb-usb: error while querying for an remote control event. [ 550.392607][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.473726][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 550.483271][ T5890] dvb-usb: error while querying for an remote control event. [ 550.590020][ T5834] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 550.660311][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 550.668751][ T5890] dvb-usb: error while querying for an remote control event. [ 550.760453][ T5834] usb 7-1: Using ep0 maxpacket: 32 [ 550.767814][ T5834] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 550.785721][ T5834] usb 7-1: config 0 has no interface number 0 [ 550.814265][ T5834] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 550.830352][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 550.836164][ T5890] dvb-usb: error while querying for an remote control event. [ 550.851347][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.859424][ T5834] usb 7-1: Product: syz [ 550.865280][ T5834] usb 7-1: Manufacturer: syz [ 550.870708][ T5834] usb 7-1: SerialNumber: syz [ 550.878521][ T5834] usb 7-1: config 0 descriptor?? [ 550.887050][ T6054] bridge_slave_1: left allmulticast mode [ 550.894927][ T6054] bridge_slave_1: left promiscuous mode [ 550.900526][ T5834] smsc95xx v2.0.0 [ 550.900548][ T5834] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 550.900785][ T5834] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 550.926388][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.947062][ T6054] bridge_slave_0: left allmulticast mode [ 550.953222][ T6054] bridge_slave_0: left promiscuous mode [ 550.958979][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.973369][ T6054] bridge_slave_1: left allmulticast mode [ 550.979351][ T6054] bridge_slave_1: left promiscuous mode [ 550.987468][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.997997][ T6054] bridge_slave_0: left allmulticast mode [ 551.004476][ T6054] bridge_slave_0: left promiscuous mode [ 551.010904][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.020115][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 551.030149][ T5834] dvb-usb: error while querying for an remote control event. [ 551.190239][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 551.196086][ T5834] dvb-usb: error while querying for an remote control event. [ 551.315462][ T5890] usb 5-1: USB disconnect, device number 6 [ 551.391626][ T5890] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 551.477809][ T9655] loop4: detected capacity change from 0 to 512 [ 551.506075][ T9655] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 551.536827][ T9655] EXT4-fs (loop4): 1 truncate cleaned up [ 551.548815][ T9655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.922169][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.090969][ T9663] loop4: detected capacity change from 0 to 8 [ 552.983404][ T30] audit: type=1326 audit(1745887423.679:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 554.131257][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.260293][ T5998] usb 7-1: USB disconnect, device number 13 [ 554.311664][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.634172][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 554.700238][ T6054] bond0 (unregistering): Released all slaves [ 554.901148][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.028811][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.057511][ T6054] bond0 (unregistering): Released all slaves [ 555.076668][ T9689] loop6: detected capacity change from 0 to 512 [ 555.132026][ T9689] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 555.201953][ T9689] EXT4-fs (loop6): 1 truncate cleaned up [ 555.223453][ T9689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.252459][ T5890] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 555.490037][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 555.545379][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.569078][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 555.579501][ T6054] hsr_slave_0: left promiscuous mode [ 555.602443][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.620311][ T6054] hsr_slave_1: left promiscuous mode [ 555.626362][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.661060][ T5890] usb 5-1: config 0 descriptor?? [ 555.690433][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.698443][ T5890] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 555.739187][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.764019][ T6054] hsr_slave_0: left promiscuous mode [ 555.794103][ T6054] hsr_slave_1: left promiscuous mode [ 555.814996][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.858227][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.954533][ T6054] veth0_macvtap: left promiscuous mode [ 555.962521][ T6054] veth1_vlan: left promiscuous mode [ 555.974426][ T9709] loop6: detected capacity change from 0 to 512 [ 555.981488][ T6054] veth0_vlan: left promiscuous mode [ 556.005380][ T9709] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 556.056785][ T9709] EXT4-fs (loop6): 1 truncate cleaned up [ 556.078075][ T9709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.007249][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.376246][ T5890] gspca_vc032x: reg_w err -71 [ 557.408454][ T5890] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 557.656150][ T5890] usb 5-1: USB disconnect, device number 7 [ 557.778954][ T9724] loop6: detected capacity change from 0 to 8 [ 557.969772][ T30] audit: type=1326 audit(1745887428.659:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d8e969 code=0x7fc00000 [ 559.139764][ T30] audit: type=1326 audit(1745887429.829:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb619d8e969 code=0x7fc00000 [ 559.744408][ T6007] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 559.919338][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 559.996973][ T6007] usb 7-1: Using ep0 maxpacket: 32 [ 560.033383][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 560.046194][ T6007] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 560.070165][ T6007] usb 7-1: config 0 has no interface number 0 [ 560.350005][ T6007] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 560.359216][ T6007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.384846][ T6007] usb 7-1: Product: syz [ 560.389166][ T6007] usb 7-1: Manufacturer: syz [ 560.410337][ T6007] usb 7-1: SerialNumber: syz [ 560.436107][ T6007] usb 7-1: config 0 descriptor?? [ 560.457184][ T6007] smsc95xx v2.0.0 [ 560.499555][ T6007] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 560.965270][ T6007] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 560.976532][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 561.726868][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 561.767333][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 562.436274][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.443227][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.534969][ T30] audit: type=1800 audit(1745887433.209:221): pid=9775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.902" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 563.039526][ T5834] usb 7-1: USB disconnect, device number 14 [ 563.627553][ T9784] loop6: detected capacity change from 0 to 512 [ 563.654742][ T9337] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 563.739979][ T9784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 563.774005][ T9337] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 563.857661][ T9337] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 563.879287][ T9784] EXT4-fs (loop6): 1 truncate cleaned up [ 563.937132][ T9784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.834345][ T9337] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 565.882459][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.115614][ T9805] loop6: detected capacity change from 0 to 8 [ 566.299967][ T30] audit: type=1326 audit(1745887436.979:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d8e969 code=0x7fc00000 [ 566.511170][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 566.697868][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.957905][ T30] audit: type=1326 audit(1745887437.639:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb619d8e969 code=0x7fc00000 [ 566.970377][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.070230][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 567.109938][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.239446][ T9] usb 2-1: config 0 descriptor?? [ 567.275671][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 567.297538][ T9337] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.313688][ T9436] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 567.484116][ T9436] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 567.781752][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 567.787959][ T9436] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 567.853360][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 567.859515][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.867110][ T7710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.879329][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 567.889687][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 567.932252][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 567.962904][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 568.025717][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 568.066014][ T9436] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 568.090292][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 568.100691][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 568.102016][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.114394][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.122672][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 568.354425][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 568.377609][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 568.390539][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 568.405933][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 568.437183][ T9340] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 568.451393][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 568.469660][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 568.474319][ T9838] loop4: detected capacity change from 0 to 512 [ 568.496296][ T9] pwc: Registered as video103. [ 568.514695][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 568.536849][ T9838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 568.560266][ T9340] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 568.602838][ T9] usb 2-1: USB disconnect, device number 11 [ 568.611259][ T5998] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 568.629209][ T9838] EXT4-fs (loop4): 1 truncate cleaned up [ 568.647516][ T9340] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 568.702317][ T9838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.779932][ T5998] usb 7-1: Using ep0 maxpacket: 32 [ 568.790753][ T9340] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 568.799098][ T5998] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 568.827543][ T5998] usb 7-1: config 0 has no interface number 0 [ 568.849691][ T5998] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 568.875436][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.623627][ T5998] usb 7-1: Product: syz [ 569.627872][ T5998] usb 7-1: Manufacturer: syz [ 569.646147][ T5998] usb 7-1: SerialNumber: syz [ 569.660618][ T5998] usb 7-1: config 0 descriptor?? [ 569.672425][ T5998] smsc95xx v2.0.0 [ 569.676175][ T5998] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 569.693242][ T5998] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 570.333147][ T9436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.396359][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.519622][ T9436] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.586964][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.594211][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.763019][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.770330][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.006455][ T9340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.333830][ T9340] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.425001][ T9] usb 7-1: USB disconnect, device number 15 [ 571.761984][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.769452][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.044128][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.051719][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.131436][ T9885] loop4: detected capacity change from 0 to 128 [ 572.202475][ T9883] loop6: detected capacity change from 0 to 512 [ 572.229166][ T9883] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 572.294178][ T9883] EXT4-fs (loop6): 1 truncate cleaned up [ 572.349928][ T9885] EXT4-fs (loop4): Test dummy encryption mode enabled [ 572.426591][ T9883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.467390][ T9885] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 572.483994][ T9340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.497876][ T9885] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 572.828985][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.091372][ T9902] loop6: detected capacity change from 0 to 8 [ 573.100302][ T9436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.208112][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 573.219597][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 573.236937][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 573.246962][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 573.259012][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 573.296730][ T30] audit: type=1326 audit(1745887443.989:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.6.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d8e969 code=0x7fc00000 [ 573.906140][ T30] audit: type=1326 audit(1745887444.599:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.6.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb619d8e969 code=0x7fc00000 [ 574.959778][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 575.349154][ T56] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 575.362485][ T56] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 575.371258][ T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 575.379235][ T56] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 575.387569][ T56] Bluetooth: hci1: command tx timeout [ 575.395171][ T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 575.696575][ T9947] loop6: detected capacity change from 0 to 512 [ 575.905695][ T9951] loop1: detected capacity change from 0 to 32768 [ 575.993271][ T9947] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 576.187774][ T9947] EXT4-fs (loop6): 1 truncate cleaned up [ 576.236351][ T9947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.273545][ T9436] veth0_vlan: entered promiscuous mode [ 576.502376][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 576.520237][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.572725][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 576.679528][ T7707] bridge_slave_1: left allmulticast mode [ 576.718833][ T7707] bridge_slave_1: left promiscuous mode [ 576.739061][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.799345][ T7707] bridge_slave_0: left allmulticast mode [ 576.814393][ T7707] bridge_slave_0: left promiscuous mode [ 576.824188][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.999685][ T5998] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 577.190078][ T5998] usb 7-1: Using ep0 maxpacket: 32 [ 577.322700][ T5998] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 577.346541][ T5998] usb 7-1: config 0 has no interface number 0 [ 577.789760][ T9944] Bluetooth: hci4: command tx timeout [ 577.796078][ T9944] Bluetooth: hci1: command tx timeout [ 578.112717][ T5998] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 578.122667][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.139657][ T5998] usb 7-1: Product: syz [ 578.144036][ T5998] usb 7-1: Manufacturer: syz [ 578.148657][ T5998] usb 7-1: SerialNumber: syz [ 578.160306][ T5998] usb 7-1: config 0 descriptor?? [ 578.168404][ T5998] smsc95xx v2.0.0 [ 578.188662][ T5998] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 578.228415][ T5998] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 578.421958][ T9982] loop4: detected capacity change from 0 to 8 [ 578.632576][ T30] audit: type=1326 audit(1745887449.309:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 578.703996][ T30] audit: type=1326 audit(1745887449.309:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 578.799675][ T30] audit: type=1326 audit(1745887449.309:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 579.402944][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 579.837249][ T48] usb 7-1: USB disconnect, device number 16 [ 579.864067][ T5828] Bluetooth: hci1: command tx timeout [ 579.869559][ T9944] Bluetooth: hci4: command tx timeout [ 579.906337][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.952106][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.972885][ T7707] bond0 (unregistering): Released all slaves [ 580.122168][T10004] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 580.146199][T10004] qnx6: wrong signature (magic) in superblock #1. [ 580.153139][T10004] qnx6: unable to read the first superblock [ 580.621225][T10006] loop1: detected capacity change from 0 to 128 [ 580.709759][T10006] EXT4-fs (loop1): Test dummy encryption mode enabled [ 580.758652][T10006] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 580.807764][ T7707] hsr_slave_0: left promiscuous mode [ 580.836323][T10006] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 580.865651][ T7707] hsr_slave_1: left promiscuous mode [ 580.880859][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.937255][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.085033][T10021] loop4: detected capacity change from 0 to 512 [ 581.143800][T10021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 581.491074][T10021] EXT4-fs (loop4): 1 truncate cleaned up [ 581.820730][T10021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.940104][ T5828] Bluetooth: hci1: command tx timeout [ 581.945778][ T5828] Bluetooth: hci4: command tx timeout [ 582.344457][T10032] loop6: detected capacity change from 0 to 8 [ 582.458730][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.022679][ T5828] Bluetooth: hci4: command tx timeout [ 584.306609][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 584.590813][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 586.082697][ T9944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 586.103999][ T9944] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 586.113211][ T9944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 586.124443][ T9944] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 586.132740][ T9944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 586.347749][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 586.492718][T10068] loop4: detected capacity change from 0 to 512 [ 586.516488][T10068] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 586.557067][T10068] EXT4-fs (loop4): 1 truncate cleaned up [ 586.672067][T10072] loop1: detected capacity change from 0 to 8 [ 586.732978][T10068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.914643][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.330271][ T5887] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 587.510757][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 587.520046][ T5887] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 587.531888][ T5887] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 587.588738][ T5887] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 587.630051][ T5887] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 587.672906][ T5887] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 587.703050][ T5887] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 587.726048][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.774383][ T5887] usb 5-1: string descriptor 0 read error: -22 [ 587.792588][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.801866][ T5887] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 587.845276][ T9908] bridge_slave_0: entered allmulticast mode [ 587.862719][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.892327][ T9908] bridge_slave_0: entered promiscuous mode [ 587.921619][ T5887] adutux 5-1:168.0: interrupt endpoints not found [ 588.005373][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.030944][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.048521][ T9908] bridge_slave_1: entered allmulticast mode [ 588.082389][ T9908] bridge_slave_1: entered promiscuous mode [ 588.260962][ T5828] Bluetooth: hci6: command tx timeout [ 588.261522][ T5834] usb 5-1: USB disconnect, device number 8 [ 588.660358][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.231866][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.576060][ T9908] team0: Port device team_slave_0 added [ 589.798620][ T9908] team0: Port device team_slave_1 added [ 590.145599][ T9942] chnl_net:caif_netlink_parms(): no params data found [ 590.356506][ T5828] Bluetooth: hci6: command tx timeout [ 590.694736][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.729995][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.789883][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.840386][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.848508][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.909888][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.295950][T10123] loop4: detected capacity change from 0 to 8 [ 591.400211][ T9908] hsr_slave_0: entered promiscuous mode [ 591.407169][ T9908] hsr_slave_1: entered promiscuous mode [ 591.781293][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.430245][ T5828] Bluetooth: hci6: command tx timeout [ 592.534296][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.542191][ T9942] bridge_slave_0: entered allmulticast mode [ 592.550724][ T9942] bridge_slave_0: entered promiscuous mode [ 592.559767][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.567016][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.575375][ T9942] bridge_slave_1: entered allmulticast mode [ 592.583588][ T9942] bridge_slave_1: entered promiscuous mode [ 592.984746][ T9942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.005990][ T9942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.100266][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 593.282592][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 593.297415][ T9942] team0: Port device team_slave_0 added [ 593.309039][ T9] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 593.311090][T10062] chnl_net:caif_netlink_parms(): no params data found [ 593.342208][ T9] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.367086][ T9] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 593.461482][ T9942] team0: Port device team_slave_1 added [ 593.598099][ T9] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.613146][ T9] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 593.623968][ T9] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.643000][ T9] usb 5-1: string descriptor 0 read error: -22 [ 593.649323][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 593.664429][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.749123][ T9] adutux 5-1:168.0: interrupt endpoints not found [ 594.055365][ T48] usb 5-1: USB disconnect, device number 9 [ 594.500073][ T5828] Bluetooth: hci6: command tx timeout [ 595.027380][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.056406][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.090952][ T9942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.296002][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.341295][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.348718][T10062] bridge_slave_0: entered allmulticast mode [ 595.371434][T10062] bridge_slave_0: entered promiscuous mode [ 595.402668][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.409729][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.484611][ T9942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.522234][T10158] loop4: detected capacity change from 0 to 8 [ 595.679196][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.693320][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.731732][ T30] audit: type=1326 audit(1745887466.409:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 595.752307][T10062] bridge_slave_1: entered allmulticast mode [ 595.765494][T10062] bridge_slave_1: entered promiscuous mode [ 595.788162][ T30] audit: type=1326 audit(1745887466.419:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 595.856772][ T30] audit: type=1326 audit(1745887466.419:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10156 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 596.865884][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.197416][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.925210][ T9942] hsr_slave_0: entered promiscuous mode [ 597.954165][ T9942] hsr_slave_1: entered promiscuous mode [ 597.974113][ T9942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.023491][ T9942] Cannot create hsr debugfs directory [ 598.298828][T10062] team0: Port device team_slave_0 added [ 600.249945][T10062] team0: Port device team_slave_1 added [ 601.984927][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.005210][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.039425][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.187988][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.215893][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.296912][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.819644][ T9908] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 602.958213][ T7707] bridge_slave_1: left allmulticast mode [ 602.969421][ T7707] bridge_slave_1: left promiscuous mode [ 602.982707][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.003145][ T7707] bridge_slave_0: left allmulticast mode [ 603.016204][ T7707] bridge_slave_0: left promiscuous mode [ 603.028639][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.053517][ T7707] bridge_slave_1: left allmulticast mode [ 603.059527][ T7707] bridge_slave_1: left promiscuous mode [ 603.071879][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.085155][ T7707] bridge_slave_0: left allmulticast mode [ 603.091321][ T7707] bridge_slave_0: left promiscuous mode [ 603.097276][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.836644][T10221] loop6: detected capacity change from 0 to 512 [ 603.867483][T10221] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 603.949938][T10221] EXT4-fs (loop6): 1 truncate cleaned up [ 604.022990][T10221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.297292][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.198833][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.250528][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.266138][ T7707] bond0 (unregistering): Released all slaves [ 607.671768][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.726239][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.738266][ T7707] bond0 (unregistering): Released all slaves [ 607.842480][ T9908] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 607.914037][T10062] hsr_slave_0: entered promiscuous mode [ 607.932959][T10062] hsr_slave_1: entered promiscuous mode [ 607.975060][T10062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.009060][T10062] Cannot create hsr debugfs directory [ 608.113857][ T9908] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 608.192007][ T9908] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 608.341310][ T7707] hsr_slave_0: left promiscuous mode [ 608.378474][ T7707] hsr_slave_1: left promiscuous mode [ 608.385773][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.417939][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.451206][ T7707] hsr_slave_0: left promiscuous mode [ 608.477696][ T7707] hsr_slave_1: left promiscuous mode [ 608.499725][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.531800][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.063148][ T7707] veth0_vlan: left promiscuous mode [ 610.028316][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 610.126376][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 610.254807][T10260] loop1: detected capacity change from 0 to 512 [ 610.276302][T10260] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 610.325582][T10260] EXT4-fs (loop1): 1 truncate cleaned up [ 610.366775][T10260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.718890][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.749594][T10279] loop4: detected capacity change from 0 to 4096 [ 613.193472][ T30] audit: type=1800 audit(1745887483.829:232): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1009" name="file1" dev="loop4" ino=34 res=0 errno=0 [ 614.685872][T10287] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 615.270127][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 615.438695][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 616.729584][T10302] loop1: detected capacity change from 0 to 512 [ 616.781863][T10302] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 616.872065][T10302] EXT4-fs (loop1): 1 truncate cleaned up [ 616.879664][T10302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.079077][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.282541][T10315] loop4: detected capacity change from 0 to 512 [ 618.313773][T10315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 618.408360][T10315] EXT4-fs (loop4): 1 truncate cleaned up [ 618.441555][T10315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.608642][T10320] usb usb8: usbfs: process 10320 (syz.1.1020) did not claim interface 0 before use [ 619.715573][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.567617][T10335] loop6: detected capacity change from 0 to 32768 [ 622.175433][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.315546][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.379021][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.386280][ T9269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.487919][T10344] netlink: 'syz.4.1029': attribute type 10 has an invalid length. [ 622.495987][T10344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1029'. [ 622.581433][T10347] CUSE: unknown device info "ÿ" [ 622.586440][T10347] CUSE: zero length info key specified [ 622.747519][T10346] loop1: detected capacity change from 0 to 4096 [ 623.412057][T10344] team0: Port device geneve0 added [ 623.523358][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.530644][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.850147][ T48] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 623.867269][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.873956][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.880139][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 623.968863][T10349] loop6: detected capacity change from 0 to 32768 [ 624.023067][ T9942] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 624.041882][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 624.052209][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.063214][ T9942] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 624.080215][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.109998][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 624.119130][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.131651][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 624.150036][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.164638][ T24] usb 5-1: config 0 descriptor?? [ 624.171622][ T48] usb 2-1: config 0 descriptor?? [ 624.201005][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 624.223325][ T48] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 624.244257][ T9942] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 624.267761][ T9942] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 624.476504][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.597483][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 624.637055][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 624.649184][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 624.684155][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 624.716883][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 624.726939][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 624.743552][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 624.770727][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 624.780275][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 624.823808][ T9942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.901319][T10062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 624.919448][T10062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 624.961449][ T9942] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.985032][T10062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 625.009036][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 625.039375][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 625.088779][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 625.162597][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 625.236366][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.243633][ T9269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.256025][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 625.263375][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 625.358368][ T24] pwc: Registered as video103. [ 625.373301][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 625.596236][T10062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 625.631946][ T24] usb 5-1: USB disconnect, device number 10 [ 625.707646][ T48] gspca_vc032x: reg_w err -71 [ 625.768872][ T48] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 625.846976][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.854215][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.878883][ T48] usb 2-1: USB disconnect, device number 12 [ 625.892392][T10369] xt_CT: No such helper "snmp" [ 626.157409][ T9908] veth0_vlan: entered promiscuous mode [ 626.195736][T10376] loop4: detected capacity change from 0 to 512 [ 626.220074][T10376] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 626.268470][ T9908] veth1_vlan: entered promiscuous mode [ 626.298678][T10376] EXT4-fs (loop4): 1 truncate cleaned up [ 626.346363][T10376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.387574][ T9908] veth0_macvtap: entered promiscuous mode [ 627.010509][ T9908] veth1_macvtap: entered promiscuous mode [ 627.057176][T10062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.149406][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.195743][T10383] loop6: detected capacity change from 0 to 4096 [ 627.218216][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.263824][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.317942][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.367839][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.406285][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.434420][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.487720][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.502916][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.523108][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.534097][ T30] audit: type=1800 audit(1745887498.219:233): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1037" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 627.578293][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.464820][T10062] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.656601][T10392] tipc: Enabling of bearer rejected, failed to enable media [ 629.099210][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.106443][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.161476][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.168846][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.206495][ T9908] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.225842][ T9908] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.237466][ T9908] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.268655][ T9908] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.533164][ T9942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.027973][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.118080][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.257414][ T9269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.296413][ T9269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.577750][T10062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.823467][ T9942] veth0_vlan: entered promiscuous mode [ 630.832532][T10425] loop1: detected capacity change from 0 to 512 [ 630.854250][T10425] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 630.917074][ T9942] veth1_vlan: entered promiscuous mode [ 630.956942][T10425] EXT4-fs (loop1): 1 truncate cleaned up [ 631.026572][T10425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.106975][ T9942] veth0_macvtap: entered promiscuous mode [ 631.178554][ T9942] veth1_macvtap: entered promiscuous mode [ 631.575081][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.669135][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.760080][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.770969][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.837421][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.864094][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.878380][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.023967][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.044424][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.055979][T10423] loop6: detected capacity change from 0 to 32768 [ 632.070222][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.100469][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.145423][T10444] xt_CT: No such helper "snmp" [ 632.150691][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.272947][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.423301][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.591864][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.931120][T10450] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 632.970245][ T9942] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.006915][ T9942] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.027971][ T9942] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.067575][ T9942] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.791505][T10062] veth0_vlan: entered promiscuous mode [ 634.119948][T10062] veth1_vlan: entered promiscuous mode [ 634.986589][T10062] veth0_macvtap: entered promiscuous mode [ 635.048474][T10062] veth1_macvtap: entered promiscuous mode [ 635.152623][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.190823][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.209891][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.239906][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.249819][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.274677][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.285096][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.296575][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.308721][T10062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.341932][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.358955][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.372536][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.394359][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.405262][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.422229][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.449183][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.517520][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.570941][T10062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.623656][T10062] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.678377][T10062] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.720179][T10062] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.749897][T10062] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.528173][T10474] loop1: detected capacity change from 0 to 512 [ 636.575508][T10474] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 636.655342][T10474] EXT4-fs (loop1): 1 truncate cleaned up [ 636.694392][T10474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.733550][ T7707] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.596900][ T9944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 637.966839][ T7707] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.979339][ T9944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 637.992623][ T9944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 638.004988][ T9944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 638.013254][ T9944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 638.158991][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.220703][ T7707] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.446174][ T7707] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.522075][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.546178][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.399983][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.445222][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.720218][T10502] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 640.106699][ T5828] Bluetooth: hci4: command tx timeout [ 640.495567][T10507] loop1: detected capacity change from 0 to 512 [ 640.568210][T10507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 640.703912][T10507] EXT4-fs (loop1): 1 truncate cleaned up [ 640.743224][T10507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.768654][ T7707] bridge_slave_1: left allmulticast mode [ 640.800138][ T7707] bridge_slave_1: left promiscuous mode [ 640.806195][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.282707][T10515] loop9: detected capacity change from 0 to 2048 [ 641.787746][ T7707] bridge_slave_0: left allmulticast mode [ 641.848467][ T7707] bridge_slave_0: left promiscuous mode [ 641.906936][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.375324][ T5828] Bluetooth: hci4: command tx timeout [ 644.157464][T10528] xt_CT: No such helper "snmp" [ 644.166242][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.420259][ T5828] Bluetooth: hci4: command tx timeout [ 646.504335][ T5828] Bluetooth: hci4: command tx timeout [ 646.639313][T10536] loop9: detected capacity change from 0 to 32768 [ 646.767592][ T78] tipc: Subscription rejected, illegal request [ 646.989661][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.007036][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.022967][ T7707] bond0 (unregistering): Released all slaves [ 647.054862][T10483] chnl_net:caif_netlink_parms(): no params data found [ 647.086611][T10524] tipc: Enabling of bearer rejected, failed to enable media [ 647.730611][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 647.771033][ T5890] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 648.023190][T10573] loop7: detected capacity change from 0 to 2048 [ 648.375108][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 648.440413][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 648.468486][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 648.494583][ T5890] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.523374][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.571094][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 648.620137][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.644151][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 648.651740][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 648.672215][ T5890] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.731365][ T9] usb 7-1: config 0 descriptor?? [ 648.749690][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 648.770170][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 648.789922][ T5890] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.807231][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 648.826517][ T5890] usb 5-1: string descriptor 0 read error: -22 [ 648.836984][ T5890] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 648.882027][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.970589][ T5890] adutux 5-1:168.0: interrupt endpoints not found [ 649.168758][ T7707] hsr_slave_0: left promiscuous mode [ 649.225017][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 649.240384][ T7707] hsr_slave_1: left promiscuous mode [ 649.270997][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 649.306326][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.310227][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 649.317237][ T5890] usb 5-1: USB disconnect, device number 11 [ 649.402625][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.407104][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 649.458663][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 649.521873][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 649.522719][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.603963][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 649.617561][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.647207][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 649.705045][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 649.767830][T10601] loop1: detected capacity change from 0 to 512 [ 649.789439][ T7707] veth1_macvtap: left promiscuous mode [ 649.818293][T10601] EXT4-fs (loop1): orphan cleanup on readonly fs [ 649.826611][ T7707] veth0_macvtap: left promiscuous mode [ 649.845827][T10601] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 649.873761][ T7707] veth1_vlan: left promiscuous mode [ 649.880713][T10601] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 649.887837][ T7707] veth0_vlan: left promiscuous mode [ 649.888568][T10601] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.1080: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 649.951170][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 650.027227][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 650.220099][T10601] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1080: couldn't read orphan inode 13 (err -117) [ 650.243947][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 650.452270][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 650.497949][T10601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 650.531655][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 650.557876][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 650.620103][ T9] pwc: Registered as video103. [ 650.662204][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 650.966461][ T9] usb 7-1: USB disconnect, device number 17 [ 651.802141][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.181846][T10636] loop4: detected capacity change from 0 to 2048 [ 657.866582][T10650] loop6: detected capacity change from 0 to 512 [ 658.010289][T10650] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 658.069765][T10652] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 658.081259][T10652] qnx6: wrong signature (magic) in superblock #1. [ 658.087753][T10652] qnx6: unable to read the first superblock [ 658.403083][T10650] EXT4-fs (loop6): 1 truncate cleaned up [ 658.641423][T10650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.870590][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 659.751865][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.788294][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 659.823371][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.072438][ T9] usb 5-1: config 0 descriptor?? [ 660.725493][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 661.362730][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 661.428271][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.469077][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 661.479099][T10673] loop9: detected capacity change from 0 to 512 [ 661.492548][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 661.504330][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 661.515666][T10673] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 661.570385][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 661.618388][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 661.669082][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 661.684711][T10673] EXT4-fs (loop9): 1 truncate cleaned up [ 661.722773][T10673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.740166][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 661.770476][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 662.153121][T10685] loop7: detected capacity change from 0 to 2048 [ 663.119133][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 663.205076][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 663.219979][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 663.228053][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 663.310110][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 663.373808][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 663.583942][ T9] pwc: Registered as video103. [ 663.663084][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 663.828659][T10062] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.966765][ T9] usb 5-1: USB disconnect, device number 12 [ 673.005214][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 673.272892][T10741] loop4: detected capacity change from 0 to 512 [ 673.488896][T10743] loop1: detected capacity change from 0 to 2048 [ 673.890488][T10741] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 674.115528][T10741] EXT4-fs (loop4): 1 truncate cleaned up [ 674.128266][T10741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.405881][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 676.808541][T10753] loop1: detected capacity change from 0 to 512 [ 676.833463][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.854493][T10753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 676.920995][T10753] EXT4-fs (loop1): 1 truncate cleaned up [ 676.928640][T10753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.150597][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 678.175834][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.614537][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1125'. [ 679.312457][T10759] loop6: detected capacity change from 0 to 32768 [ 679.516955][T10784] xt_CT: No such helper "snmp" [ 680.258656][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.305698][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.340966][T10483] bridge_slave_0: entered allmulticast mode [ 680.365836][T10483] bridge_slave_0: entered promiscuous mode [ 680.401259][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.428624][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.452983][T10483] bridge_slave_1: entered allmulticast mode [ 680.475676][T10483] bridge_slave_1: entered promiscuous mode [ 680.510308][T10776] hsr0: entered promiscuous mode [ 680.515790][T10776] hsr0: left promiscuous mode [ 680.558122][T10778] hsr_slave_0: left promiscuous mode [ 680.603021][T10778] hsr_slave_1: left promiscuous mode [ 681.129552][T10483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.290596][T10483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.408624][T10797] loop9: detected capacity change from 0 to 512 [ 681.544471][T10797] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 681.676022][T10797] EXT4-fs (loop9): 1 truncate cleaned up [ 681.760555][T10797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.284575][T10804] loop1: detected capacity change from 0 to 2048 [ 683.452456][T10483] team0: Port device team_slave_0 added [ 683.707953][ T9944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 683.718240][ T9944] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 683.726259][ T9944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 683.735358][ T9944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 683.744636][ T9944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 685.325388][T10062] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.335120][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.341559][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.516253][T10483] team0: Port device team_slave_1 added [ 686.418839][T10827] loop9: detected capacity change from 0 to 512 [ 686.526340][T10827] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 686.618356][ T9269] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.734720][T10827] EXT4-fs (loop9): 1 truncate cleaned up [ 687.198497][T10827] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.234130][ T9944] Bluetooth: hci5: command tx timeout [ 688.087713][T10483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.097189][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.135391][T10483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.200766][T10830] xt_CT: No such helper "snmp" [ 688.278746][ T9269] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.351658][T10062] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.367487][T10483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.403945][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.502279][T10483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.777425][ T9269] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.965406][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1140'. [ 689.322257][ T5828] Bluetooth: hci5: command tx timeout [ 690.784177][ T9269] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.856374][T10866] netlink: 'syz.4.1144': attribute type 10 has an invalid length. [ 690.865247][T10866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1144'. [ 690.915283][T10867] CUSE: unknown device info "ÿ" [ 690.920964][T10867] CUSE: zero length info key specified [ 691.404781][T10483] hsr_slave_0: entered promiscuous mode [ 691.430925][T10483] hsr_slave_1: entered promiscuous mode [ 691.460393][ T5828] Bluetooth: hci5: command tx timeout [ 692.502938][T10483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.519975][T10483] Cannot create hsr debugfs directory [ 693.551615][ T5828] Bluetooth: hci5: command tx timeout [ 693.648946][ T5889] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 693.942787][ T30] audit: type=1800 audit(1745887564.319:234): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1150" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 694.316822][ T5889] usb 10-1: Using ep0 maxpacket: 32 [ 694.342121][ T5889] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 694.360083][ T5889] usb 10-1: config 0 has no interface number 0 [ 694.547687][ T5889] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 694.567708][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.687427][ T5889] usb 10-1: Product: syz [ 694.754726][ T5889] usb 10-1: Manufacturer: syz [ 694.822500][ T5889] usb 10-1: SerialNumber: syz [ 694.866832][ T5889] usb 10-1: config 0 descriptor?? [ 695.072596][ T5889] smsc95xx v2.0.0 [ 695.079400][T10897] loop4: detected capacity change from 0 to 512 [ 695.166131][T10895] xt_CT: No such helper "snmp" [ 695.215887][T10897] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 695.391408][ T5889] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 695.417347][ T5889] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 695.430942][T10807] chnl_net:caif_netlink_parms(): no params data found [ 696.204413][ T5889] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 696.232708][T10897] EXT4-fs (loop4): 1 truncate cleaned up [ 696.248115][ T5889] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 696.251894][T10897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.183880][ T5889] usb 10-1: USB disconnect, device number 2 [ 699.505344][T10923] usb usb8: usbfs: process 10923 (syz.1.1155) did not claim interface 0 before use [ 700.496331][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.816578][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1157'. [ 703.986822][ T9269] bridge_slave_1: left allmulticast mode [ 704.049597][ T9269] bridge_slave_1: left promiscuous mode [ 704.755234][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.027786][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1163'. [ 705.127556][ T9269] bridge_slave_0: left allmulticast mode [ 705.163671][ T9269] bridge_slave_0: left promiscuous mode [ 705.215703][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.013056][ T9944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 706.050052][ T9944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 706.064485][ T9944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 706.073294][ T9944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 706.083041][ T9944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 707.401033][ T5888] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 707.575198][T10976] loop1: detected capacity change from 0 to 512 [ 707.597880][ T5888] usb 10-1: Using ep0 maxpacket: 32 [ 707.613490][ T5888] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 707.622337][ T5888] usb 10-1: config 0 has no interface number 0 [ 707.629096][T10976] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 707.673519][ T5888] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 707.707013][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.744998][ T5888] usb 10-1: Product: syz [ 707.752145][T10976] EXT4-fs (loop1): 1 truncate cleaned up [ 707.758755][ T5888] usb 10-1: Manufacturer: syz [ 707.767720][ T9269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.771958][T10976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.795232][ T5888] usb 10-1: SerialNumber: syz [ 707.800167][ T9269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.812046][ T9269] bond0 (unregistering): Released all slaves [ 707.820980][ T5888] usb 10-1: config 0 descriptor?? [ 707.832288][ T5888] smsc95xx v2.0.0 [ 708.145942][T10807] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.157973][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.190042][ T5828] Bluetooth: hci1: command tx timeout [ 708.197530][T10807] bridge_slave_0: entered allmulticast mode [ 708.218941][T10807] bridge_slave_0: entered promiscuous mode [ 708.243104][ T5888] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 708.261892][ T5888] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 708.447399][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.486785][ T5888] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 708.535474][ T5888] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 708.607992][ T30] audit: type=1326 audit(1745887579.299:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 709.484579][T10985] Falling back ldisc for ptm0. [ 709.574706][ T30] audit: type=1326 audit(1745887580.059:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 709.617925][ T30] audit: type=1326 audit(1745887580.229:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 709.674656][T10807] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.677420][ T30] audit: type=1326 audit(1745887580.229:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 709.714738][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.727628][ T30] audit: type=1326 audit(1745887580.229:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 709.737468][T10807] bridge_slave_1: entered allmulticast mode [ 709.800627][T10807] bridge_slave_1: entered promiscuous mode [ 709.871179][ T30] audit: type=1326 audit(1745887580.229:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 709.996832][ T30] audit: type=1326 audit(1745887580.229:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 710.020175][ T30] audit: type=1326 audit(1745887580.229:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 710.043579][ T30] audit: type=1326 audit(1745887580.229:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 710.764786][ T5828] Bluetooth: hci1: command tx timeout [ 710.810138][ T5827] usb 10-1: USB disconnect, device number 3 [ 710.920154][ T30] audit: type=1326 audit(1745887580.229:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 711.465142][T10807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.519439][T10807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.719149][T11017] loop4: detected capacity change from 0 to 512 [ 712.787588][T11017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 712.830223][ T9944] Bluetooth: hci1: command tx timeout [ 712.980326][ T9944] Bluetooth: hci6: command 0x0406 tx timeout [ 713.321517][T11017] EXT4-fs (loop4): 1 truncate cleaned up [ 713.374346][T11017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.484948][T10807] team0: Port device team_slave_0 added [ 714.182885][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.240193][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1178'. [ 714.273379][T10807] team0: Port device team_slave_1 added [ 714.472343][T11040] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 714.911651][ T5828] Bluetooth: hci1: command tx timeout [ 715.005757][ T9269] hsr_slave_0: left promiscuous mode [ 715.032849][ T9269] hsr_slave_1: left promiscuous mode [ 715.107770][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.214625][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.240516][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.293058][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.487523][ T9269] veth1_macvtap: left promiscuous mode [ 715.530055][ T9269] veth0_macvtap: left promiscuous mode [ 715.556463][ T9269] veth1_vlan: left promiscuous mode [ 715.592910][ T9269] veth0_vlan: left promiscuous mode [ 717.005794][T11061] loop9: detected capacity change from 0 to 512 [ 717.013276][ T9269] team0 (unregistering): Port device team_slave_1 removed [ 717.037678][T11061] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 717.111114][T11061] EXT4-fs (loop9): 1 truncate cleaned up [ 717.119087][T11061] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.160576][ T9269] team0 (unregistering): Port device team_slave_0 removed [ 717.918828][T10062] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.204239][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 718.204261][ T30] audit: type=1326 audit(1745887588.899:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11065 comm="syz.9.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb110d8e969 code=0x7fc00000 [ 718.974645][ T30] audit: type=1326 audit(1745887589.649:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11065 comm="syz.9.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb110d8e969 code=0x7fc00000 [ 720.372514][T10807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.429671][T10807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.540016][T10807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.191020][T10807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.253838][T10807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.335093][T10807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.730691][T11101] loop6: detected capacity change from 0 to 512 [ 723.758145][T11105] loop1: detected capacity change from 0 to 512 [ 723.775906][T11101] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 723.832564][T11105] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 723.909504][T11101] EXT4-fs (loop6): 1 truncate cleaned up [ 723.955338][T11101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.958878][T11105] EXT4-fs (loop1): 1 truncate cleaned up [ 723.987813][T10807] hsr_slave_0: entered promiscuous mode [ 724.034707][T10807] hsr_slave_1: entered promiscuous mode [ 724.043178][T11105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.397721][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.624976][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.850695][T11119] loop6: detected capacity change from 0 to 128 [ 725.941755][T11119] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 725.984751][T11119] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 727.500899][T11136] loop9: detected capacity change from 0 to 512 [ 727.555228][T11136] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 727.595509][T11136] EXT4-fs (loop9): 1 truncate cleaned up [ 727.645755][T11136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.314832][ T9269] bridge_slave_1: left allmulticast mode [ 728.325338][ T9269] bridge_slave_1: left promiscuous mode [ 728.369347][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.425470][ T9269] bridge_slave_0: left allmulticast mode [ 728.442555][ T9269] bridge_slave_0: left promiscuous mode [ 728.457703][T10062] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.469641][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.730039][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 729.464089][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 730.061521][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.168064][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.192502][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.261749][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.290640][ T9269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.299599][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.330609][ T5888] usb 2-1: Product: syz [ 730.342539][ T5888] usb 2-1: Manufacturer: syz [ 730.343183][ T9269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.357967][ T5888] usb 2-1: SerialNumber: syz [ 730.648234][ T9269] bond0 (unregistering): Released all slaves [ 732.562323][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.569549][ T5888] usb 2-1: MIDIStreaming interface descriptor not found [ 732.677285][T10962] chnl_net:caif_netlink_parms(): no params data found [ 733.834143][ T5888] usb 2-1: USB disconnect, device number 13 [ 733.860125][T11177] loop1: detected capacity change from 0 to 512 [ 733.915238][T11177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 734.040323][ T9269] hsr_slave_0: left promiscuous mode [ 734.065308][ T9269] hsr_slave_1: left promiscuous mode [ 734.088231][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.291461][T11177] EXT4-fs (loop1): 1 truncate cleaned up [ 734.292605][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.299278][T11177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.396572][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.596721][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.355698][T11201] loop4: detected capacity change from 0 to 512 [ 736.389050][T11201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 736.522426][T11201] EXT4-fs (loop4): 1 truncate cleaned up [ 736.563573][ T6589] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 736.831235][T11201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.759659][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.828256][T11216] loop9: detected capacity change from 0 to 64 [ 738.160265][ T30] audit: type=1800 audit(1745887608.849:295): pid=11216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1216" name="file1" dev="loop9" ino=18 res=0 errno=0 [ 738.312361][ T9269] team0 (unregistering): Port device team_slave_1 removed [ 738.445556][ T9269] team0 (unregistering): Port device team_slave_0 removed [ 739.502427][ T30] audit: type=1326 audit(1745887610.189:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9eb8e969 code=0x7fc00000 [ 742.606342][T11257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.649336][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1223'. [ 743.757916][ T9944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 743.768530][ T9944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 743.778398][ T9944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 743.786788][ T9944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 743.797574][ T9944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 743.852615][ T5890] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 743.913699][T11266] loop4: detected capacity change from 0 to 512 [ 743.940200][T11266] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 744.016908][T11266] EXT4-fs (loop4): 1 truncate cleaned up [ 744.042775][ T5890] usb 10-1: Using ep0 maxpacket: 16 [ 744.049515][T11266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.149269][T11278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.209911][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1227'. [ 745.673077][ T5890] usb 10-1: unable to get BOS descriptor or descriptor too short [ 745.959933][ T9944] Bluetooth: hci4: command tx timeout [ 745.960437][ T5890] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.016842][ T5890] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.066573][ T5890] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 746.307889][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.318881][ T5890] usb 10-1: Product: syz [ 746.325172][ T5890] usb 10-1: Manufacturer: syz [ 746.336779][ T5890] usb 10-1: SerialNumber: syz [ 746.801172][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.807861][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.992672][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.140361][ T5890] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.204259][ T5890] usb 10-1: MIDIStreaming interface descriptor not found [ 747.214956][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.277475][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.285666][T10962] bridge_slave_0: entered allmulticast mode [ 747.327182][T10962] bridge_slave_0: entered promiscuous mode [ 747.336556][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.351683][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.433034][T11296] loop6: detected capacity change from 0 to 128 [ 747.492748][T10962] bridge_slave_1: entered allmulticast mode [ 747.776239][T11296] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 748.030454][ T9944] Bluetooth: hci4: command tx timeout [ 748.118044][T10962] bridge_slave_1: entered promiscuous mode [ 748.226287][ T5890] usb 10-1: USB disconnect, device number 4 [ 748.361521][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.551676][T11304] loop4: detected capacity change from 0 to 512 [ 748.870553][T11304] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 749.288647][T11304] EXT4-fs (loop4): 1 truncate cleaned up [ 749.577581][T11304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.002922][T11314] [ 750.005339][T11314] ====================================================== [ 750.012379][T11314] WARNING: possible circular locking dependency detected [ 750.019420][T11314] 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 Not tainted [ 750.026622][T11314] ------------------------------------------------------ [ 750.033671][T11314] syz.4.1233/11314 is trying to acquire lock: [ 750.039776][T11314] ffff8880368b0e20 (&sb->s_type->i_mutex_key#9/1){+.+.}-{4:4}, at: ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 750.051730][T11314] [ 750.051730][T11314] but task is already holding lock: [ 750.059143][T11314] ffff8880368b6fc0 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_setattr+0x1522/0x1bd0 [ 750.068643][T11314] [ 750.068643][T11314] which lock already depends on the new lock. [ 750.068643][T11314] [ 750.079178][T11314] [ 750.079178][T11314] the existing dependency chain (in reverse order) is: [ 750.088233][T11314] [ 750.088233][T11314] -> #1 (&ei->i_data_sem/3){++++}-{4:4}: [ 750.096236][T11314] lock_acquire+0x120/0x360 [ 750.101420][T11314] down_write+0x96/0x1f0 [ 750.106230][T11314] ext4_xattr_inode_lookup_create+0x14d1/0x1c20 [ 750.113032][T11314] ext4_xattr_ibody_set+0x202/0x6a0 [ 750.118801][T11314] ext4_xattr_set_handle+0xc9a/0x1590 [ 750.124914][T11314] ext4_xattr_set+0x230/0x320 [ 750.130144][T11314] __vfs_setxattr+0x43c/0x480 [ 750.135461][T11314] __vfs_setxattr_noperm+0x12d/0x660 [ 750.141330][T11314] vfs_setxattr+0x16b/0x2f0 [ 750.146424][T11314] filename_setxattr+0x274/0x600 [ 750.151941][T11314] path_setxattrat+0x364/0x3a0 [ 750.157391][T11314] __x64_sys_lsetxattr+0xbf/0xe0 [ 750.162887][T11314] do_syscall_64+0xf6/0x210 [ 750.167978][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.174737][T11314] [ 750.174737][T11314] -> #0 (&sb->s_type->i_mutex_key#9/1){+.+.}-{4:4}: [ 750.183596][T11314] validate_chain+0xb9b/0x2140 [ 750.188914][T11314] __lock_acquire+0xaac/0xd20 [ 750.194317][T11314] lock_acquire+0x120/0x360 [ 750.199461][T11314] down_write+0x96/0x1f0 [ 750.204258][T11314] ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 750.211047][T11314] ext4_xattr_block_set+0x223/0x2ac0 [ 750.216886][T11314] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 750.223374][T11314] __ext4_expand_extra_isize+0x30d/0x400 [ 750.229594][T11314] __ext4_mark_inode_dirty+0x46c/0x700 [ 750.235626][T11314] ext4_setattr+0x1597/0x1bd0 [ 750.240984][T11314] notify_change+0xb36/0xe40 [ 750.246132][T11314] do_truncate+0x19a/0x220 [ 750.251120][T11314] vfs_truncate+0x493/0x520 [ 750.256186][T11314] do_sys_truncate+0xdb/0x190 [ 750.261444][T11314] __x64_sys_truncate+0x5b/0x70 [ 750.266882][T11314] do_syscall_64+0xf6/0x210 [ 750.271971][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.278448][T11314] [ 750.278448][T11314] other info that might help us debug this: [ 750.278448][T11314] [ 750.288929][T11314] Possible unsafe locking scenario: [ 750.288929][T11314] [ 750.296409][T11314] CPU0 CPU1 [ 750.301797][T11314] ---- ---- [ 750.307285][T11314] lock(&ei->i_data_sem/3); [ 750.311920][T11314] lock(&sb->s_type->i_mutex_key#9/1); [ 750.320056][T11314] lock(&ei->i_data_sem/3); [ 750.327233][T11314] lock(&sb->s_type->i_mutex_key#9/1); [ 750.332867][T11314] [ 750.332867][T11314] *** DEADLOCK *** [ 750.332867][T11314] [ 750.341057][T11314] 5 locks held by syz.4.1233/11314: [ 750.346632][T11314] #0: ffff8880207c4420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 750.355894][T11314] #1: ffff8880368b7130 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: do_truncate+0x186/0x220 [ 750.366279][T11314] #2: ffff8880368b72d0 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_setattr+0xe9d/0x1bd0 [ 750.376883][T11314] #3: ffff8880368b6fc0 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_setattr+0x1522/0x1bd0 [ 750.386763][T11314] #4: ffff8880368b6dc0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 750.397115][T11314] [ 750.397115][T11314] stack backtrace: [ 750.403010][T11314] CPU: 0 UID: 0 PID: 11314 Comm: syz.4.1233 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) [ 750.403039][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 750.403054][T11314] Call Trace: [ 750.403065][T11314] [ 750.403075][T11314] dump_stack_lvl+0x189/0x250 [ 750.403116][T11314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.403149][T11314] ? __pfx__printk+0x10/0x10 [ 750.403173][T11314] ? print_lock_name+0xde/0x100 [ 750.403213][T11314] print_circular_bug+0x2ee/0x310 [ 750.403240][T11314] check_noncircular+0x134/0x160 [ 750.403266][T11314] validate_chain+0xb9b/0x2140 [ 750.403302][T11314] __lock_acquire+0xaac/0xd20 [ 750.403337][T11314] ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 750.403360][T11314] lock_acquire+0x120/0x360 [ 750.403390][T11314] ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 750.403415][T11314] ? irqentry_exit+0x74/0x90 [ 750.403442][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.403480][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.403524][T11314] down_write+0x96/0x1f0 [ 750.403554][T11314] ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 750.403577][T11314] ? __pfx_down_write+0x10/0x10 [ 750.403601][T11314] ? dquot_drop+0x45/0x170 [ 750.403632][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.403659][T11314] ? ext4_get_dquots+0xd/0x20 [ 750.403687][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.403713][T11314] ? dquot_drop+0x144/0x170 [ 750.403742][T11314] ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 750.403775][T11314] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 750.403802][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.403836][T11314] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 750.403860][T11314] ext4_xattr_block_set+0x223/0x2ac0 [ 750.403892][T11314] ? fs_reclaim_acquire+0x7d/0x100 [ 750.403928][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.403957][T11314] ? __pfx_check_xattrs+0x10/0x10 [ 750.403997][T11314] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 750.404021][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.404047][T11314] ? ext4_xattr_block_find+0x2d4/0x350 [ 750.404072][T11314] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 750.404119][T11314] __ext4_expand_extra_isize+0x30d/0x400 [ 750.404150][T11314] __ext4_mark_inode_dirty+0x46c/0x700 [ 750.404192][T11314] ext4_setattr+0x1597/0x1bd0 [ 750.404225][T11314] ? __pfx_ext4_setattr+0x10/0x10 [ 750.404249][T11314] notify_change+0xb36/0xe40 [ 750.404279][T11314] do_truncate+0x19a/0x220 [ 750.404306][T11314] ? __pfx_do_truncate+0x10/0x10 [ 750.404330][T11314] ? apparmor_path_truncate+0x238/0x2d0 [ 750.404368][T11314] ? vfs_truncate+0x434/0x520 [ 750.404395][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.404424][T11314] vfs_truncate+0x493/0x520 [ 750.404448][T11314] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.404473][T11314] ? __pfx_vfs_truncate+0x10/0x10 [ 750.404506][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.404545][T11314] do_sys_truncate+0xdb/0x190 [ 750.404571][T11314] ? __pfx_do_sys_truncate+0x10/0x10 [ 750.404594][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.404622][T11314] __x64_sys_truncate+0x5b/0x70 [ 750.404643][T11314] do_syscall_64+0xf6/0x210 [ 750.404664][T11314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.404684][T11314] ? exc_page_fault+0x91/0x110 [ 750.404708][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.404727][T11314] RIP: 0033:0x7f1e9eb8e969 [ 750.404745][T11314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.404762][T11314] RSP: 002b:00007f1e9c9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 750.404782][T11314] RAX: ffffffffffffffda RBX: 00007f1e9edb6160 RCX: 00007f1e9eb8e969 [ 750.404796][T11314] RDX: 0000000000000000 RSI: 0000000000008008 RDI: 00002000000000c0 [ 750.404809][T11314] RBP: 00007f1e9ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 750.404821][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.404837][T11314] R13: 0000000000000001 R14: 00007f1e9edb6160 R15: 00007ffc44c251d8 [ 750.404859][T11314] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 751.017895][ T9944] Bluetooth: hci4: command tx timeout [ 751.731823][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1234'. [ 751.937649][T11304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.725515][ T9269] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.973811][ T9269] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.073755][ T9944] Bluetooth: hci4: command tx timeout [ 753.169698][ T9269] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.253892][ T9269] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.425789][ T9269] bridge_slave_1: left allmulticast mode [ 753.440939][ T9269] bridge_slave_1: left promiscuous mode [ 753.446948][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.467274][ T9269] bridge_slave_0: left allmulticast mode [ 753.481075][ T9269] bridge_slave_0: left promiscuous mode [ 753.487282][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.676242][ T9269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.689297][ T9269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.704738][ T9269] bond0 (unregistering): Released all slaves [ 753.977300][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.988343][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.997505][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.006143][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.019301][ T9269] veth1_macvtap: left promiscuous mode [ 754.026514][ T9269] veth0_macvtap: left promiscuous mode [ 754.032494][ T9269] veth1_vlan: left promiscuous mode [ 754.038127][ T9269] veth0_vlan: left promiscuous mode [ 754.175837][ T9269] team0 (unregistering): Port device team_slave_1 removed [ 754.226363][ T9269] team0 (unregistering): Port device team_slave_0 removed [ 754.722588][ T9269] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.817587][ T9269] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.876939][ T9269] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.929253][ T9269] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.025953][ T9269] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.037048][ T9269] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 755.066372][ T9269] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.076876][ T9269] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 755.107541][ T9269] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.118143][ T9269] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 755.176233][ T9269] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.186690][ T9269] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 755.281792][ T9269] bridge_slave_1: left allmulticast mode [ 755.287541][ T9269] bridge_slave_1: left promiscuous mode [ 755.293569][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.305266][ T9269] bridge_slave_0: left allmulticast mode [ 755.311412][ T9269] bridge_slave_0: left promiscuous mode [ 755.317104][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.326934][ T9269] bridge_slave_1: left allmulticast mode [ 755.332702][ T9269] bridge_slave_1: left promiscuous mode [ 755.338389][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.347638][ T9269] bridge_slave_0: left allmulticast mode [ 755.353555][ T9269] bridge_slave_0: left promiscuous mode [ 755.359285][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.369227][ T9269] bridge_slave_1: left allmulticast mode [ 755.374986][ T9269] bridge_slave_1: left promiscuous mode [ 755.381062][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.389492][ T9269] bridge_slave_0: left allmulticast mode [ 755.395799][ T9269] bridge_slave_0: left promiscuous mode [ 755.401742][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.724054][ T9269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.735036][ T9269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.744761][ T9269] bond0 (unregistering): Released all slaves [ 755.756339][ T9269] bond0 (unregistering): Released all slaves [ 755.770543][ T9269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.783347][ T9269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.793802][ T9269] bond0 (unregistering): Released all slaves [ 755.903160][ T9269] bond1 (unregistering): Released all slaves [ 756.046155][ T9269] bond0 (unregistering): Released all slaves [ 756.214653][ T9269] IPVS: stopping master sync thread 8966 ... [ 756.221690][ T9269] IPVS: stopping master sync thread 8847 ... [ 756.525239][ T9269] hsr_slave_0: left promiscuous mode [ 756.531244][ T9269] hsr_slave_1: left promiscuous mode [ 756.537114][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.547258][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.567299][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.575064][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.590443][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.597883][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.616787][ T9269] veth1_macvtap: left promiscuous mode [ 756.622433][ T9269] veth0_macvtap: left promiscuous mode [ 756.628053][ T9269] veth1_vlan: left promiscuous mode [ 756.634015][ T9269] veth0_vlan: left promiscuous mode [ 756.641465][ T9269] veth1_macvtap: left promiscuous mode [ 756.646999][ T9269] veth0_macvtap: left promiscuous mode [ 756.653057][ T9269] veth1_vlan: left promiscuous mode [ 756.658373][ T9269] veth0_vlan: left promiscuous mode [ 756.898062][ T9269] team0 (unregistering): Port device team_slave_1 removed [ 756.964808][ T9269] team0 (unregistering): Port device team_slave_0 removed [ 757.333179][ T9269] team0 (unregistering): Port device team_slave_1 removed [ 757.363962][ T9269] team0 (unregistering): Port device team_slave_0 removed