last executing test programs: 23.106631463s ago: executing program 2 (id=1190): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1b, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="250a00000000000061117000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 22.81094448s ago: executing program 2 (id=1193): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 21.693230593s ago: executing program 2 (id=1200): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c014}, 0x4000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x12, 0xc3, 0x5b, 0x40, 0x403, 0x6010, 0xc698, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0x75, 0xf6}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60010700001111"], 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) socket$key(0xf, 0x3, 0x2) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0), 0x10) sendto$l2tp(r3, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r3, 0x0, 0x0, 0x2020, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000024c0)={@cgroup, 0xffffffffffffffff, 0xd}, 0x20) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r4, 0x0, 0x2, 0x3ff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x19}, 0x18) move_mount(r5, &(0x7f00000002c0)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00', 0x0) 19.283275627s ago: executing program 5 (id=1209): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x20000040) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)="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", 0x1b9}], 0x1}}], 0x1, 0x0) 18.857854444s ago: executing program 2 (id=1212): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 16.849515255s ago: executing program 3 (id=1213): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002340)=[0x0]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000480)={0x1d, r2, 0xfffffffffffffffc, {0x0, 0xff}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000002100)='./file0\x00', 0x100000, &(0x7f0000000780), 0x1, 0x43e, &(0x7f0000003080)="$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") 16.291325924s ago: executing program 5 (id=1215): socket$kcm(0x29, 0x7, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x40280, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) write$binfmt_aout(r0, 0x0, 0xff2e) fcntl$getflags(r0, 0x40a) 16.141343964s ago: executing program 3 (id=1217): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xca, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) lgetxattr(&(0x7f00000040c0)='./file0\x00', &(0x7f0000004100)=@known='security.apparmor\x00', &(0x7f0000004140)=""/171, 0xab) recvmmsg$unix(r2, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f00000003c0)=""/122, 0x7a}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000880)=""/88, 0x58}], 0x1, &(0x7f0000000900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x110}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/102, 0x66}, {&(0x7f0000000b40)=""/120, 0x78}, {&(0x7f0000000bc0)=""/212, 0xd4}], 0x3, &(0x7f0000000cc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/3, 0x3}, {&(0x7f0000000dc0)=""/244, 0xf4}, {&(0x7f0000000ec0)=""/229, 0xe5}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000001140), 0x6e, &(0x7f0000002480)=[{&(0x7f00000011c0)=""/126, 0x7e}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/14, 0xe}, {&(0x7f00000012c0)=""/36, 0x24}, {&(0x7f0000001300)=""/84, 0x54}, {&(0x7f0000001380)=""/24, 0x18}, {&(0x7f00000013c0)=""/9, 0x9}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/71, 0x47}], 0x9, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}}, {{&(0x7f0000002600), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002680)=""/155, 0x9b}, {&(0x7f0000002740)=""/94, 0x5e}, {&(0x7f00000027c0)=""/51, 0x33}, {&(0x7f0000002800)=""/194, 0xc2}, {&(0x7f0000002900)=""/170, 0xaa}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x6, &(0x7f0000003a40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000003b40), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003bc0)=""/153, 0x99}, {&(0x7f0000003c80)=""/232, 0xe8}, {&(0x7f0000003d80)=""/125, 0x7d}, {&(0x7f0000003e00)=""/171, 0xab}], 0x4}}], 0x7, 0x80000100, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000200)={0x0, 0x0, "3c0becbf083341d5b9ae9f97c6ec35a70c9833d647396dc5"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010000003750c97f16e7f9bc0000"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5ebe6f05c07d89785219057ebbe7c5be9056a127e514c8fc301259ecd7a8f063a3c0a52d95e02efa581e83197e57981d9995304290cd0380d67a6a664a434a160b73ee0a812943a73ee14885a151aa3699f5ec81a2d05f2c3c78728b3f7bcbb6a915fd37a4d4239b0050139b2af40ef9bf1b4d9ef2114b37861169a7586f", @ANYBLOB="c64efbf8b84031fe53fc982b0640792bf6e636c13747f45264b2d6ab575bca69655df79ab30133b4f174410fbcc979b3b8687b1d5b212ffa82b175ade11c2c70804068d870a4c043545a819f55c22aac5b0461486e3d8bf334633f84fb113c9362bb4d639de3acc26a8ebc5171f9df0351e568a18924e522ff1d26d0b4d24b78138f62a35e21a0593c109ef3327a8c1eb9b59c473ac3f8db5fb3c645e99b61a4bbaaf4c761af0cc710888170c1a346a23dc631a6", @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a000000"], 0x28}}, 0x8d0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000002c0)=0x3f, 0x4) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, 0x0) 15.782193748s ago: executing program 2 (id=1218): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc}, 0x20) ftruncate(0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, 0x0}]) ftruncate(r0, 0x1f) 15.587193605s ago: executing program 4 (id=1219): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$evdev(r2, &(0x7f0000000000), 0x100000008) fstat(0xffffffffffffffff, &(0x7f00000027c0)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{}]}, 0x10) (fail_nth: 1) 15.538872877s ago: executing program 1 (id=1220): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14.211851808s ago: executing program 3 (id=1221): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000002000000000000000000000000ff0100000000000000000000000000010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/128], 0x128}}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x9, 0x0, &(0x7f0000000040)="5aee41b9264da2baea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0]) setpriority(0x2, r3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) 12.702108562s ago: executing program 1 (id=1222): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF7w3outJEW7SRrbBh+qguhTQa3vNSbbELLJlmTTNqFoin+AIKKCL/rki+AfIEj/BBEK9l1UFNFWH3yojuzubEzT3SSl+0Oznw+czDkzs/s9J8OcnTMzzAQwsj6IiOmIyLIsuxgRpXx+mqfYa6XGes+ePlhqpCSy7OZfk0jyee3vejOfnss/diYivvbliG8mL8fd2tldW6xWK5t5eaa+njzPst1Lq+uLK5WVysb8/NzVhWsLVxZme9LOyYi4/sU//uC7P/vS9V99+t7vbv15+lutBrYcbEcvtZpebP4v2goRsdmPYENSaLaw5cqQ6wIAwNEax/sfjohPRMTFKMVY82gOAAAAOE2yz03E86R1/Q8AAAA4ndKImIgkLef3+05EmpbLrXt4Pxpn02ptq/6prLR/vmAyiunt1WplNr93YDKKSaM8l99j2y5fPlSej4i3I+L7pfFmubxUqy4P9cwHAAAAjI5zh8b//yi1xv8AAADAKTM57AoAAAAAfWf8DwAAAKef8T8AAACcal+5caORsvb7r5fv7myv1e5eWq5srZXXt5fKS7XNO+WVWm2l+cy+9eO+r1qr3flMbGzfn6lXtuozWzu7t9Zr2xv1W6svvAIbAAAAGKC333/0JImIvc+OpxGRJQeWFSOysYMrFwZfP6B/0ldZ+Q/9qwcweGPDrgAwNA7pYXQVh10BYOiO6we63rzz697XBQAA6I+pjz16Eq3r/83U8Ea+LBlmxYC+y6//J/Z1GD2u/8Pocv0PRlfxqCMAgwI49dIT7Oqvf/0/y16pUgAAQM9NNFOSlvNxwESkabkc8VbztQDF5PZqtTIbER+KiN+Wim82ynPNTyZODwAAAAAAAAAAAAAAAAAAAAAAAADACWVZElkX4/vrAAAAAP/PItI/Jfn7v6ZKFyYOnx94I/lnqTmNiHs/vvnD+4v1+uZcY/7f9ufXf5TPvzzosxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99Ozpg6V2GmTcv3whIiY7xS/Emeb0TBQj4uzfkygc+FwSEWM9iL/3MCLe6RQ/aVQrJvNaHI6fRsT4kOOf60F8GGWPGv3P5zvtf2l80Jx23v8KeXpd3fu/dL//G+vS/73V6QvTl2e9+/gXM13jP4x4t9C5/2nHT7rEP3/CNn7j67u73ZZlP42Y6vj7k7wQayYp3JnZ2tm9tLq+uFJZqWzMz89dXbi2cGVhdub2arWS/+0Y43sf/+W/j2r/2S7xJ49p/4UTtv9fj+8//UgrWzy0qBg/ybLp8523/ztd4rd/+z6Zb+5Geaqd32vlD3rv57957/0j2r/cpf3Hbf/pE7b/4le/8/sTrgoADMDWzu7aYrVa2ZSR6VtmPAYYdDGOWqd9EDuA+nw7D/U/sQleOTPETgkAAOiL/x70D7smAAAAAAAAAAAAAAAAAAAAMLqOewxY9OBxYodj7g2nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR/pPAAAA//+e/ctD") syz_open_dev$sndctrl(0x0, 0x0, 0x100c2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x21, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x3) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 12.422807222s ago: executing program 4 (id=1223): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001e0001000000000000000000fc000000000000000000000000000001000000000000e8ffffffffffffff00000000ffff7f00000100000000000000002400090003000000000000000000000000123500000000ac13fb2970791b780000000000"], 0x64}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socket$alg(0x26, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 12.417471485s ago: executing program 0 (id=1224): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1ac385b5235da718) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000003c0)=0x2, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000480)={{r2}, "f9e62e7606fa56a32ae4f2564edebc1e4472a0240e971a6796b33d7b2e437b5734c3221dab444f2785c9c053c8e17f310c0a200f4eba5f11cfde3a93d5a2b62d5942c119195a9f6ae0947f0b42024a91e095670a97374a2892144ee26394da63a3955304b633aa2d3570786f3e4cd90ad1ced115ba77a74b0c73c77edca32eca95d3b92c8e2c809b10315020bca5148ff818367f91b31ff91513c424b3fa520a5a393a3e5f5c532f052c2d0e3c6ff55f6eec14fae9d10b3ec946086b70869b2e2c57ad967294ee00f3fc15fa69d3b688348fe7ec21f09052706e016b14a3336d08e5f20f80d96abd72a8d6a2432f2a9179096fbbe84d4d5894c07c46384572856657fd77cb76685ca0872283447ff7825fc8388905ee7f84a3851c9987040855571a793400477fabc90d5f91639eca2cedb3223b11d7fd86c28bf0dd4b58a441a65e00501423e804f7bf2863b2427c08dc9f4eff0636f3808d55d1c6a30a826449b3217b12d8a56235321bc05a18b7e4333b4ca0123a33e55d4bdf0b3d0c646f8384a14343ac08c4f67d69e5525cd80700c8dee97b79a29d93b48b1bdeb762e3c91a3c962fa6f53894265ba8c3e05d568cd1eb56e42bd51f0c12105c3cf1e9d4d133db21bb62169211b70b29c930fcfe2363c08d2df6427aeb0307654c31df9fc3e0c4156e9108b51ec10814f22f4efca446ead5e12f54011a37b9433c8f9e17e31c7b9a516687461d4e1468a9aa9b1e3ee02ec8b84d159b2673463fe5e22c9a7f69a24c8d3749610da3341d10ad3f712a4394d56fa7818c6907f125ef84f372fa87bbfead90c3f4247223ae053b023570cd2ade770727b79dd23c2a33ec7575ef0b1555fa5dda1e6580ab20a46028c6d6e9d830122c403b1573ad4903d570eba75658f8e46262b9af1e9ea7edbd3d7179a393f0fea3bed7a230103e87088a324ac2e1f7431be4823113bfce1e294943783124d3cd79cf874ce308be3c9e4300ecdfd6a18a8f580b8f84824fa915fcbba3a348969963ad2305d936e8ccf8fa92d2dc8f4fb9ad9152ac3c23c30a61c1d8b8f95f56c98e8a1ec9e3e5bc0f443aa935df854931345e592d4845f5b331ee0d03f817656b5ca4508c25ba85ef45d9c775ec76a15ca74e09983b6eaf139b6b60296756c33d1d8abad00f0f48c0441b48571c5215afda65f43440aa345519156d7b6a42a34cfae957b5a1b95cf477c1688c6e44f655df63c73ebf5681a92a6fd53e27941b4479e17da4821a3324acb580e1501ed97792d80948750411e8ce015e9fca9269cfe2e925449ffbe90092fee4cf7af4a814e6a8b597cb93c281041167d199c1e82e379c72d803d963d8a08e92f69aac37ac72db05ba67a362d6f383773c3880e8dcbd75b5576f8fbf5b0e84804045e68c43a128a3a06fbe8945a5fffb5ab0c60bc95c4b25073857027b6d458af2f5908ffdbec61f44248ba99c6c9bc67b2035697507536a6c3ea581e79c06c040de1ad3c782efb608984f83b5eb44fc2a3579a3979f213a0c9fa0bbe1f23b2e40ee7dc45546d3a97bd82301780e40bf8f41f1334503db802bee84e6c4f330f98af704930ad44106a6c90962078f95ff48bb36fd436a7b8a3b84ff3b64d5c4ef3fe07421538ddbef21d89f2ae1641ddfc376258d80f91e41113a9bf395dc40fce55ac93ffa92d60d97684e012502c86fb1fa586bb03b9e4587d3f6c6aff67a0072e7eebc46085601f284247dc30167657ccfcabf64edadf17867b1a63847df2acd9531654b3f7724d4f5177d7d997ffe23d436e42f0178cbd3b0ad4691cfd74abe3ca80a26aede7d39c706752bc4b0bebb17c85d09cd4612024de2c748df6d88a651c2bff8cd13e3efee8d4e96e458aa638975b33774a5f48f3f801c7bb07d16d9b985335129f2ce762f62ab1da2caf428a0444653e0649c8c61943346b2b8769f148b2368a45c08c870e33718b20134f2a15c6ff0ae24cd2b604ff8a7e0560becbe5d92a4927313c6aa3413d7cf36ee5795a4b13fdd48abfe30215f6ffcad75fc168cd467e6ed5382bc6ef00dab49bc6628fe163ae4ea8caf50c44279e66a54ddf5f1ad4a1403dc05dd559ff01fccb827060232352885fa840cb8482a798149b59aa842513cf6f6677c7899743aa57ef560ff00473464bbc3cfdf170f7b7d4f78177c4acbd7b7109767732f4aa336a8e48024d642c221b780122bdf16ba57a758684e75d0e5d2007aa5afb9bbcb56aac1263a9e7d6d836a527faee95c1a6499ef4a15b8545f1845644dc8c5c17babd8c79fc54f8f9c4ff907ce31dd18632dbde9b82f420519ffa9c0180b31a0e1783396d57e002bbb0fc8466ef2cbd41e7341130c7524f2df652d667be404e4ebdd81416662f431c6cc7fb26766160513fe76dcd459faf81287c3842231996eafbc3cb6ee49d1d84266194106a332e43ea4d3b36bbb08ea7beb9056b8b3ccd20fe6b21013f23418c59e3f610519ba75b50e0b999c2855c01017a6d3233799ac475845bfdb27293b707e083002700e76b4378bd8bea0fa931e42fb2412d10419d7eb2e49d1832c85691d3ee48d2d2326c4a3a990d23c6bde98c4133ba490eee17d1fd3762327b2627ed74a682b4ce8009af5243ff28c85ddf491576069fc2b82dc18886d252f45bacd2becf612935a9598c66a146fa9ebfd6e1988c00e445da2c821e8d4b216390f4b2c02f6a2df53100d691f85599476ce3e9ffeb7d4bd88af2dc9d7cb88bfac9897d4f46ce69760b56201b63ac69ab31d249442ae151284b8d0072717211badda5dae13251955774c26255b514112b275354b2f89253ebbe5e572967510dbacb70f4917f1a5b15aac281ad2716da697c78bd864e99518f089aba365a03e4e683308bc15d7f483a69559bc555b4cb08f0f29c300c49ff27db9bf719db3d6d5dade7dabf14ce9544aeb832cc8243a7fcd418946221c392d1e42f27dcbaf9204719364934820f3edba6862c6d56e1f6679ef59743ec6e1c4c022a618eb853ef2d3ba41b055273f800ca7002b91a0ea70fa1d71ddc2536a41defdcc41aaea3946ecae1e259a9bebed5a18f96f7a512328e71ee14ca6a8a65b9a1e67b72a45c0f712e451a9f27d65bd19a314c6b821e141140cb1dd384235ac58dc613ac856ff152a506d1d9b10e0f22be7e58ef1e0476320c7da066f2b304af559c55abc30cf423d6e84fd929d7cf012da592786a3ea34cd8b1c3caf92d5aa96458aaa5b39d362d85d930a8bcc50ac1e0387227f3afa38467abacc4038088df15652967343a51d88d27642050767d2d7bc5e9324096fdfbf56ca0e01aaffb52759d1353ddc176f9793dfc8a72835f3a2d351fd1767d8e8c582aa0b666c578c9902c1a886b09648a1e96d61a54037ef3b755932f1aa253985f2fc3dd567f8449ae3922e75622317f6643ab0c150818e67a3a175d17d26a425847232603f2cdacfd838cde69e79d68a65f52bb4d2f48e5c35148cf71cd146d50676a9095b799140f6bc9c34de5026fbe2389dd44ad58f41f0a2cb4e3800eb13986af5dda9553e95f309ce62a3f680726cf3dcfd110b845b03c3e4e015c546107c0d83b5665a04a03fa330f20f6397cd656010a99629365ff84741e421d38780fcf2d6b9a0ded464ef0aae39a055a713a329cef1598d80da187caee8b5555793bd1da5cc2a4522b8bc2ff40834e41b96cf9fe1ffa65c5a624f73a4a7ab82ae36226c44b23d40257d4d77b79d56b5401bcd3ec0e25beffe22f3bf1603d2602558cbac6d264533b5a8fae6f7e5c87f0017029dee8abebc43301d105a53b0e1f1587faa5dcdfb7d9fd159206c25638298378918bb52542ce642329e0d3c0504f2c5e4d933f29596b4b1034eff11360fa50017b7cbd049dc863840224d3d1e4e4b436cbffaf03e8bb48d0d324db5877eec9932be0491c997af568f63842086cbdd9f53b89a85a36da6a2c2baee2aa00dd72a6225ff001b2474a8b4065c52d35077a37e439852df428112c1331098e437fdd7ed198ee79a9309bc4a7dfb8e8004756eeea998fa22a483da9f7339deb8f793c518bbaf43481b58fd11e4b598f369b1a7b20c4f73d551f2a0edf9cede7a0d5a0cca2df71003e95f29056ff7f1988ffcbbd69a7ff9ebe9e155758a325aa8efe9f7ce0db2758d170b71068e0b0054a73f56e1119e988a74e39c01534e376a2078843848518502ef1f73225738d4fd4c471ae2957f27aae1c6e903da25bdd24ea6db33467f742985d2290a353faa376f9498fc558c33c98d7669ca6f98af603544af7e1c814a71ccf3572e8203cadc2ca3710c641f43bda467878e5d4a23995d5643947f6d6c7932cadcb74fb20afbe6e3dea00b2e5b7aac646b64513a3aa2fa4b59db1b17e3286f8472b58c824998d04a9641e3f7383cd828fdc619e09f850176e162caa7aa05a6ff869d83534fa4fe0810d39b70169e4dbc97a042d6c4fb8a361707c3b5e59d0cb1ebe82edef0b1018d56ffa0e797efd74e4e33b4a998463fa29fe4a58bd9866cc3fad22372e7afff83a61574d9dcbab0cfc7a0fb9640e4703e0ef5c31145f4e4d73310a6faf9b919579bf07cfa8fc6286c6deadaf58e8a3e671559a377da17a904baa81addf71ef7a77288a06cc4a8df2dcc10021b082937879736ebdf4af00cbe947a25c24990528ec45adcea7cc7119d4c789aa7674d74632d8ac7b67370a3e699269c994f278b233b1dc87103032de3ce2ab760e819a1e6fa956cdb773800e4a48db28f5989ed3eb819d60c566fdcfc91a402420ac785697c554674c0d0eb2fb7614a39676b63a0c99afd4f4a18ac49c2418badf35c7c296a35d39b8b3a13f5709efc94aa14732eb45aa01695271f1e721ff8c6c328afd97b708d87812af99499cc2f42299cbcae90497d9fae7d0a46626d0b022bdf43c59b61c5b822f812aee1ab56948aa99618f11a4437e797e784c42ddf847507142622c9e78dfd78265171dce1cb8d1d86f93eafd99c63c4f9fe7944db7485e707ee767f3a15fadbb350345a1b0270b0698d69a8d58369bfd4a9bfe7c85c2d6909d6c60cac62ec6ce784c0a3b06ea5b3948f46c209ef6154368dea734b5a6b9ece6656819c3d9b88d557ee046a619757ae39e34f21a0a505af6aaf142561f08fce9dbcd59a217e2362332a14a8cd1f366bf775e1748a31643773be14ab6dd2c4c2a634490869c97de2880011f396a9da3f5aca75642f16389f7e5ac2d93737a460cd0ad072833e04ab91d3ffa1425f9373461b5e67c6c45a53f65ab2accec82a129e115bf027a5547c90e4e6c05aa629e7539836d2db576fb4aa4e24821a8f15dfae1fb4d029d4f348d36cf20ccf3677956a25c2b07f7cd5c7758525867912cdc025dee33bb223cf87f3d19cb7c224856aae04ea5917d0abab7bf130f15be7e0ee77822cba1a784e9608b966e1c21646c1a5c642063b2915d8546f9a983ff9e31baae8e93ae4060a58f13504504378624540eff6ee60e67ab6a268f01f728bcedf456fce2f6c91b1c443e4d5d66ef2421d92f799bf17e890c1aeabc5bc101a939a98813d98e8fad54bd09a5aadfb955de7fdc3fdbb0c6df661b1b2b772dbb04bc13aef3751dc68161d440c0c5232c125e218e6e0ddc8f31b003d36d642ab0ae4fdf09b61d22896af8a0b58a4ec133a2ccbdc390eab3b3f519e3ed17094b3b7225351896cd25e166a6525484bb82c2f03439308c0cb6551f312baf265b9d0f8e55010dab34a32aa756a6041b568b016ce7b516f5c82e92f2d16ea60dd9ee2a1674b060fc9a37c10"}) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev2(r1, &(0x7f00000016c0)=[{&(0x7f00000014c0)="5a59c1869ea8ff09d2351079d62a8051bbc0290ce93c99cbebfd83f38f22f45c48ee4552992b655b842bad3203d8fc18e39ea4fbac83d01581525c3462c4af23e05b8a2cf93d31623644e5b4189a64c43d7f603a5694434e50b51c190a335f85a58911d7f6e21781cc58316e42c290c39fed81025beb554e2b52dfa461e175dc73d10feb048dce2348200312bed8fcd2ff25417875b922da9e50c4073e8ef77d1ec6ed9be896b5e8bfe82283f0d190d04e647b440969fd85e6ba94a718646b2c6b", 0xc1}, {&(0x7f0000001680)="bff996fce04de56b1ad38d56c29fb7894f31", 0x12}], 0x2, 0xe5c, 0x3, 0x10) sendto$inet6(r1, &(0x7f0000001700)="1709c569fe02bd5da605a69b599bc37adcea8f6b66d4ef6760da44500f40bb6450e9d6f36ad69157d47835d860c7432ba6b526a5061260061e6e7045f051d8c344db07a2d867e1476e6f1418c07ea3d7841a53b80ccf7405a89c3e1e499651bfee763c03e06ae45969f1fda6d84a112bba1ca3add4633973b77e0f8ef7aa937529a655d58211f9ac233ab3ce503417330e6858a8b46b53adcc9b65dd4157feba9c37e23a3464b199", 0xa8, 0x4040000, &(0x7f00000017c0)={0xa, 0x4e21, 0x2, @empty, 0x1157}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000002940)={0x3, 0x0, &(0x7f0000001800)=""/58, &(0x7f0000001840)=""/213, &(0x7f0000001940)=""/4096, 0x2000}) r4 = openat(r1, &(0x7f0000002980)='./file0\x00', 0x103000, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002a00)) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r5) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000002ac0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000002b00)={0x0, 0x0, {0xffffffffffffffff, 0x2, 0xe1f, 0x2}, 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) write$UHID_INPUT2(r1, &(0x7f0000002b80)={0xc, {0x27, "ff571068cb3ad54a78cc856279b09532e7b858082e0e71ab5e3915a5e5bc046874fc96b75276e6"}}, 0x2d) r6 = openat2(r0, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x80000, 0x10, 0x30}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000002cc0)={0x0, 0xf7, "dff572edf8e367e90e5b96770f5f63993a24eb5248e0b93cd805dce9617ea8d2ff228a93bdf78cd141bb5be627da3b86c1869f6ff976fc5006798f15809507caeb41b8ee758243748766f739c6e5d2266279a1e314f05770851a408a1570dddb5d0c5d343cff683fb403baa887abbcf488e0c5e9f7bc9135920d0ce112d2cf4420355bce53ecfedbcf7af278336f447633927efee31f332e141673733eb612a565f0ace0c3ebaeda404f3e2ec6a564bb7cfcfaf7b441f79ebab9f3c19df0d68a0ce7c6ab0e3f8d6af99f1f64fb03b65edf61425cdd6230bc982cbeda421821f5d9438c42cac6413da6d3cf01c8a70a780abc6917886491"}, &(0x7f0000002dc0)=0xff) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x12, &(0x7f0000002e00)=@conn_svc_rsp={0x0, 0x0, 0xa, "f6ae56d1", {0x3, 0x99822e658ef3fac8, 0x0, 0xde, 0xa5, 0x6, 0xa6}}) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000002e40)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) listen(r4, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000003000)={0xffffffffffffffff, 0x2, 0x7, 0x80}) connect$inet6(r7, &(0x7f0000003040)={0xa, 0x4e23, 0x8ff2, @loopback}, 0x1c) openat$cgroup_ro(r7, &(0x7f0000003080)='memory.current\x00', 0x0, 0x0) 12.315061468s ago: executing program 5 (id=1225): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x2000010, &(0x7f0000001180)=ANY=[@ANYBLOB='mode=00000000000000000000010,mode=00000000000000000000001,utf8,anchor=00000000000000000001,undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=ignore,noadinicb,dmode=00000000000000000000006,novrs,lastblock=00000000000000000003,bs=00000000000000000009,nostrict,\x00'], 0x1, 0xc43, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x5, 0x6) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x300, 0x0, 0x0, 0x0) setgroups(0x0, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/144, 0x9a}, {&(0x7f00000001c0)=""/17, 0xfffffffffffffd2c}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}) 12.085620385s ago: executing program 2 (id=1226): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f00000005c0)=ANY=[@ANYBLOB='rootdir=00000000000000000005,iocharset=cp857,adinicb,gid=', @ANYRESDEC=0xee01, @ANYBLOB="2c6d6f64653d30303030303030303030303030303030303030303030312c73686f727461642c766f6c756d653d30303030303030303030303030303030303030372c756d61736b3d30303030303030303030303030303030303030303030352c004ea19775e9bc1588e626bc1e4f3d9fb99271a94299930b37cf4e73192598c4c3f4c0d8b52a244f61ee38b26dc2f36345601c5e80f03a3d2af6c5e40f6282416e205164f606ccbb2430c2766edad9bd24e618afffd5e53feaca48b47a6885d36f9d855fcd0d86681cb80d2edcc1a2cbd6"], 0x1, 0xc3d, &(0x7f0000002b40)="$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") getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setaffinity(0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) lstat(&(0x7f0000000540)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000600)={{0x3, 0x0, 0x0, 0x0, r0, 0x142, 0xf062}, 0x0, 0x2, 0x1, 0x6c12, 0x0, r1, 0x34c8}) lstat(0x0, 0x0) setfsgid(0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 9.884357119s ago: executing program 5 (id=1227): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x1, 0x3}, 0x10) sendmmsg$inet6(r2, &(0x7f0000007500)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4001000, 0xffffffff, 0x1000}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r5 = getpid() socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000280)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000018000c80140d0b8004000a0000000000080009000000000004000880"], 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ptrace(0x10, r5) sched_setscheduler(r5, 0x0, &(0x7f0000000300)=0x1a6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 8.742933966s ago: executing program 1 (id=1228): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x3f8, 0x10, 0x70bd26, 0x25dfdbfd, "", ["", "", ""]}, 0x10}}, 0x20000000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34524742}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000180)=0x10, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@norecovery}, {@nombcache}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x576, &(0x7f0000010340)="$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") setresuid(0x0, 0x0, 0x0) chown(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000100), 0x8) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') 8.691576759s ago: executing program 4 (id=1229): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002340)=[0x0]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000480)={0x1d, r2, 0xfffffffffffffffc, {0x0, 0xff}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000002100)='./file0\x00', 0x100000, &(0x7f0000000780), 0x1, 0x43e, &(0x7f0000003080)="$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") 8.606588405s ago: executing program 0 (id=1230): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 8.32309061s ago: executing program 3 (id=1231): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2a}, 0x90) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x80045505, 0x0) 4.524956421s ago: executing program 0 (id=1232): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x100000, 0xfffffffc, 0x2, "0062ba82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) 4.524470689s ago: executing program 3 (id=1233): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xca, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) lgetxattr(&(0x7f00000040c0)='./file0\x00', &(0x7f0000004100)=@known='security.apparmor\x00', &(0x7f0000004140)=""/171, 0xab) recvmmsg$unix(r2, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f00000003c0)=""/122, 0x7a}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000880)=""/88, 0x58}], 0x1, &(0x7f0000000900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x110}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/102, 0x66}, {&(0x7f0000000b40)=""/120, 0x78}, {&(0x7f0000000bc0)=""/212, 0xd4}], 0x3, &(0x7f0000000cc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/3, 0x3}, {&(0x7f0000000dc0)=""/244, 0xf4}, {&(0x7f0000000ec0)=""/229, 0xe5}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000001140), 0x6e, &(0x7f0000002480)=[{&(0x7f00000011c0)=""/126, 0x7e}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/14, 0xe}, {&(0x7f00000012c0)=""/36, 0x24}, {&(0x7f0000001300)=""/84, 0x54}, {&(0x7f0000001380)=""/24, 0x18}, {&(0x7f00000013c0)=""/9, 0x9}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/71, 0x47}], 0x9, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}}, {{&(0x7f0000002600), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002680)=""/155, 0x9b}, {&(0x7f0000002740)=""/94, 0x5e}, {&(0x7f00000027c0)=""/51, 0x33}, {&(0x7f0000002800)=""/194, 0xc2}, {&(0x7f0000002900)=""/170, 0xaa}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x6, &(0x7f0000003a40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000003b40), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003bc0)=""/153, 0x99}, {&(0x7f0000003c80)=""/232, 0xe8}, {&(0x7f0000003d80)=""/125, 0x7d}, {&(0x7f0000003e00)=""/171, 0xab}], 0x4}}], 0x7, 0x80000100, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000200)={0x0, 0x0, "3c0becbf083341d5b9ae9f97c6ec35a70c9833d647396dc5"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010000003750c97f16e7f9bc0000"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5ebe6f05c07d89785219057ebbe7c5be9056a127e514c8fc301259ecd7a8f063a3c0a52d95e02efa581e83197e57981d9995304290cd0380d67a6a664a434a160b73ee0a812943a73ee14885a151aa3699f5ec81a2d05f2c3c78728b3f7bcbb6a915fd37a4d4239b0050139b2af40ef9bf1b4d9ef2114b37861169a7586f", @ANYBLOB="c64efbf8b84031fe53fc982b0640792bf6e636c13747f45264b2d6ab575bca69655df79ab30133b4f174410fbcc979b3b8687b1d5b212ffa82b175ade11c2c70804068d870a4c043545a819f55c22aac5b0461486e3d8bf334633f84fb113c9362bb4d639de3acc26a8ebc5171f9df0351e568a18924e522ff1d26d0b4d24b78138f62a35e21a0593c109ef3327a8c1eb9b59c473ac3f8db5fb3c645e99b61a4bbaaf4c761af0cc710888170c1a346a23dc631a6", @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a000000"], 0x28}}, 0x8d0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000002c0)=0x3f, 0x4) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, 0x0) 4.37982332s ago: executing program 1 (id=1234): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4.274941348s ago: executing program 5 (id=1235): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000202505a8a440000102030109022400f900f8a004090400fe0107010304000501021000e70f040905820240000558d000000019994d581d96f19fbf869145662acbf3c77bef853d73d6edc029d46fd93d1e19b1b154d316a5308a2514f792b9437abf05c02cdc69ef83508d977a6ae1635e408823b870d7a3d335"], &(0x7f00000007c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x3, 0x3, 0x4, 0x8, 0x5}, 0x1b3, &(0x7f0000000440)={0x5, 0xf, 0x1b3, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x2, 0x2, 0x72d7}, @generic={0xc3, 0x10, 0xa, "56288dd328436cd8580de3cd6eed8298752f53f948ddedeb41d52fd2efcd563556c18706eec80b6b880399908a7fb07972e6fea28c2055d6e11c3696907a810fff3d67e82bc64f9bbdfe671998a87f855ac66a47189cc53b770f0f1be0ad00183f3972602b1b1ff18efe186210725be13b24f186b8777722f3924fcc8da76ebff7d9c7c865d2f61b91ee812079cc5ece7250b7915716f4e25f0a1c9b2bc05e0b5b987d7e7916bdfd41af4c0bbe469530e9075b277ddb2294e7b85757b2bfb9be"}, @generic={0xcd, 0x10, 0x1, "ae8cc4d1e1c410f57b02d22b8b727480f5c3966fc1fcdfb00fa980a3e37dacdd29f2f538464317d207175c0eff36c5061c3081f4cd5ec540d9cac384ec06c0cf08d051ffe70a87760df8f9f4d7057cd01cffcbd6c0ec8a7a036ca971317766809f528132e19ea7a429a701bb3ffb19055beff10986330cc8afdf8d0595a8cbb7af219ba4d48bdabd28c967e564fc67c4054868ec4f620c310b2fa65897c8c168efd9a8478e819d1885d34c3b672d47a3f484baffe5304700a95693aa369d12b659da420f10d036c678cc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x2, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0xff, 0x8dbc}]}, 0x4, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x74, &(0x7f00000008c0)=ANY=[@ANYBLOB="74039fb007100bcbce6220593ede3346266d89e93733aee7e2418647161e6badd40382d833d5b07a57e461a6dd4e42bb1ade6afe3bf6361063c47c4b83e5340b3be6f3d1c775153113aec87a78dd0e4d7e311a0c07eb81868c66be1d7c328ff08468ba8ad817db73a8a024b986e5a7d57e3cfdabeec7fdd5736e3045e47dcd5021b7bf722bd0e3f3a60c44431adc979313a12477a8443aaa7e3bdca9099bb57b9625a6df600c45ba42fb34fdc98bedecf9b972245a4f08ffed96e6daef117b45f3314b09091db3dd83321cf73f16691e7022c61f7dbc677e9bdec91ace4112570b83cae27830dcea0b60e8592480de02bbc4d5e55a80b1ed7b22defb9a899a715f3c853bb09c90bea5dc7d28eb2e97681d8de775221a798cecd66f2df78fbaa8a7f899c8a0563760926c93c2cd7e95e7bab372f35bf285a45abfde488dba5337e2453209d9e59d8d2b54ad"]}, {0x64, &(0x7f0000000740)=ANY=[@ANYBLOB="640336cf79772691351bd900ca227cae69fafd18aee56c35403d72df3532f2ca00617eb6067ae81d91996df79358bd2fdd9e4f08a3074edeb8c46bc6d72e743503000000e98cc9ab6a8c53d3a946d45b510f4e381ff13f1ce19bf7bf8d7c6d314fe14917"]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x227f, 0x1000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000380)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(r2, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002740)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) close(r2) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, 0x0) 3.86546854s ago: executing program 0 (id=1236): r0 = socket$kcm(0x2b, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x20) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}, 0x2142) 3.739239195s ago: executing program 1 (id=1237): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x31, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x31, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 3.64367178s ago: executing program 0 (id=1238): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc}, 0x20) ftruncate(0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, 0x0}]) ftruncate(r0, 0x1f) 3.642448352s ago: executing program 4 (id=1239): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/146) (fail_nth: 4) 3.092000465s ago: executing program 3 (id=1240): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x1, 0x3}, 0x10) sendmmsg$inet6(r2, &(0x7f0000007500)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4001000, 0xffffffff, 0x1000}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[], 0x0) r5 = getpid() socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000280)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000018000c80140d0b8004000a0000000000080009000000000004000880"], 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ptrace(0x10, r5) sched_setscheduler(r5, 0x0, &(0x7f0000000300)=0x1a6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 3.091153808s ago: executing program 4 (id=1241): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001e0001000000000000000000fc000000000000000000000000000001000000000000e8ffffffffffffff00000000ffff7f00000100000000000000002400090003000000000000000000000000123500000000ac13fb2970791b780000000000"], 0x64}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socket$alg(0x26, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 2.9837272s ago: executing program 0 (id=1242): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1ac385b5235da718) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000003c0)=0x2, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000480)={{r2}, "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"}) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev2(r1, &(0x7f00000016c0)=[{&(0x7f00000014c0)="5a59c1869ea8ff09d2351079d62a8051bbc0290ce93c99cbebfd83f38f22f45c48ee4552992b655b842bad3203d8fc18e39ea4fbac83d01581525c3462c4af23e05b8a2cf93d31623644e5b4189a64c43d7f603a5694434e50b51c190a335f85a58911d7f6e21781cc58316e42c290c39fed81025beb554e2b52dfa461e175dc73d10feb048dce2348200312bed8fcd2ff25417875b922da9e50c4073e8ef77d1ec6ed9be896b5e8bfe82283f0d190d04e647b440969fd85e6ba94a718646b2c6b", 0xc1}, {&(0x7f0000001680)="bff996fce04de56b1ad38d56c29fb7894f31", 0x12}], 0x2, 0xe5c, 0x3, 0x10) sendto$inet6(r1, &(0x7f0000001700)="1709c569fe02bd5da605a69b599bc37adcea8f6b66d4ef6760da44500f40bb6450e9d6f36ad69157d47835d860c7432ba6b526a5061260061e6e7045f051d8c344db07a2d867e1476e6f1418c07ea3d7841a53b80ccf7405a89c3e1e499651bfee763c03e06ae45969f1fda6d84a112bba1ca3add4633973b77e0f8ef7aa937529a655d58211f9ac233ab3ce503417330e6858a8b46b53adcc9b65dd4157feba9c37e23a3464b199", 0xa8, 0x4040000, &(0x7f00000017c0)={0xa, 0x4e21, 0x2, @empty, 0x1157}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000002940)={0x3, 0x0, &(0x7f0000001800)=""/58, &(0x7f0000001840)=""/213, &(0x7f0000001940)=""/4096, 0x2000}) r4 = openat(r1, &(0x7f0000002980)='./file0\x00', 0x103000, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002a00)) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r5) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000002ac0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000002b00)={0x0, 0x0, {0xffffffffffffffff, 0x2, 0xe1f, 0x2}, 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) write$UHID_INPUT2(r1, &(0x7f0000002b80)={0xc, {0x27, "ff571068cb3ad54a78cc856279b09532e7b858082e0e71ab5e3915a5e5bc046874fc96b75276e6"}}, 0x2d) r6 = openat2(r0, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x80000, 0x10, 0x30}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000002cc0)={0x0, 0xf7, "dff572edf8e367e90e5b96770f5f63993a24eb5248e0b93cd805dce9617ea8d2ff228a93bdf78cd141bb5be627da3b86c1869f6ff976fc5006798f15809507caeb41b8ee758243748766f739c6e5d2266279a1e314f05770851a408a1570dddb5d0c5d343cff683fb403baa887abbcf488e0c5e9f7bc9135920d0ce112d2cf4420355bce53ecfedbcf7af278336f447633927efee31f332e141673733eb612a565f0ace0c3ebaeda404f3e2ec6a564bb7cfcfaf7b441f79ebab9f3c19df0d68a0ce7c6ab0e3f8d6af99f1f64fb03b65edf61425cdd6230bc982cbeda421821f5d9438c42cac6413da6d3cf01c8a70a780abc6917886491"}, &(0x7f0000002dc0)=0xff) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x12, &(0x7f0000002e00)=@conn_svc_rsp={0x0, 0x0, 0xa, "f6ae56d1", {0x3, 0x99822e658ef3fac8, 0x0, 0xde, 0xa5, 0x6, 0xa6}}) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000002e40)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) listen(r4, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000003000)={0xffffffffffffffff, 0x2, 0x7, 0x80}) connect$inet6(r7, &(0x7f0000003040)={0xa, 0x4e23, 0x8ff2, @loopback}, 0x1c) openat$cgroup_ro(r7, &(0x7f0000003080)='memory.current\x00', 0x0, 0x0) 972.860548ms ago: executing program 1 (id=1244): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 296.915341ms ago: executing program 5 (id=1245): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000001aa80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000740)={0x0, 0x0, 0x6b2, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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") prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001b00608b6c2500000065f2191d550000e58b95bc5b6f49fa5531b188a06bc34081aacc693aec56ee5c48afcb70fbe370f91bd16ded0d18edd4067712883a3d4c683a3ec4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) open(0x0, 0x0, 0x22) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 0s ago: executing program 4 (id=1246): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xf00, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @filter_kind_options=@f_basic={{0xa}, {0xec8, 0x2, [@TCA_BASIC_EMATCHES={0x2a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0xfffb, 0x0, 0x2}, "d17e0a07ec13"}}, @TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x17}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x3ff, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xd}, {0x9, 0x8, 0x21, 0x5, 0x6, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x3ff}, {0xcdd, 0x3, 0x0, "e19f2d"}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x4800, 0x0, 0x7}, "5d7958754833311aa0fe15ef43873661eb8cd148da908e455af3c935a420349649f4cb04222227ee5c7ad50aa9850bec352587c2fb0c2ae9e562fee9ed28a1bdb8b2e7ebad8d2b840511787159a4fd31980083fa9d7dedebc5ad12944dae13a031086d4066dccb2e18f6"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x80, 0x7, 0x8001}, {{}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x90, 0x3, 0x9}, {0x7, 0x1, 0x10000, 0x20f}}}]}, @TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb26d, 0x1, 0x1cb1}, {0x3, 0x7fffffff, 0x6, 0x3, 0x4, 0x1}}}, @TCF_EM_CONTAINER={0xe8, 0x2, 0x0, 0x0, {{0x70, 0x0, 0x8000}, "391cbbc93ffab43803d39a018755e8ea55d1a2921bf7aebcb3e36f8c4973865e10ba0598a89d8f88fec3e7b07cb7bcc44048d5fc8fb7193e7a93be501387bd19776902f11229e920baee530df41dd9049413273f290564133c5fb7dc62e6211601ca9ba4fbe4c97aa2342e07188328606809a631fdb8a1350b45305873e8afc859cc50a47a50f87f43df3dd2e343852359c0ef9ce2e66b8e35e63c573c1dacd0d9fd2e5dd94849e836324138e31d6d091ae44b62406e2b53f6420ab856164182063c3114d9c536a589367e0b5b08221cb2dbb0ced5245463495554"}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x1, 0x0, 0xfff8}, "47dcd5f078afe9a7427fe2ebf21489fd73889cf7149e5e7e83f4294c22f459674d8f27b4477012bfe5a2506892bf8912ce71e01f63199e52fa11e0b97379c2f79d15"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_BASIC_ACT={0x2e4, 0x3, [@m_ctinfo={0x134, 0x16, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x401}]}, {0xf5, 0x6, "27b1a64c80d956bfc97761d697380620557a75fef12f85f9f35d40a64b98e771ed64ae38a2b596983787a77192b0ace14ff23dda6374e1008e83f6422a5011df6c8c3465a242d54634b6528359ec32075578a784daff936498f46c8b5b9444277700898f586549f9e82d5b64f0c7110f56521bc774416a294d04bd304963341aa4dd908ed34808072c142cc0cf2bc3bbed803beaecbc641eeeb869a5f86ad7a2f136ba80d2d66aba90322c8d3722a839db2007e52d0cfebbe434242db474255ed867ed79f7118526788d8f368981a0d40f72ac0d4fa010cad2a142643ce527957a62229216f15f071aee3c4ff1476f19ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x38, 0x1f, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x6, 0x6, 'MT'}, {0xc}, {0xc}}}, @m_xt={0x5c, 0xa, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x2b, 0x6, "78ecd23b54a36d39489a154fd40a627c05acd63f531676a57be8fb4b20c832091493e5c17961d1"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x118, 0x18, 0x0, 0x0, {{0x7}, {0x84, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x6f, 0x6, {0x4, 'filter\x00', 0xf, 0x74, "77841639409746732458f33340707284c891a0d165c197eee2b01858ec16ac63b9435330c855726c1f244d815af6ab61e8a0fb47b48cae7e9d6a6ed3d25397c460c2aefeff"}}]}, {0x6d, 0x6, "1e7d9edae938c835ba5459023d12a6f42d68f495cf38ceed3e275c61213cea9285ec750713f557e4f81b64c7bc274a5e749bbcc14dacf8d2c92d826b72db4adfcbf847f79ec6483ce07a8ed7ced60db8d0cbfadbb8acfc97ac57682bf530b3546b4a8cd60536ffef49"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_POLICE={0x494, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x10000, 0x6a, 0x8, {0x6, 0x0, 0x3, 0xa28, 0x4, 0x8}, {0xa, 0x0, 0xc, 0x100, 0x4, 0x1}, 0x6e44, 0x1, 0xc6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x67, 0x3, 0x3, {0x3, 0x2, 0x4, 0x7fff, 0x9, 0x4}, {0x1, 0x0, 0x2, 0x0, 0x8000, 0x8001}, 0x9, 0x4, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6e2e906d, 0x2, 0x9, 0x0, 0x3, 0x3, 0x1000, 0xd0, 0x7ff, 0x8, 0x120000, 0x8, 0x6, 0x3, 0x4323, 0x8, 0x80000001, 0x7, 0x6e28, 0xfffffffa, 0x1, 0xba8, 0xfffffffd, 0x3, 0x1, 0x4, 0x558, 0x9, 0x6, 0x9, 0x0, 0x8, 0x6, 0xfffffff9, 0x0, 0x200000, 0x0, 0xfffffffa, 0xffff, 0xe, 0xfffffc1a, 0x7, 0x5, 0x1, 0xb, 0xc, 0x7f0, 0x5, 0x3, 0x74b, 0x7, 0x4, 0x4, 0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9, 0x4, 0x0, 0xe, 0x0, 0x7, 0x4, 0x6, 0x81, 0x8, 0x3, 0x63b3, 0x69d, 0x800, 0x7f, 0x80000001, 0x85, 0x9, 0x1ff, 0xf, 0xc2b, 0x3, 0x8, 0x9, 0x2, 0x7ee0, 0xb, 0x81, 0x2, 0x0, 0x2, 0x401, 0x4, 0xffffff52, 0x81, 0x9, 0xe8a8, 0x8, 0x0, 0x7fffffff, 0x4, 0xb0, 0x3, 0x7, 0x200, 0xfffffff1, 0x8000, 0x5, 0x9, 0x7, 0xdb, 0x4, 0xfffffd1b, 0x8000, 0x3, 0x1, 0x10001, 0x30, 0x800, 0x2, 0x2, 0x40, 0x4, 0x3, 0x800, 0x2, 0x3, 0x6a, 0x0, 0xbd, 0x6, 0xffffb060, 0x4, 0x3, 0x40, 0x9, 0x100, 0x4, 0x8d, 0x7fffffff, 0x0, 0xc, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x4, 0x3, 0x37, 0x9, 0x80000001, 0x4eb, 0x7, 0x3, 0x4, 0x0, 0x1, 0x8, 0x7fff, 0x5, 0x6, 0x8, 0x0, 0x7fff, 0xffff0001, 0xe, 0x9, 0x9, 0xb, 0x6, 0x4e30, 0xc000000, 0x7f, 0x8, 0x11e, 0x2, 0xb074, 0x8, 0x1, 0x9, 0x100, 0x7ff, 0x21, 0xfffffff8, 0xff, 0x78f8, 0x0, 0x1ff, 0x101, 0x0, 0xc, 0x4, 0x0, 0x45, 0x6, 0x101, 0x5, 0x5, 0x2, 0x8, 0x7, 0x0, 0x3, 0x2251, 0x400, 0xffff8000, 0x3, 0x0, 0x4, 0x1, 0xaa, 0x0, 0xb, 0x2, 0x7fffffff, 0xcc, 0x1a, 0xfff, 0x6, 0x5, 0x10, 0x0, 0x5, 0x7, 0x8, 0xfffffffd, 0x94, 0x8000, 0x0, 0x5, 0x81, 0x1, 0x5, 0xc7, 0x6, 0x3, 0xfffffffb, 0x2, 0x846, 0x8, 0x1, 0xffff, 0x8001, 0x2, 0x7, 0x10001, 0x8001, 0x1000, 0x7000, 0xef, 0x0, 0x2, 0x3, 0x100, 0xa53, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x77}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xc}}, @TCA_BASIC_POLICE={0x494, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6c6}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x1, 0x8, 0x0, 0x4, 0x200, 0x9, 0x7, 0x8000, 0xffffffff, 0xde, 0xf, 0x7, 0x7, 0x0, 0x1, 0x0, 0x79e90d77, 0x0, 0x4, 0x15, 0x6, 0x56, 0xdd1, 0x4, 0x0, 0x7f, 0x0, 0x9, 0x1, 0x0, 0x0, 0x5, 0x5, 0x10, 0x10001, 0x2e64, 0x7fff, 0xcd, 0x1400000, 0xd, 0x770000, 0x2, 0xe, 0x0, 0x0, 0x9, 0x9aff, 0x2, 0x7, 0xb, 0xb, 0xfffeffff, 0x7, 0x3ff, 0x4, 0x95, 0x7fffffff, 0x3ff, 0x1, 0x0, 0x6, 0x48, 0xc, 0x0, 0xca, 0x0, 0x9, 0x6c000000, 0x0, 0xfffff927, 0x8, 0xdc, 0x6, 0x0, 0xfffffffc, 0x4, 0x2, 0x4, 0x1, 0x2, 0x8f7, 0x0, 0xfffffffd, 0x3, 0x6, 0x0, 0x1bb1, 0xfff, 0x0, 0x46b, 0x423, 0x3, 0x0, 0x0, 0x6, 0x1b41, 0x0, 0x127, 0xfffffffc, 0x0, 0x7, 0x6, 0xfffffffb, 0x101, 0x4, 0x9, 0xffffffff, 0x80000000, 0x0, 0x0, 0x1, 0x6, 0x0, 0x9, 0xd, 0x4, 0x9, 0xfffffff3, 0x9, 0x0, 0x7, 0x6, 0x100, 0x9, 0x0, 0xa80000, 0x0, 0x7f, 0x9, 0xffffffff, 0xfffffff7, 0x1, 0x80000000, 0xa, 0x5d4f, 0x4, 0x4, 0x7, 0x0, 0x0, 0x9, 0x400, 0x2, 0x2, 0x0, 0x0, 0x5, 0xd2d5, 0x5ac, 0x80000001, 0x2, 0x2, 0x0, 0x0, 0x9, 0x9, 0x8000, 0xad, 0x800, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffff0000, 0x1, 0x7ff, 0x7fff, 0x1, 0x5, 0x3, 0x80000000, 0x0, 0x0, 0x6, 0x6, 0x0, 0x8001, 0xffffffff, 0x2, 0x100, 0x5, 0x95, 0x79c3, 0x0, 0x8, 0x4, 0x0, 0x4, 0x0, 0x6, 0x4b, 0x9, 0x1000, 0x401, 0x3, 0x0, 0x0, 0x0, 0xe, 0x100, 0xa6aa, 0x5, 0xe77, 0x1ff, 0x1, 0x6, 0x2, 0x2, 0x4, 0x6, 0x1, 0x4, 0x6, 0x5, 0xffff, 0x800, 0x0, 0x0, 0x4, 0x6, 0x68c, 0x2, 0x8, 0x0, 0x7, 0x6, 0x0, 0x101, 0x400, 0xa287c16d, 0x15, 0x10001, 0x9, 0x6, 0xfffffffa, 0x1, 0x0, 0x226, 0x9, 0xa, 0x1, 0x0, 0x9, 0xf59, 0x8, 0x0, 0xa41, 0x3ef5, 0x3, 0xa, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x4, 0x0, 0xb9, {0x40, 0x0, 0x7fff, 0x1, 0x7ff, 0x6}, {0x56, 0x1, 0x0, 0x5, 0x2}, 0x1ff, 0xa72}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfaf, 0x0, 0x0, 0x0, 0x8, {0x9, 0x2, 0x7, 0x7, 0x9, 0x4}, {0x7, 0x2, 0x38, 0x0, 0x2, 0x5}, 0xe05, 0x2}}]}]}}]}, 0xf00}}, 0x0) kernel console output (not intermixed with test programs): ][T12830] bridge_slave_1: entered promiscuous mode [ 953.866236][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 953.885590][ T29] audit: type=1800 audit(1722538517.045:473): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1004" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 953.969597][T12960] serio: Serial port ptm0 [ 954.757987][T12112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 954.879862][T12830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.963788][T12830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.030774][T12964] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1007'. [ 955.293960][ T5498] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.360158][T12830] team0: Port device team_slave_0 added [ 955.383469][T12830] team0: Port device team_slave_1 added [ 955.529994][ T5498] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.649086][ T5498] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.686081][T12830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.691249][T12968] fuse: Bad value for 'fd' [ 955.709170][T12968] loop1: detected capacity change from 0 to 64 [ 955.717289][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.811186][T12970] loop0: detected capacity change from 0 to 512 [ 955.821005][T12830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.869830][T12970] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 955.909622][ T5498] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.944668][T12830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.965749][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.027931][T12830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.045096][T12970] EXT4-fs (loop0): 1 truncate cleaned up [ 956.054773][T12970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.254437][T12985] loop2: detected capacity change from 0 to 2048 [ 958.270052][T12985] udf: Unknown parameter 'nov' [ 958.287851][T11847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.534862][T12985] openvswitch: netlink: ct_state flags 00000300 unsupported [ 958.652677][T12830] hsr_slave_0: entered promiscuous mode [ 958.705475][T12830] hsr_slave_1: entered promiscuous mode [ 958.724178][T12830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.742220][T12989] loop0: detected capacity change from 0 to 512 [ 958.759485][T12830] Cannot create hsr debugfs directory [ 958.779226][T12989] EXT4-fs: Ignoring removed mblk_io_submit option [ 958.807428][T12989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 958.840140][T12991] loop2: detected capacity change from 0 to 2048 [ 958.848974][T12991] udf: Unknown parameter 'nov' [ 958.866850][T12989] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1012: corrupted in-inode xattr: e_value out of bounds [ 959.094429][T12989] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1012: couldn't read orphan inode 15 (err -117) [ 959.112521][ T5498] bridge_slave_1: left allmulticast mode [ 959.116625][T12989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.131947][ T5498] bridge_slave_1: left promiscuous mode [ 959.144089][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.483647][T12996] openvswitch: netlink: ct_state flags 00000300 unsupported [ 961.896151][ T5498] bridge_slave_0: left allmulticast mode [ 961.901840][ T5498] bridge_slave_0: left promiscuous mode [ 961.922174][ T29] audit: type=1800 audit(1722538525.085:474): pid=12997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1012" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 961.960759][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.000699][ T5498] bridge_slave_1: left allmulticast mode [ 962.017675][ T5498] bridge_slave_1: left promiscuous mode [ 962.035525][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.262661][ T5498] bridge_slave_0: left allmulticast mode [ 962.278904][ T5498] bridge_slave_0: left promiscuous mode [ 962.284842][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.409924][T13007] serio: Serial port ptm0 [ 963.280614][T11847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.523897][T13012] loop0: detected capacity change from 0 to 2048 [ 963.567956][T13012] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 963.770608][T13003] loop1: detected capacity change from 0 to 32768 [ 963.872950][T13003] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 963.892786][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'. [ 963.914279][ T29] audit: type=1800 audit(1722538527.075:475): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1018" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 964.164308][T13003] XFS (loop1): Ending clean mount [ 964.185204][T13003] XFS (loop1): Quotacheck needed: Please wait. [ 964.282388][T13003] XFS (loop1): Quotacheck: Done. [ 965.248325][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.276674][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.320743][ T5498] bond0 (unregistering): Released all slaves [ 965.594152][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.630147][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.670432][ T5498] bond0 (unregistering): Released all slaves [ 965.799983][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 966.023846][T13026] loop2: detected capacity change from 0 to 2048 [ 966.057122][T13026] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 966.146004][ T938] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 966.205472][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 966.273061][ T29] audit: type=1800 audit(1722538529.435:476): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1020" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 966.338019][T12112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 966.369050][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.396391][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.452660][ T938] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 966.493888][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.548394][ T938] usb 1-1: config 0 descriptor?? [ 966.971010][T13029] loop1: detected capacity change from 0 to 512 [ 966.979848][T13029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 967.041628][ T938] sony 0003:054C:0268.0001: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 967.055056][ T938] sony 0003:054C:0268.0001: failed to claim input [ 967.078778][T13029] EXT4-fs (loop1): 1 truncate cleaned up [ 967.094652][ T938] usb 1-1: USB disconnect, device number 22 [ 967.108813][T13029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.183273][ T5498] hsr_slave_0: left promiscuous mode [ 967.195209][ T5498] hsr_slave_1: left promiscuous mode [ 967.223009][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.268729][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.287287][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.302213][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.348949][T13040] fuse: Bad value for 'fd' [ 967.358038][T13040] loop0: detected capacity change from 0 to 64 [ 967.365132][ T5498] hsr_slave_0: left promiscuous mode [ 967.406557][ T5498] hsr_slave_1: left promiscuous mode [ 967.429602][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.443515][T12112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.453568][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.690956][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.716128][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.299781][T13044] loop1: detected capacity change from 0 to 2048 [ 968.314847][ T5498] veth1_macvtap: left promiscuous mode [ 968.325422][T13044] udf: Unknown parameter 'nov' [ 968.334350][ T5498] veth0_macvtap: left promiscuous mode [ 968.351515][ T5498] veth1_vlan: left promiscuous mode [ 968.370443][ T5498] veth0_vlan: left promiscuous mode [ 968.398518][ T5498] veth1_macvtap: left promiscuous mode [ 968.600757][T13044] openvswitch: netlink: ct_state flags 00000300 unsupported [ 968.668475][ T5498] veth0_macvtap: left promiscuous mode [ 968.674218][ T5498] veth1_vlan: left promiscuous mode [ 968.742105][ T5498] veth0_vlan: left promiscuous mode [ 968.854062][T13047] loop0: detected capacity change from 0 to 2048 [ 968.878570][T13047] udf: Unknown parameter 'nov' [ 970.188997][T13053] openvswitch: netlink: ct_state flags 00000300 unsupported [ 971.384260][T13055] loop1: detected capacity change from 0 to 512 [ 971.466840][T13055] EXT4-fs: Ignoring removed mblk_io_submit option [ 971.486180][T13055] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 971.530311][T13055] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1027: corrupted in-inode xattr: e_value out of bounds [ 971.578362][T13055] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1027: couldn't read orphan inode 15 (err -117) [ 971.627899][T13055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.784645][T13060] serio: Serial port ptm0 [ 972.709445][ T29] audit: type=1800 audit(1722538535.875:477): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1027" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 973.283978][T13074] loop0: detected capacity change from 0 to 512 [ 973.335869][T12112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.367138][T13074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.861555][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 973.938618][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 974.062569][T13079] loop1: detected capacity change from 0 to 32768 [ 974.121648][T13079] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 974.263157][T13079] XFS (loop1): Ending clean mount [ 974.319265][T13079] XFS (loop1): Quotacheck needed: Please wait. [ 974.394538][T13079] XFS (loop1): Quotacheck: Done. [ 975.531552][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 975.653317][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 976.558479][T12706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 976.570348][T12706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 976.582421][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1029'. [ 976.596648][T13070] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 976.771486][T12706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 976.782112][T11847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.783238][T13091] loop2: detected capacity change from 0 to 47 [ 976.837571][T12706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 976.863935][T13093] loop0: detected capacity change from 0 to 512 [ 976.881212][T13093] EXT4-fs: Ignoring removed bh option [ 976.906290][T13091] bond0: entered promiscuous mode [ 976.924352][T13091] bond_slave_0: entered promiscuous mode [ 976.932321][T13091] bond_slave_1: entered promiscuous mode [ 976.966746][T12112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 976.972717][T13093] EXT4-fs error (device loop0): __ext4_iget:4985: inode #15: block 1803188595: comm syz.0.1033: invalid block [ 977.003973][T13091] MINIX-fs: deleted inode referenced: 9 [ 977.015005][T13091] MINIX-fs: deleted inode referenced: 9 [ 977.030589][T13093] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1033: couldn't read orphan inode 15 (err -117) [ 977.048700][T13093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.162351][T12725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 977.166435][T13093] loop0: detected capacity change from 512 to 11 [ 977.207512][T12725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 977.236697][T12725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 977.343629][T12725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 977.412099][T11847] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 977.428283][T11847] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 977.466311][T11847] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 977.544923][T11847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.665872][T13090] bond0: left promiscuous mode [ 977.674900][T13090] bond_slave_0: left promiscuous mode [ 977.701581][T13090] bond_slave_1: left promiscuous mode [ 977.730532][T13103] loop1: detected capacity change from 0 to 2048 [ 977.749563][T13103] udf: Unknown parameter 'nov' [ 977.774423][ T5504] kworker/u8:24: attempt to access beyond end of device [ 977.774423][ T5504] loop2: rw=1, sector=48, nr_sectors = 2 limit=47 [ 977.811790][ T5504] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 978.021622][ T5504] kworker/u8:24: attempt to access beyond end of device [ 978.021622][ T5504] loop2: rw=1, sector=50, nr_sectors = 2 limit=47 [ 978.035521][ T5504] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 978.907424][T13106] openvswitch: netlink: ct_state flags 00000300 unsupported [ 979.648322][ T5230] Bluetooth: hci1: command 0x0406 tx timeout [ 980.027749][T12706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.178824][T13110] loop1: detected capacity change from 0 to 2048 [ 980.196366][T13110] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 980.225116][T13111] serio: Serial port ptm0 [ 980.342991][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 980.440246][T12830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 980.471240][T12706] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.485416][T12830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 980.514948][ T29] audit: type=1800 audit(1722538543.655:478): pid=13113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1038" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 980.568296][T12830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 980.614113][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.621396][ T8329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.691631][T12725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.841546][T12830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 980.879414][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.886728][ T8329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.979913][T13117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1040'. [ 981.099781][T12725] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.325763][ T5498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.596620][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 981.609014][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 981.630807][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 981.639486][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 981.658910][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 981.670996][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 981.698305][ T5498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.828166][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.835456][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.922053][ T5498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.236075][ T5498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.271656][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.278921][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.370970][ T8251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 982.382335][ T8251] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 982.393042][ T8251] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 982.403587][ T8251] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 982.436075][ T8251] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 982.443546][ T8251] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 982.677419][T13121] loop2: detected capacity change from 0 to 32768 [ 982.735376][T13121] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 982.862872][T13138] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 982.967553][T13138] loop1: detected capacity change from 0 to 512 [ 982.978989][T13121] XFS (loop2): Ending clean mount [ 983.011678][T13121] XFS (loop2): Quotacheck needed: Please wait. [ 983.043690][T13138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.056766][ T5498] bridge_slave_1: left allmulticast mode [ 983.062615][ T5498] bridge_slave_1: left promiscuous mode [ 983.068661][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.104408][ T5498] bridge_slave_0: left allmulticast mode [ 983.112698][ T5498] bridge_slave_0: left promiscuous mode [ 983.119783][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.177345][T13121] XFS (loop2): Quotacheck: Done. [ 983.538445][T12112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.754711][ T5230] Bluetooth: hci5: command tx timeout [ 984.357721][ T8251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 984.369956][ T8251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 984.408742][ T8251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 984.429804][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.430383][ T8251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 984.458396][ T8251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 984.466143][ T8251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 984.474330][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.490796][ T5498] bond0 (unregistering): Released all slaves [ 984.535948][ T5230] Bluetooth: hci6: command tx timeout [ 984.943013][T13156] loop1: detected capacity change from 0 to 2048 [ 984.967688][T13156] udf: Unknown parameter 'nov' [ 985.459110][T12830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.529217][T13161] openvswitch: netlink: ct_state flags 00000300 unsupported [ 985.585417][T12226] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 985.815843][ T8251] Bluetooth: hci5: command tx timeout [ 986.066794][ T5498] hsr_slave_0: left promiscuous mode [ 986.094268][ T5498] hsr_slave_1: left promiscuous mode [ 986.117947][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.143690][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.162252][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.185779][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.232516][ T5498] veth1_macvtap: left promiscuous mode [ 986.248418][ T5498] veth0_macvtap: left promiscuous mode [ 986.254143][ T5498] veth1_vlan: left promiscuous mode [ 986.266157][ T5498] veth0_vlan: left promiscuous mode [ 986.279392][T13165] fuse: Bad value for 'fd' [ 986.287486][T13165] loop2: detected capacity change from 0 to 64 [ 986.576520][ T8251] Bluetooth: hci0: command tx timeout [ 986.618854][ T8251] Bluetooth: hci6: command tx timeout [ 987.475393][T13169] loop1: detected capacity change from 0 to 2048 [ 987.483107][T13169] udf: Unknown parameter 'nov' [ 989.056723][T13175] openvswitch: netlink: ct_state flags 00000300 unsupported [ 989.246454][ T5230] Bluetooth: hci5: command tx timeout [ 989.268418][ T5232] Bluetooth: hci0: command tx timeout [ 989.274480][ T5232] Bluetooth: hci6: command tx timeout [ 989.360830][T13176] serio: Serial port ptm0 [ 989.744051][ T5230] Bluetooth: hci4: command 0x0406 tx timeout [ 989.863616][T13180] loop1: detected capacity change from 0 to 2048 [ 989.904082][T13180] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 990.010081][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 990.115049][ T29] audit: type=1800 audit(1722538553.275:479): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 990.292912][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 990.380093][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 991.208673][T12830] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.262534][T13178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1049'. [ 991.299807][T13122] chnl_net:caif_netlink_parms(): no params data found [ 991.337557][ T8251] Bluetooth: hci6: command tx timeout [ 991.337574][ T5230] Bluetooth: hci0: command tx timeout [ 991.416073][ T5230] Bluetooth: hci5: command tx timeout [ 991.512891][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.520123][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.704347][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.711833][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.033361][T13124] chnl_net:caif_netlink_parms(): no params data found [ 992.094439][T13190] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 992.241116][T13190] loop2: detected capacity change from 0 to 512 [ 992.301446][T13149] chnl_net:caif_netlink_parms(): no params data found [ 992.309201][T13190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.557972][T12226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.582196][T13122] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.590031][T13122] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.597392][T13122] bridge_slave_0: entered allmulticast mode [ 992.604907][T13122] bridge_slave_0: entered promiscuous mode [ 992.700709][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.707123][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.751803][T13122] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.762227][T13213] loop2: detected capacity change from 0 to 64 [ 992.768920][T13122] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.780285][T13122] bridge_slave_1: entered allmulticast mode [ 992.788592][T13122] bridge_slave_1: entered promiscuous mode [ 993.077350][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.106285][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.113851][T13124] bridge_slave_0: entered allmulticast mode [ 993.121828][T13124] bridge_slave_0: entered promiscuous mode [ 993.133821][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.141822][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.152753][T13124] bridge_slave_1: entered allmulticast mode [ 993.161038][T13124] bridge_slave_1: entered promiscuous mode [ 993.192704][T12830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 993.245200][T13149] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.255957][T13149] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.263351][T13149] bridge_slave_0: entered allmulticast mode [ 993.266321][T13208] loop1: detected capacity change from 0 to 32768 [ 993.274860][T13149] bridge_slave_0: entered promiscuous mode [ 993.289918][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.305270][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.349260][T13149] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.351055][T13208] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 993.357010][T13149] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.386175][T13149] bridge_slave_1: entered allmulticast mode [ 993.393559][T13149] bridge_slave_1: entered promiscuous mode [ 993.416087][ T5230] Bluetooth: hci0: command tx timeout [ 993.521910][T13208] XFS (loop1): Ending clean mount [ 993.538942][T13208] XFS (loop1): Quotacheck needed: Please wait. [ 993.645685][T13208] XFS (loop1): Quotacheck: Done. [ 993.659503][T13122] team0: Port device team_slave_0 added [ 993.698826][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.733496][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.800968][T13149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.827476][T13232] fuse: Bad value for 'fd' [ 993.843129][T13149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.859968][T13122] team0: Port device team_slave_1 added [ 993.864216][T13232] loop2: detected capacity change from 0 to 64 [ 994.922610][T13124] team0: Port device team_slave_0 added [ 995.138446][T13149] team0: Port device team_slave_0 added [ 995.146100][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.153060][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.197710][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.258019][T13124] team0: Port device team_slave_1 added [ 995.464757][T13149] team0: Port device team_slave_1 added [ 995.524070][T12830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.549049][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.566025][T13238] serio: Serial port ptm0 [ 995.567329][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.607369][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.632309][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.640408][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.668151][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.753658][T13149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.769538][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.803294][T12112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 995.811970][T13149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.997961][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.006956][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.033647][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.160987][T13149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.209065][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.258384][T13149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.331359][T13245] loop1: detected capacity change from 0 to 2048 [ 996.339255][T13245] udf: Unknown parameter 'nov' [ 996.365227][T13122] hsr_slave_0: entered promiscuous mode [ 996.385020][T13122] hsr_slave_1: entered promiscuous mode [ 996.402466][T13122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.419582][T13122] Cannot create hsr debugfs directory [ 996.689680][T13124] hsr_slave_0: entered promiscuous mode [ 996.708547][T13124] hsr_slave_1: entered promiscuous mode [ 997.738011][T13251] openvswitch: netlink: ct_state flags 00000300 unsupported [ 998.586321][T13124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 998.593953][T13124] Cannot create hsr debugfs directory [ 998.786289][T13248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1059'. [ 999.036877][ T8251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 999.052930][ T8251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 999.065755][ T8251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 999.078150][ T8251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 999.105822][ T8251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 999.113536][ T8251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 999.379755][T13149] hsr_slave_0: entered promiscuous mode [ 999.417382][T13149] hsr_slave_1: entered promiscuous mode [ 999.451504][T13149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.470038][T13149] Cannot create hsr debugfs directory [ 999.662490][ T8251] Bluetooth: hci1: Malformed Event: 0x13 [ 999.753512][T13277] fuse: Bad value for 'fd' [ 999.780458][T13277] loop2: detected capacity change from 0 to 64 [ 1001.206675][ T8251] Bluetooth: hci2: command tx timeout [ 1001.376619][T13285] serio: Serial port ptm0 [ 1001.445454][T13282] loop1: detected capacity change from 0 to 32768 [ 1001.508461][T13282] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1001.622207][T13282] XFS (loop1): Ending clean mount [ 1001.641153][T13282] XFS (loop1): Quotacheck needed: Please wait. [ 1001.721897][T13282] XFS (loop1): Quotacheck: Done. [ 1001.967955][T13253] chnl_net:caif_netlink_parms(): no params data found [ 1002.073428][ T5498] bridge_slave_1: left allmulticast mode [ 1002.095856][ T5498] bridge_slave_1: left promiscuous mode [ 1002.101746][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.144965][ T5498] bridge_slave_0: left allmulticast mode [ 1002.152352][ T5498] bridge_slave_0: left promiscuous mode [ 1002.166575][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.187349][ T5498] bridge_slave_1: left allmulticast mode [ 1002.194482][ T5498] bridge_slave_1: left promiscuous mode [ 1002.204959][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.225305][T13302] loop2: detected capacity change from 0 to 2048 [ 1002.246991][T13302] udf: Unknown parameter 'nov' [ 1002.277585][ T5498] bridge_slave_0: left allmulticast mode [ 1002.283431][ T5498] bridge_slave_0: left promiscuous mode [ 1002.524361][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.357525][T13305] openvswitch: netlink: ct_state flags 00000300 unsupported [ 1004.577167][ T8251] Bluetooth: hci2: command tx timeout [ 1004.853248][T13307] FAULT_INJECTION: forcing a failure. [ 1004.853248][T13307] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.886079][T13307] CPU: 0 UID: 0 PID: 13307 Comm: syz.2.1070 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1004.896919][T13307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1004.907014][T13307] Call Trace: [ 1004.910314][T13307] [ 1004.913270][T13307] dump_stack_lvl+0x241/0x360 [ 1004.918077][T13307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.923316][T13307] ? __pfx__printk+0x10/0x10 [ 1004.927943][T13307] ? __kmalloc_node_noprof+0xb7/0x440 [ 1004.933350][T13307] ? __pfx___might_resched+0x10/0x10 [ 1004.938695][T13307] should_fail_ex+0x3b0/0x4e0 [ 1004.943425][T13307] should_failslab+0xac/0x100 [ 1004.948145][T13307] __kmalloc_node_noprof+0xdf/0x440 [ 1004.953354][T13307] ? alloc_slab_obj_exts+0x3a/0xa0 [ 1004.958480][T13307] alloc_slab_obj_exts+0x3a/0xa0 [ 1004.963426][T13307] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 1004.969443][T13307] ? ep_ptable_queue_proc+0x5b/0x210 [ 1004.974892][T13307] kmem_cache_alloc_noprof+0x1de/0x2a0 [ 1004.980365][T13307] ep_ptable_queue_proc+0x5b/0x210 [ 1004.985576][T13307] ? kernfs_generic_poll+0xf3/0x220 [ 1004.990804][T13307] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1004.996557][T13307] kernfs_generic_poll+0x104/0x220 [ 1005.001706][T13307] kernfs_fop_poll+0x14f/0x170 [ 1005.006483][T13307] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 1005.011830][T13307] ep_insert+0x10c5/0x1ac0 [ 1005.016296][T13307] ? __pfx_ep_insert+0x10/0x10 [ 1005.021069][T13307] ? do_epoll_ctl+0x43e/0xf70 [ 1005.025761][T13307] ? __pfx___mutex_lock+0x10/0x10 [ 1005.031254][T13307] ? __fget_files+0x29/0x470 [ 1005.035863][T13307] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1005.041622][T13307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.047268][T13307] do_epoll_ctl+0x8d2/0xf70 [ 1005.051782][T13307] ? do_epoll_ctl+0x7b1/0xf70 [ 1005.056472][T13307] __x64_sys_epoll_ctl+0x161/0x1a0 [ 1005.061716][T13307] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1005.067359][T13307] ? do_syscall_64+0x100/0x230 [ 1005.072156][T13307] ? do_syscall_64+0xb6/0x230 [ 1005.076857][T13307] do_syscall_64+0xf3/0x230 [ 1005.081382][T13307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.087295][T13307] RIP: 0033:0x7fb2bbb773b9 [ 1005.091801][T13307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.111427][T13307] RSP: 002b:00007fb2bb5ff048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1005.119860][T13307] RAX: ffffffffffffffda RBX: 00007fb2bbd05f80 RCX: 00007fb2bbb773b9 [ 1005.127842][T13307] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1005.135874][T13307] RBP: 00007fb2bb5ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1005.143848][T13307] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1005.151831][T13307] R13: 000000000000000b R14: 00007fb2bbd05f80 R15: 00007fff6192ea08 [ 1005.159830][T13307] [ 1005.163951][T12112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1005.400903][T13309] capability: warning: `syz.2.1072' uses 32-bit capabilities (legacy support in use) [ 1006.366361][T13316] loop2: detected capacity change from 0 to 32768 [ 1006.533956][ T5230] Bluetooth: hci1: Malformed Event: 0x13 [ 1006.589403][T13316] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 1006.589403][T13316] [ 1006.614609][T13316] ERROR: (device loop2): remounting filesystem as read-only [ 1006.622642][ T5230] Bluetooth: hci2: command tx timeout [ 1006.681190][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.682460][T12226] JFS: metapage_get_blocks failed [ 1006.731210][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.763306][ T5498] bond0 (unregistering): Released all slaves [ 1007.134366][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.186317][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.232974][ T5498] bond0 (unregistering): Released all slaves [ 1007.309830][T13329] fuse: Bad value for 'fd' [ 1007.318250][T13329] loop2: detected capacity change from 0 to 64 [ 1007.642063][ T5498] hsr_slave_0: left promiscuous mode [ 1007.655279][ T5498] hsr_slave_1: left promiscuous mode [ 1007.664585][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.690941][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.711596][ T5498] hsr_slave_0: left promiscuous mode [ 1007.719813][ T5498] hsr_slave_1: left promiscuous mode [ 1007.729734][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.075717][ T5230] Bluetooth: hci2: command tx timeout [ 1009.135041][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.164398][T13339] FAULT_INJECTION: forcing a failure. [ 1009.164398][T13339] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.202421][T13339] CPU: 1 UID: 0 PID: 13339 Comm: syz.1.1077 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1009.213278][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1009.223473][T13339] Call Trace: [ 1009.226771][T13339] [ 1009.229724][T13339] dump_stack_lvl+0x241/0x360 [ 1009.234449][T13339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.234592][T13338] 9pnet: p9_errstr2errno: server reported unknown error @hQItekKzExBAblpΆvx*D}ْ;5 [ 1009.239934][T13339] ? __pfx__printk+0x10/0x10 [ 1009.239989][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.240019][T13339] ? ref_tracker_alloc+0x332/0x490 [ 1009.267556][T13339] should_fail_ex+0x3b0/0x4e0 [ 1009.272257][T13339] ? skb_clone+0x20c/0x390 [ 1009.276681][T13339] should_failslab+0xac/0x100 [ 1009.281399][T13339] ? skb_clone+0x20c/0x390 [ 1009.285823][T13339] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1009.291207][T13339] skb_clone+0x20c/0x390 [ 1009.295458][T13339] __netlink_deliver_tap+0x3cc/0x7c0 [ 1009.300763][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.306433][T13339] ? netlink_deliver_tap+0x2e/0x1b0 [ 1009.311684][T13339] netlink_deliver_tap+0x19d/0x1b0 [ 1009.316828][T13339] netlink_unicast+0x7be/0x990 [ 1009.321607][T13339] ? __pfx_netlink_unicast+0x10/0x10 [ 1009.326926][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.332568][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.338205][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.344274][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.349940][T13339] ? __check_object_size+0x49c/0x900 [ 1009.355240][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.360885][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.366546][T13339] netlink_sendmsg+0x8e4/0xcb0 [ 1009.371361][T13339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.376661][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.382294][T13339] ? aa_sock_msg_perm+0x91/0x160 [ 1009.387241][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.392872][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.398502][T13339] ? security_socket_sendmsg+0x87/0xb0 [ 1009.403979][T13339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.409275][T13339] __sock_sendmsg+0x223/0x270 [ 1009.413967][T13339] ____sys_sendmsg+0x525/0x7d0 [ 1009.418742][T13339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.424408][T13339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.429732][T13339] __sys_sendmsg+0x2b0/0x3a0 [ 1009.434348][T13339] ? __pfx___sys_sendmsg+0x10/0x10 [ 1009.439463][T13339] ? vfs_write+0x7c4/0xc90 [ 1009.443948][T13339] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1009.450294][T13339] ? do_syscall_64+0x100/0x230 [ 1009.455078][T13339] ? do_syscall_64+0xb6/0x230 [ 1009.459769][T13339] do_syscall_64+0xf3/0x230 [ 1009.464292][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.470230][T13339] RIP: 0033:0x7fe0333773b9 [ 1009.474663][T13339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.494289][T13339] RSP: 002b:00007fe034127048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.502727][T13339] RAX: ffffffffffffffda RBX: 00007fe033505f80 RCX: 00007fe0333773b9 [ 1009.510717][T13339] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1009.518692][T13339] RBP: 00007fe0341270a0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.526680][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.534666][T13339] R13: 000000000000000b R14: 00007fe033505f80 R15: 00007ffc720b8ea8 [ 1009.542671][T13339] [ 1009.930139][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 1009.979128][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 1010.687193][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 1010.732804][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 1011.272256][T13339] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1011.369481][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.385914][T13253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.393187][T13253] bridge_slave_0: entered allmulticast mode [ 1011.402089][T13253] bridge_slave_0: entered promiscuous mode [ 1011.412431][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.448556][T13253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.465924][T13253] bridge_slave_1: entered allmulticast mode [ 1011.474441][T13253] bridge_slave_1: entered promiscuous mode [ 1011.589714][T13253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.663499][T13253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.920516][T13253] team0: Port device team_slave_0 added [ 1011.988462][T13253] team0: Port device team_slave_1 added [ 1012.210385][T13253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.255794][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.284833][T13253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.341767][T13253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.365883][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.441827][T13253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.520097][T13351] loop2: detected capacity change from 0 to 2048 [ 1012.546985][T13351] udf: Unknown parameter 'nov' [ 1012.837328][T13347] loop1: detected capacity change from 0 to 32768 [ 1012.859338][T13347] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1012.871346][T13253] hsr_slave_0: entered promiscuous mode [ 1012.880646][T13253] hsr_slave_1: entered promiscuous mode [ 1012.893088][T13253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1013.976704][T13362] openvswitch: netlink: ct_state flags 00000300 unsupported [ 1014.737505][T13253] Cannot create hsr debugfs directory [ 1014.744433][T13124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1014.887314][T13347] XFS (loop1): Ending clean mount [ 1014.913828][T13124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1014.954841][T13347] XFS (loop1): Quotacheck needed: Please wait. [ 1014.972080][T13124] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1015.048097][T13347] XFS (loop1): Quotacheck: Done. [ 1015.122350][T12112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1015.144449][T13124] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1016.134010][T13369] loop1: detected capacity change from 0 to 32768 [ 1016.148787][T13124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.167958][ T8251] Bluetooth: hci4: Malformed Event: 0x13 [ 1016.271444][ T5498] bridge_slave_1: left allmulticast mode [ 1016.279889][ T5498] bridge_slave_1: left promiscuous mode [ 1016.287302][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.305267][ T5498] bridge_slave_0: left allmulticast mode [ 1016.312017][ T5498] bridge_slave_0: left promiscuous mode [ 1016.317989][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.580588][T13374] fuse: Bad value for 'fd' [ 1016.608859][T13374] loop2: detected capacity change from 0 to 64 [ 1017.878890][T13382] FAULT_INJECTION: forcing a failure. [ 1017.878890][T13382] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.900447][T13382] CPU: 0 UID: 0 PID: 13382 Comm: syz.1.1087 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1017.911244][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1017.921313][T13382] Call Trace: [ 1017.924606][T13382] [ 1017.925569][T13384] loop2: detected capacity change from 0 to 1024 [ 1017.927531][T13382] dump_stack_lvl+0x241/0x360 [ 1017.927585][T13382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1017.943753][T13382] ? __pfx__printk+0x10/0x10 [ 1017.948350][T13382] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 1017.954263][T13382] ? __pfx___might_resched+0x10/0x10 [ 1017.959575][T13382] should_fail_ex+0x3b0/0x4e0 [ 1017.964293][T13382] ? sock_alloc_inode+0x28/0xc0 [ 1017.969163][T13382] should_failslab+0xac/0x100 [ 1017.973859][T13382] ? sock_alloc_inode+0x28/0xc0 [ 1017.978713][T13382] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 1017.984438][T13382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.990080][T13382] sock_alloc_inode+0x28/0xc0 [ 1017.994837][T13382] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1018.000234][T13382] new_inode_pseudo+0x6b/0x1a0 [ 1018.005014][T13382] __sock_create+0x123/0x920 [ 1018.009636][T13382] __sys_socket+0x150/0x3c0 [ 1018.014162][T13382] ? __pfx___sys_socket+0x10/0x10 [ 1018.019193][T13382] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1018.025557][T13382] ? exc_page_fault+0x590/0x8c0 [ 1018.030422][T13382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.036067][T13382] __x64_sys_socket+0x7a/0x90 [ 1018.040758][T13382] do_syscall_64+0xf3/0x230 [ 1018.045281][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.051223][T13382] RIP: 0033:0x7fe0333791d7 [ 1018.055652][T13382] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.075277][T13382] RSP: 002b:00007fe034125fb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1018.083701][T13382] RAX: ffffffffffffffda RBX: 00007fe033505f80 RCX: 00007fe0333791d7 [ 1018.091676][T13382] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1018.099735][T13382] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1018.107717][T13382] R10: 00000000200004c0 R11: 0000000000000286 R12: 0000000000000001 [ 1018.115703][T13382] R13: 000000000000000b R14: 00007fe033505f80 R15: 00007ffc720b8ea8 [ 1018.123697][T13382] [ 1018.132149][T13382] socket: no more sockets [ 1018.178174][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.188369][ C1] eth0: bad gso: type: 1, size: 1408 [ 1018.208069][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.234623][ T5498] bond0 (unregistering): Released all slaves [ 1018.254853][T13124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.329558][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.336840][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.371851][ T1571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.379083][ T1571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.475073][T13393] loop2: detected capacity change from 0 to 1024 [ 1018.493734][ T5498] hsr_slave_0: left promiscuous mode [ 1018.507823][ T5498] hsr_slave_1: left promiscuous mode [ 1018.514220][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.514589][T13393] hfsplus: failed to load root directory [ 1018.529330][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.581006][T13393] loop2: detected capacity change from 0 to 512 [ 1019.699678][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 1019.822457][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 1020.331450][T13400] loop2: detected capacity change from 0 to 32768 [ 1020.412704][T13400] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1020.525055][T13400] XFS (loop2): Ending clean mount [ 1020.533951][T13400] XFS (loop2): Quotacheck needed: Please wait. [ 1020.639331][T13400] XFS (loop2): Quotacheck: Done. [ 1020.885429][T13149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1020.995168][T13149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1021.155050][T13149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1021.183483][T13149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1021.587974][T13149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.632744][T13149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.702569][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.709828][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.722466][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.729679][ T5287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.789665][T13124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.897480][T13122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1021.947685][T13122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1021.960846][T13122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1021.987338][T13122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1022.170907][T12226] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1022.187128][T13124] veth0_vlan: entered promiscuous mode [ 1022.236887][T13253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1022.260138][T13253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1022.299372][T13253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1022.350790][T13124] veth1_vlan: entered promiscuous mode [ 1022.406794][T13253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1022.580734][T13124] veth0_macvtap: entered promiscuous mode [ 1022.641764][T13124] veth1_macvtap: entered promiscuous mode [ 1022.810452][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.835413][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.864898][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.875553][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.892678][T13124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.944513][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.956866][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.966919][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.977759][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.990845][T13124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.059093][T13122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.074510][T13124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.084566][T13124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.101991][T13124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.113494][T13124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.179224][T13122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.218847][T13149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.238630][ T938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.245918][ T938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.301031][T13253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.347313][ T938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.354529][ T938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.462505][T13253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.585695][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.592903][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.608548][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.615813][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.637811][ T5504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.663826][ T5504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.871697][ T5504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.896014][ T5504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.105138][T13149] veth0_vlan: entered promiscuous mode [ 1024.161548][T13149] veth1_vlan: entered promiscuous mode [ 1024.197674][T13440] loop3: detected capacity change from 0 to 1024 [ 1024.204813][T13440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1024.292717][T13149] veth0_macvtap: entered promiscuous mode [ 1024.325146][T13440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.329680][T13149] veth1_macvtap: entered promiscuous mode [ 1024.373704][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.386964][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.397164][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.408916][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.418964][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.430002][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.442965][T13149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.503792][T13428] loop2: detected capacity change from 0 to 40427 [ 1024.512727][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.527617][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.538610][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.543635][ C1] eth0: bad gso: type: 1, size: 1408 [ 1024.549177][T13428] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1024.563227][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.575544][T13428] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1024.583918][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.594751][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.608969][T13149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.617566][T13124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.631193][T13428] F2FS-fs (loop2): invalid crc value [ 1024.652605][T13428] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1024.683402][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.740769][T13149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.760145][T13149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.760840][T13428] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1024.786970][T13149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.801324][T13149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.805704][T13428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1024.820884][T13253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.069146][T13122] veth0_vlan: entered promiscuous mode [ 1025.199974][T13122] veth1_vlan: entered promiscuous mode [ 1025.215238][ T5526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.253733][ T5526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.403837][ T2546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.421258][T13122] veth0_macvtap: entered promiscuous mode [ 1025.427479][ T2546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.521256][T13122] veth1_macvtap: entered promiscuous mode [ 1025.613735][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.645277][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.666944][T13462] FAULT_INJECTION: forcing a failure. [ 1025.666944][T13462] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.679745][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.690315][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.702641][T13462] CPU: 0 UID: 0 PID: 13462 Comm: syz.4.959 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1025.713447][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1025.723517][T13462] Call Trace: [ 1025.726812][T13462] [ 1025.729752][T13462] dump_stack_lvl+0x241/0x360 [ 1025.734464][T13462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1025.739778][T13462] ? __pfx__printk+0x10/0x10 [ 1025.744400][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.750055][T13462] ? ref_tracker_alloc+0x332/0x490 [ 1025.755191][T13462] should_fail_ex+0x3b0/0x4e0 [ 1025.759909][T13462] ? skb_clone+0x20c/0x390 [ 1025.764350][T13462] should_failslab+0xac/0x100 [ 1025.769068][T13462] ? skb_clone+0x20c/0x390 [ 1025.773598][T13462] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1025.779006][T13462] skb_clone+0x20c/0x390 [ 1025.783283][T13462] __netlink_deliver_tap+0x3cc/0x7c0 [ 1025.788602][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.794269][T13462] ? netlink_deliver_tap+0x2e/0x1b0 [ 1025.799494][T13462] netlink_deliver_tap+0x19d/0x1b0 [ 1025.804640][T13462] netlink_unicast+0x7be/0x990 [ 1025.806180][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.809412][T13462] ? __pfx_netlink_unicast+0x10/0x10 [ 1025.825124][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.830787][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.832044][ T8251] Bluetooth: hci6: Malformed Event: 0x13 [ 1025.836433][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.836473][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.836501][T13462] ? __check_object_size+0x49c/0x900 [ 1025.858924][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.864574][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.870224][T13462] netlink_sendmsg+0x8e4/0xcb0 [ 1025.875023][T13462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.880329][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.885970][T13462] ? aa_sock_msg_perm+0x91/0x160 [ 1025.890921][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.896563][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.902220][T13462] ? security_socket_sendmsg+0x87/0xb0 [ 1025.907710][T13462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.913023][T13462] __sock_sendmsg+0x223/0x270 [ 1025.917812][T13462] ____sys_sendmsg+0x525/0x7d0 [ 1025.922587][T13462] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.928268][T13462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1025.933588][T13462] __sys_sendmsg+0x2b0/0x3a0 [ 1025.938197][T13462] ? __pfx___sys_sendmsg+0x10/0x10 [ 1025.943405][T13462] ? vfs_write+0x7c4/0xc90 [ 1025.947896][T13462] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1025.954248][T13462] ? do_syscall_64+0x100/0x230 [ 1025.959038][T13462] ? do_syscall_64+0xb6/0x230 [ 1025.963740][T13462] do_syscall_64+0xf3/0x230 [ 1025.968270][T13462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.974191][T13462] RIP: 0033:0x7f5e369773b9 [ 1025.978618][T13462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.998241][T13462] RSP: 002b:00007f5e363ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.006907][T13462] RAX: ffffffffffffffda RBX: 00007f5e36b05f80 RCX: 00007f5e369773b9 [ 1026.014903][T13462] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1026.022888][T13462] RBP: 00007f5e363ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1026.030868][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.038843][T13462] R13: 000000000000000b R14: 00007f5e36b05f80 R15: 00007ffc33d71368 [ 1026.047019][T13462] [ 1026.059588][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.079031][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.125767][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.148681][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.188896][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 1026.231316][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.272902][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.303597][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.324534][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.349173][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.361495][T13465] fuse: Bad value for 'fd' [ 1026.369503][T13465] loop4: detected capacity change from 0 to 64 [ 1026.376488][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.388546][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.402973][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.424697][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.471095][T13122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.586177][T13122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.612593][T13122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.641821][T13122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.691474][T13477] tipc: Started in network mode [ 1027.703059][T13477] tipc: Node identity a2baa76bc956, cluster identity 4711 [ 1027.710958][T13477] tipc: Enabled bearer , priority 0 [ 1027.853236][T13253] veth0_vlan: entered promiscuous mode [ 1027.862799][T13476] loop3: detected capacity change from 0 to 1024 [ 1027.900063][T13476] ext4: Unknown parameter 'hash' [ 1027.952509][T13253] veth1_vlan: entered promiscuous mode [ 1027.978027][T13476] loop3: detected capacity change from 0 to 512 [ 1028.021884][T13476] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1028.064123][ T5504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.076033][ T5504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.093389][T13476] EXT4-fs (loop3): 1 truncate cleaned up [ 1028.108602][T13476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.192532][T13253] veth0_macvtap: entered promiscuous mode [ 1028.267366][ T5500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.304392][T13253] veth1_macvtap: entered promiscuous mode [ 1028.322192][ T5500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.523825][T13475] tipc: Disabling bearer [ 1028.692130][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.735672][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.745562][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.795700][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.825710][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.872803][T13497] loop2: detected capacity change from 0 to 1024 [ 1028.885554][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.915686][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.940700][T13497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1028.946276][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.978033][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.995868][T13497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.019039][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.032093][T13253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.134624][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.185675][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.195584][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.202490][T13482] loop4: detected capacity change from 0 to 32768 [ 1029.225817][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.275853][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.304798][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.307661][T13482] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1029.325793][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.346500][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.346584][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.346608][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.368581][T13253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.377634][T13124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.387972][T12226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.427855][T13253] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.427906][T13253] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.427942][T13253] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.427985][T13253] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.604903][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.685573][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.698418][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.711835][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.730468][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1029.740832][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1029.835073][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1104'. [ 1029.854728][T13482] XFS (loop4): Ending clean mount [ 1029.919364][T13482] XFS (loop4): Quotacheck needed: Please wait. [ 1029.969406][ T8609] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1030.013107][T13482] XFS (loop4): Quotacheck: Done. [ 1030.196047][ T2546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.208455][ T8609] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1030.252012][ T2546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.262231][ T8609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.805693][ T8609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.827178][ T8609] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1030.842361][ T8609] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1031.062989][T13529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.097379][T13529] loop0: detected capacity change from 0 to 8 [ 1031.219279][ T29] audit: type=1326 audit(1722538594.375:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.0.1108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d949773b9 code=0x0 [ 1031.695728][ T8609] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1031.703887][ T8609] usb 3-1: Manufacturer: syz [ 1031.716942][ T8609] usb 3-1: config 0 descriptor?? [ 1031.728110][ T5512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.762715][ T5512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.817057][ T5230] Bluetooth: hci3: command tx timeout [ 1032.131063][T13149] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1032.166584][ T8609] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 1032.174855][ T8609] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 1032.212249][ T8609] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1032.243861][T13536] fuse: Bad value for 'fd' [ 1032.289311][T13536] loop0: detected capacity change from 0 to 64 [ 1032.308729][T13514] chnl_net:caif_netlink_parms(): no params data found [ 1032.345494][ T5230] Bluetooth: hci6: Malformed Event: 0x13 [ 1032.521726][ T8609] usb 3-1: USB disconnect, device number 19 [ 1033.549501][T13514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.575564][T13514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.615088][T13514] bridge_slave_0: entered allmulticast mode [ 1033.630289][T13550] FAULT_INJECTION: forcing a failure. [ 1033.630289][T13550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.674296][T13514] bridge_slave_0: entered promiscuous mode [ 1033.725775][T13514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.742833][T13514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.758624][T13550] CPU: 0 UID: 0 PID: 13550 Comm: syz.0.1112 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1033.769513][T13550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1033.770082][T13514] bridge_slave_1: entered allmulticast mode [ 1033.779649][T13550] Call Trace: [ 1033.779666][T13550] [ 1033.779681][T13550] dump_stack_lvl+0x241/0x360 [ 1033.779741][T13550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.801868][T13550] ? __pfx__printk+0x10/0x10 [ 1033.806494][T13550] ? __pfx_lock_release+0x10/0x10 [ 1033.809917][T13514] bridge_slave_1: entered promiscuous mode [ 1033.811548][T13550] ? kstrtouint_from_user+0x128/0x190 [ 1033.811606][T13550] should_fail_ex+0x3b0/0x4e0 [ 1033.827430][T13550] _copy_from_user+0x2f/0xe0 [ 1033.832039][T13550] copy_clone_args_from_user+0x1ca/0x840 [ 1033.837692][T13550] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1033.843613][T13550] ? ksys_write+0x23e/0x2c0 [ 1033.848131][T13550] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1033.854302][T13550] ? vfs_write+0x7c4/0xc90 [ 1033.858746][T13550] __se_sys_clone3+0xe5/0x350 [ 1033.863452][T13550] ? __pfx___se_sys_clone3+0x10/0x10 [ 1033.868791][T13550] ? do_syscall_64+0x100/0x230 [ 1033.873581][T13550] ? do_syscall_64+0xb6/0x230 [ 1033.878277][T13550] do_syscall_64+0xf3/0x230 [ 1033.882801][T13550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.888718][T13550] RIP: 0033:0x7f4d949773b9 [ 1033.893144][T13550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.912776][T13550] RSP: 002b:00007f4d95777f18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1033.921214][T13550] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4d949773b9 [ 1033.929201][T13550] RDX: 00007f4d95777f30 RSI: 0000000000000058 RDI: 00007f4d95777f30 [ 1033.937190][T13550] RBP: 00007f4d957780a0 R08: 0000000000000000 R09: 0000000000000058 [ 1033.945165][T13550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.953234][T13550] R13: 000000000000000b R14: 00007f4d94b05f80 R15: 00007ffe32c05a28 [ 1033.961238][T13550] [ 1033.998390][ T5230] Bluetooth: hci3: command tx timeout [ 1034.230736][T13556] loop3: detected capacity change from 0 to 128 [ 1034.264247][T13514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.315265][T13562] loop0: detected capacity change from 0 to 128 [ 1034.316258][T13556] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1034.332046][T13514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.601768][T13564] serio: Serial port ptm1 [ 1034.612426][T13566] loop5: detected capacity change from 0 to 1024 [ 1034.620769][T13566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1034.630438][T13556] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.955881][T13514] team0: Port device team_slave_0 added [ 1034.966200][T13566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.035796][T13569] netlink: 'syz.0.1115': attribute type 4 has an invalid length. [ 1035.198695][T13514] team0: Port device team_slave_1 added [ 1035.225913][T13577] netlink: 'syz.0.1115': attribute type 4 has an invalid length. [ 1035.244269][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1117'. [ 1035.788109][T13253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.863438][T13583] loop5: detected capacity change from 0 to 512 [ 1035.882683][T13583] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1035.885792][T13124] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1035.923399][T13514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.942591][T13583] EXT4-fs (loop5): 1 truncate cleaned up [ 1035.965945][T13514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.004602][T13583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.085799][ T5230] Bluetooth: hci3: command tx timeout [ 1036.109562][T13514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.128232][T13514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.135530][T13514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.259700][T13514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.464460][ T29] audit: type=1326 audit(1722538599.565:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e369773b9 code=0x0 [ 1036.562362][T13596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.599952][T13596] loop4: detected capacity change from 0 to 8 [ 1037.181511][T13599] fuse: Bad value for 'fd' [ 1037.211166][T13514] hsr_slave_0: entered promiscuous mode [ 1037.228245][T13514] hsr_slave_1: entered promiscuous mode [ 1037.236720][T13599] loop2: detected capacity change from 0 to 64 [ 1037.246557][T13514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1037.274624][T13514] Cannot create hsr debugfs directory [ 1038.015805][ T1571] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1038.120491][T13583] vlan2: entered promiscuous mode [ 1038.167548][T13583] bond0: entered promiscuous mode [ 1038.186527][T13583] bond_slave_0: entered promiscuous mode [ 1038.198892][ T5230] Bluetooth: hci3: command tx timeout [ 1038.225068][T13583] bond_slave_1: entered promiscuous mode [ 1038.260399][ T1571] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1038.312241][ T1571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.375040][ T1571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.426606][T13583] team0: Port device vlan2 added [ 1038.441914][ T1571] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1038.488993][ T1571] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1038.515699][ T1571] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1038.550002][ T1571] usb 5-1: Manufacturer: syz [ 1038.567292][ T1571] usb 5-1: config 0 descriptor?? [ 1038.724906][T13591] loop0: detected capacity change from 0 to 32768 [ 1038.941408][T13591] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1038.941981][T13253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.986536][T13514] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.043158][ T1571] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 1039.077112][ T1571] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 1039.110176][T13600] loop3: detected capacity change from 0 to 32768 [ 1039.118850][ T1571] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1039.133197][T13591] XFS (loop0): Ending clean mount [ 1039.165385][T13591] XFS (loop0): Quotacheck needed: Please wait. [ 1039.211975][T13514] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.298450][T13591] XFS (loop0): Quotacheck: Done. [ 1039.439959][ T5230] Bluetooth: hci4: Malformed Event: 0x13 [ 1039.548181][ T1571] usb 5-1: USB disconnect, device number 8 [ 1039.564825][T13122] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1039.706275][T13624] hub 9-0:1.0: USB hub found [ 1039.717569][T13624] hub 9-0:1.0: 8 ports detected [ 1040.512246][T13514] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.869519][T13514] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.066734][T13636] loop4: detected capacity change from 0 to 1024 [ 1041.091877][T13636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1041.182148][T13636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.194133][T13639] loop2: detected capacity change from 0 to 1024 [ 1041.244740][T13639] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1041.312380][T13639] JBD2: no valid journal superblock found [ 1041.352642][T13639] EXT4-fs (loop2): Could not load journal inode [ 1041.392678][T13514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1041.404151][T13514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1041.416833][T13514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1041.462043][T13639] tmpfs: Unknown parameter 'nr_indes' [ 1041.501904][T13514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1041.507723][ T5230] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 1041.653671][T13149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.864602][T13649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1133'. [ 1042.135429][T13514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.263705][T13514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.279486][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.286837][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.386259][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.393457][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.417167][T13657] fuse: Unknown parameter '0xffffffffffffffff' [ 1042.446856][T13657] loop2: detected capacity change from 0 to 64 [ 1042.777860][T13656] tipc: Started in network mode [ 1042.782877][T13656] tipc: Node identity 76f6b35fcbd7, cluster identity 4711 [ 1042.897147][T13656] tipc: Enabled bearer , priority 0 [ 1044.042212][T13668] loop5: detected capacity change from 0 to 1024 [ 1044.057689][ T8329] tipc: Node number set to 3173102431 [ 1044.135040][T13668] ext4: Unknown parameter 'hash' [ 1044.151591][T13674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1138'. [ 1044.244495][T13656] loop5: detected capacity change from 0 to 512 [ 1044.284373][T13656] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1044.417345][T13656] EXT4-fs (loop5): 1 truncate cleaned up [ 1044.484417][T13656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.527646][T13514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.573531][T13680] loop2: detected capacity change from 0 to 1024 [ 1044.696520][T13680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.803651][T13514] veth0_vlan: entered promiscuous mode [ 1044.891995][T13514] veth1_vlan: entered promiscuous mode [ 1045.049599][ C1] eth0: bad gso: type: 1, size: 1408 [ 1045.080066][ C1] vcan0: j1939_tp_txtimer: 0xffff888068d6b000: tx aborted with unknown reason: -2 [ 1045.089630][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888068d69c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1045.109086][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888068d6b000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1045.191704][T13682] loop3: detected capacity change from 0 to 512 [ 1045.218529][T12226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.269601][T13514] veth0_macvtap: entered promiscuous mode [ 1045.425198][T13655] tipc: Disabling bearer [ 1045.532956][T13514] veth1_macvtap: entered promiscuous mode [ 1045.576204][ T5230] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1045.588961][ T5230] Bluetooth: hci4: Injecting HCI hardware error event [ 1045.599140][ T8251] Bluetooth: hci4: hardware error 0x00 [ 1045.687439][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.744645][T13693] loop3: detected capacity change from 0 to 1024 [ 1045.760694][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.793480][T13693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1045.823394][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.854732][T13693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.868097][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.914639][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.947195][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.999944][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.059364][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.083185][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.112920][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.155776][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.175754][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.283785][T13253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.287825][T13124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.325717][T13514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.416896][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.455545][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.487894][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.503288][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.531337][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.555798][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.574339][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.612158][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.632016][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.649011][ T5230] Bluetooth: hci5: Malformed Event: 0x13 [ 1046.655743][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.665862][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.676564][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.703096][T13514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.714841][T13717] fuse: Unknown parameter '0xffffffffffffffff' [ 1046.736834][T13720] loop3: detected capacity change from 0 to 256 [ 1046.752191][T13514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.784384][T13514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.805555][T13514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.814436][T13514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.826162][T13717] loop2: detected capacity change from 0 to 64 [ 1046.893201][T13720] vfat: Unknown parameter 'W cZqHO1 '64 ' [ 1046.956203][ T5289] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1047.387780][ T5289] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1047.399880][ T5289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.415013][ T5289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.425532][ T5289] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1047.452009][ T5289] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1047.466662][ T5289] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1047.499269][ T5289] usb 6-1: Manufacturer: syz [ 1047.656255][ T8251] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1047.871978][ T5289] usb 6-1: config 0 descriptor?? [ 1048.077770][T13727] loop3: detected capacity change from 0 to 2048 [ 1048.085280][T13727] udf: Unknown parameter 'nov' [ 1048.197267][T13731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1151'. [ 1048.208961][T13730] loop0: detected capacity change from 0 to 1024 [ 1048.520797][ T5289] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 1048.528370][ T5526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.544528][ T5289] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 1048.553605][ T5526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.583736][ T5289] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1050.335335][T13730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.656132][T11660] usb 6-1: USB disconnect, device number 8 [ 1050.681416][ T5504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.702805][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1155'. [ 1050.754691][ T5504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.828317][T13122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.179298][T13749] serio: Serial port ptm0 [ 1051.867677][T13755] fuse: Bad value for 'fd' [ 1051.966990][T13758] loop0: detected capacity change from 0 to 1024 [ 1051.993340][T13755] loop2: detected capacity change from 0 to 1024 [ 1052.003126][T13758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1052.079792][T13758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.117162][ T5526] hfsplus: b-tree write err: -5, ino 4 [ 1052.262897][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 1052.300431][ C1] vcan0: j1939_tp_txtimer: 0xffff8880240e4400: tx aborted with unknown reason: -2 [ 1052.310567][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880240e6400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1052.330138][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880240e4400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1052.396939][T13769] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1052.403886][T13776] fuse: Unknown parameter '0xffffffffffffffff' [ 1052.416821][T13776] loop5: detected capacity change from 0 to 64 [ 1052.431171][T13769] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1052.483269][T13773] loop1: detected capacity change from 0 to 512 [ 1052.549681][T13122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.055480][T13791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1166'. [ 1054.094195][T13788] loop4: detected capacity change from 0 to 4096 [ 1054.156993][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.164203][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.182168][T13795] loop3: detected capacity change from 0 to 1024 [ 1054.232335][T13795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.285198][T13796] loop1: detected capacity change from 0 to 2048 [ 1054.290865][T13803] FAULT_INJECTION: forcing a failure. [ 1054.290865][T13803] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.295854][T13801] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1054.304674][T13803] CPU: 0 UID: 0 PID: 13803 Comm: syz.0.1169 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1054.326080][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1054.336141][T13803] Call Trace: [ 1054.339420][T13803] [ 1054.342349][T13803] dump_stack_lvl+0x241/0x360 [ 1054.347052][T13803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1054.352310][T13803] ? __pfx__printk+0x10/0x10 [ 1054.356972][T13803] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1054.362981][T13803] ? __pfx___might_resched+0x10/0x10 [ 1054.368304][T13803] should_fail_ex+0x3b0/0x4e0 [ 1054.373029][T13803] should_failslab+0xac/0x100 [ 1054.377748][T13803] ? __alloc_skb+0x1c3/0x440 [ 1054.382372][T13803] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1054.388211][T13803] __alloc_skb+0x1c3/0x440 [ 1054.392664][T13803] ? __pfx___alloc_skb+0x10/0x10 [ 1054.397641][T13803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.403298][T13803] ? netlink_autobind+0x2b0/0x2f0 [ 1054.408355][T13803] netlink_sendmsg+0x638/0xcb0 [ 1054.413170][T13803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1054.418493][T13803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.424137][T13803] ? aa_sock_msg_perm+0x91/0x160 [ 1054.429109][T13803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.434767][T13803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.440507][T13803] ? security_socket_sendmsg+0x87/0xb0 [ 1054.446009][T13803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1054.451323][T13803] __sock_sendmsg+0x223/0x270 [ 1054.456040][T13803] ____sys_sendmsg+0x525/0x7d0 [ 1054.460827][T13803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.466524][T13803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1054.471868][T13803] __sys_sendmsg+0x2b0/0x3a0 [ 1054.476483][T13803] ? __pfx___sys_sendmsg+0x10/0x10 [ 1054.481606][T13803] ? vfs_write+0x7c4/0xc90 [ 1054.486084][T13803] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1054.492432][T13803] ? do_syscall_64+0x100/0x230 [ 1054.497305][T13803] ? do_syscall_64+0xb6/0x230 [ 1054.502006][T13803] do_syscall_64+0xf3/0x230 [ 1054.506534][T13803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.512446][T13803] RIP: 0033:0x7f4d949773b9 [ 1054.516870][T13803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.536483][T13803] RSP: 002b:00007f4d95778048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.544908][T13803] RAX: ffffffffffffffda RBX: 00007f4d94b05f80 RCX: 00007f4d949773b9 [ 1054.552887][T13803] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1054.560862][T13803] RBP: 00007f4d957780a0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.568840][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.576820][T13803] R13: 000000000000000b R14: 00007f4d94b05f80 R15: 00007ffe32c05a28 [ 1054.584833][T13803] [ 1054.599548][T13796] udf: Unknown parameter 'nov' [ 1054.617647][T13800] fuse: Unknown parameter '0xffffffffffffffff' [ 1054.681517][T13800] loop2: detected capacity change from 0 to 64 [ 1056.409496][T13810] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1165'. [ 1056.649699][T13124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.776252][T13806] loop5: detected capacity change from 0 to 2048 [ 1056.787337][T13806] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1056.861571][T13818] loop3: detected capacity change from 0 to 2048 [ 1056.896416][T13818] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1057.058836][ T29] audit: type=1800 audit(1722538620.215:482): pid=13820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1172" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 1057.084037][ T5288] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1057.094035][T13821] loop0: detected capacity change from 0 to 1024 [ 1057.186402][ T29] audit: type=1800 audit(1722538620.355:483): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1173" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 1057.194109][T13824] loop1: detected capacity change from 0 to 1024 [ 1057.266709][T13824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1057.316182][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 1057.333998][T13821] hfsplus: xattr searching failed [ 1057.415343][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1057.476335][T13824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.488559][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1057.503629][ T5288] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1057.594521][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.657188][ T5288] usb 5-1: config 0 descriptor?? [ 1057.864195][T13514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.033534][ T5288] usbhid 5-1:0.0: can't add hid device: -71 [ 1058.067765][ T5288] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1058.166403][ T5288] usb 5-1: USB disconnect, device number 9 [ 1058.217789][T13838] FAULT_INJECTION: forcing a failure. [ 1058.217789][T13838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.275901][T13838] CPU: 1 UID: 0 PID: 13838 Comm: syz.1.1179 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1058.286742][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1058.296814][T13838] Call Trace: [ 1058.300094][T13838] [ 1058.303026][T13838] dump_stack_lvl+0x241/0x360 [ 1058.307724][T13838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.312941][T13838] ? __pfx__printk+0x10/0x10 [ 1058.317566][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.323199][T13838] ? __pfx_lock_release+0x10/0x10 [ 1058.328246][T13838] should_fail_ex+0x3b0/0x4e0 [ 1058.332957][T13838] _copy_from_user+0x2f/0xe0 [ 1058.337650][T13838] userfaultfd_ioctl+0xc99/0x70a0 [ 1058.342725][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.348448][T13838] ? stack_trace_save+0x118/0x1d0 [ 1058.353486][T13838] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1058.358963][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.364621][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.370278][T13838] ? kasan_save_track+0x51/0x80 [ 1058.375154][T13838] ? kasan_save_track+0x3f/0x80 [ 1058.380008][T13838] ? kasan_save_free_info+0x40/0x50 [ 1058.385212][T13838] ? poison_slab_object+0xe0/0x150 [ 1058.390336][T13838] ? __kasan_slab_free+0x37/0x60 [ 1058.395286][T13838] ? kfree+0x149/0x360 [ 1058.399374][T13838] ? tomoyo_path_number_perm+0x68d/0x880 [ 1058.405046][T13838] ? security_file_ioctl+0x77/0xb0 [ 1058.410157][T13838] ? __se_sys_ioctl+0x47/0x170 [ 1058.414926][T13838] ? do_syscall_64+0xf3/0x230 [ 1058.419614][T13838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.425704][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.431337][T13838] ? do_vfs_ioctl+0xf0e/0x2e50 [ 1058.436121][T13838] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1058.441244][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.446887][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.452548][T13838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1058.458929][T13838] ? tomoyo_path_number_perm+0x208/0x880 [ 1058.464591][T13838] ? __pfx_lock_release+0x10/0x10 [ 1058.469637][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.475292][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.480923][T13838] ? kfree+0x149/0x360 [ 1058.485001][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.490633][T13838] ? tomoyo_path_number_perm+0x71a/0x880 [ 1058.496296][T13838] ? tomoyo_path_number_perm+0x208/0x880 [ 1058.501948][T13838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1058.508004][T13838] ? __fget_files+0x29/0x470 [ 1058.512608][T13838] ? __fget_files+0x3f6/0x470 [ 1058.517293][T13838] ? __fget_files+0x29/0x470 [ 1058.521896][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.527529][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.533163][T13838] ? security_file_ioctl+0x87/0xb0 [ 1058.538274][T13838] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1058.543741][T13838] __se_sys_ioctl+0xfe/0x170 [ 1058.548345][T13838] do_syscall_64+0xf3/0x230 [ 1058.552884][T13838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.558815][T13838] RIP: 0033:0x7efd759773b9 [ 1058.563236][T13838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.582870][T13838] RSP: 002b:00007efd767ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.591298][T13838] RAX: ffffffffffffffda RBX: 00007efd75b05f80 RCX: 00007efd759773b9 [ 1058.599278][T13838] RDX: 0000000020000080 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 1058.607249][T13838] RBP: 00007efd767ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1058.615251][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.623238][T13838] R13: 000000000000000b R14: 00007efd75b05f80 R15: 00007ffebdc60e68 [ 1058.631243][T13838] [ 1059.080456][ T35] tipc: Subscription rejected, illegal request [ 1059.200980][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 1059.247805][ C0] vcan0: j1939_tp_txtimer: 0xffff88806c496800: tx aborted with unknown reason: -2 [ 1059.261826][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c494400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1059.281000][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c496800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1059.437809][T13845] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1059.505861][T13845] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1059.591846][T13855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 1059.614733][T13848] loop4: detected capacity change from 0 to 512 [ 1059.649975][T13844] loop3: detected capacity change from 0 to 512 [ 1059.887161][T13844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.941666][ C1] eth0: bad gso: type: 1, size: 1408 [ 1060.451838][T13867] loop1: detected capacity change from 0 to 512 [ 1060.502835][T13867] EXT4-fs: Ignoring removed mblk_io_submit option [ 1060.524675][T13869] loop4: detected capacity change from 0 to 1024 [ 1060.533200][T13867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1060.918006][T13869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.975905][T13867] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1186: corrupted in-inode xattr: e_value out of bounds [ 1061.055975][T13867] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1186: couldn't read orphan inode 15 (err -117) [ 1061.071071][T13867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.120564][T13124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.330048][ T29] audit: type=1800 audit(1722538624.485:484): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1186" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 1061.413139][T13149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.553592][T13885] loop0: detected capacity change from 0 to 4096 [ 1061.573902][T13885] ntfs3: loop0: Primary boot: start of MFT 0x4 (0xff) is out of volume 0x5. [ 1061.636215][T13885] ntfs3: loop0: try to read out of volume at offset 0x1ffe00 [ 1061.778945][T13890] loop4: detected capacity change from 0 to 1024 [ 1061.798438][T13890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1061.844439][T13890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.106905][T13902] loop0: detected capacity change from 0 to 128 [ 1062.138370][T13902] msdos: Bad value for 'time_offset' [ 1062.275047][T13514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.286794][T13149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.328869][T13876] loop5: detected capacity change from 0 to 32768 [ 1062.414803][T13876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1187 (13876) [ 1062.475539][T13902] loop0: detected capacity change from 0 to 4096 [ 1062.485818][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1197'. [ 1062.534232][ C1] vcan0: j1939_tp_txtimer: 0xffff88802f010400: tx aborted with unknown reason: -2 [ 1062.543873][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802cec5800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1062.563634][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f010400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1062.619866][T13906] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1062.622911][T13876] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1062.639524][T13906] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1062.692284][T13912] loop3: detected capacity change from 0 to 512 [ 1062.707618][T13876] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 1062.743089][T13876] BTRFS info (device loop5): using free-space-tree [ 1062.782849][T13914] loop4: detected capacity change from 0 to 2048 [ 1063.022994][T13914] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1063.138708][ T5288] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1063.261554][ T29] audit: type=1800 audit(1722538626.425:485): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1199" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 1063.365580][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 1063.388375][ T5288] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 1063.414782][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.466176][ T5288] usb 3-1: config 0 descriptor?? [ 1063.473256][T13940] loop3: detected capacity change from 0 to 1024 [ 1063.514448][ T5288] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 1063.516724][T13940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.728481][ C1] eth0: bad gso: type: 1, size: 1408 [ 1063.930359][T13124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.965147][T13947] loop1: detected capacity change from 0 to 47 [ 1064.080573][T13947] bond0: entered promiscuous mode [ 1064.121806][T13947] bond_slave_0: entered promiscuous mode [ 1064.149088][T13945] loop0: detected capacity change from 0 to 2048 [ 1064.156171][T13947] bond_slave_1: entered promiscuous mode [ 1064.264596][T13945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.414783][T13913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.473521][T13913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.529934][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 1064.578184][ T29] audit: type=1800 audit(1722538627.725:486): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1204" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1064.600096][T13913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.624101][T13913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.645309][ T29] audit: type=1800 audit(1722538627.805:487): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1204" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1064.707619][ T5288] gspca_sunplus: reg_w_riv err -71 [ 1064.747474][ T5288] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1064.787019][T13946] bond0: left promiscuous mode [ 1064.822461][T13946] bond_slave_0: left promiscuous mode [ 1064.838576][ T5288] usb 3-1: USB disconnect, device number 20 [ 1064.855953][T13946] bond_slave_1: left promiscuous mode [ 1064.989811][T13253] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1065.114074][ T5508] kworker/u8:25: attempt to access beyond end of device [ 1065.114074][ T5508] loop1: rw=1, sector=48, nr_sectors = 2 limit=47 [ 1065.164946][T13122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.182018][ T5508] Buffer I/O error on dev loop1, logical block 24, lost async page write [ 1065.221056][ T5508] kworker/u8:25: attempt to access beyond end of device [ 1065.221056][ T5508] loop1: rw=1, sector=50, nr_sectors = 2 limit=47 [ 1065.252946][T13958] loop3: detected capacity change from 0 to 2048 [ 1065.289221][ T5508] Buffer I/O error on dev loop1, logical block 25, lost async page write [ 1065.307049][T13958] udf: Unknown parameter 'nov' [ 1065.492250][T13960] loop0: detected capacity change from 0 to 512 [ 1065.521861][T13960] EXT4-fs: Ignoring removed mblk_io_submit option [ 1065.551592][T13960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1065.783476][T13960] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1210: corrupted in-inode xattr: e_value out of bounds [ 1067.481293][T13962] loop1: detected capacity change from 0 to 1024 [ 1067.488175][T13960] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1210: couldn't read orphan inode 15 (err -117) [ 1067.540893][T13962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1067.552386][T13960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.660542][T13962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.826389][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 1067.842411][ C0] vcan0: j1939_tp_txtimer: 0xffff88802a965800: tx aborted with unknown reason: -2 [ 1067.852036][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a966c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1067.871793][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a965800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 1067.906758][T13976] overlay: Unknown parameter '' [ 1067.948584][T13976] loop3: detected capacity change from 0 to 512 [ 1068.004026][ T29] audit: type=1800 audit(1722538631.165:488): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1210" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 1068.062187][T13514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.058112][ C1] eth0: bad gso: type: 1, size: 1408 [ 1071.680075][T14000] loop2: detected capacity change from 0 to 1024 [ 1071.725475][T14000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.889956][T14011] loop1: detected capacity change from 0 to 512 [ 1071.927489][T13122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.970936][T14011] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1071.995954][T14016] loop4: detected capacity change from 0 to 47 [ 1072.021144][T14011] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1072.035863][T14011] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1072.135473][T14016] bond0: entered promiscuous mode [ 1072.141735][T14016] bond_slave_0: entered promiscuous mode [ 1072.149381][T14016] bond_slave_1: entered promiscuous mode [ 1072.157159][T14011] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1072.157558][T14021] program syz.3.1221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.195075][T14011] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1222: bg 0: block 40: padding at end of block bitmap is not set [ 1072.200860][T14018] loop5: detected capacity change from 0 to 2048 [ 1072.230743][T12226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.247653][T14018] udf: Unknown parameter 'nov' [ 1072.301572][T14011] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1072.519719][ T1571] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1072.568003][T14011] EXT4-fs (loop1): 1 truncate cleaned up [ 1074.197396][T14014] bond0: left promiscuous mode [ 1074.241810][T14011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1074.368292][T14014] bond_slave_0: left promiscuous mode [ 1074.373952][T14014] bond_slave_1: left promiscuous mode [ 1074.723271][ T1571] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1074.732637][ T1571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.745723][ T1571] usb 1-1: Product: syz [ 1074.749306][T14027] loop2: detected capacity change from 0 to 2048 [ 1074.753371][ T1571] usb 1-1: Manufacturer: syz [ 1074.761681][ T1571] usb 1-1: SerialNumber: syz [ 1075.472648][ T1571] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1075.522958][T13514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.580811][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1227'. [ 1075.599333][T14027] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1075.630504][ T5526] kworker/u8:35: attempt to access beyond end of device [ 1075.630504][ T5526] loop4: rw=1, sector=48, nr_sectors = 2 limit=47 [ 1075.649140][ T5289] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1075.732800][ T5289] usb 1-1: ath9k_htc: USB layer deinitialized [ 1075.740291][ T5526] Buffer I/O error on dev loop4, logical block 24, lost async page write [ 1075.785769][ T5526] kworker/u8:35: attempt to access beyond end of device [ 1075.785769][ T5526] loop4: rw=1, sector=50, nr_sectors = 2 limit=47 [ 1075.825320][ T8] usb 1-1: USB disconnect, device number 23 [ 1075.855860][ T29] audit: type=1800 audit(1722538639.005:489): pid=14035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1226" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 1075.862263][ T5526] Buffer I/O error on dev loop4, logical block 25, lost async page write [ 1075.943851][T14037] loop1: detected capacity change from 0 to 1024 [ 1075.995919][T14037] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1076.005823][ T5289] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1076.075767][T14040] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1076.149989][T14037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.294152][ T5289] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1076.337710][ T5289] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1076.429448][ T5289] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1076.454055][ T5289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.777923][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 1079.864745][T14052] overlay: Unknown parameter '' [ 1079.931988][ T5289] usb 6-1: can't set config #27, error -71 [ 1079.945294][T13514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.007603][ T5289] usb 6-1: USB disconnect, device number 9 [ 1080.031066][T14053] loop4: detected capacity change from 0 to 512 [ 1080.742159][T14073] loop0: detected capacity change from 0 to 1024 [ 1080.743259][T14072] FAULT_INJECTION: forcing a failure. [ 1080.743259][T14072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.762073][T14072] CPU: 1 UID: 0 PID: 14072 Comm: syz.4.1239 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1080.772856][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1080.782918][T14072] Call Trace: [ 1080.786213][T14072] [ 1080.789159][T14072] dump_stack_lvl+0x241/0x360 [ 1080.793886][T14072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1080.795999][ T5289] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1080.799098][T14072] ? __pfx__printk+0x10/0x10 [ 1080.799149][T14072] ? snprintf+0xda/0x120 [ 1080.815511][T14072] should_fail_ex+0x3b0/0x4e0 [ 1080.820235][T14072] _copy_to_user+0x2f/0xb0 [ 1080.824679][T14072] simple_read_from_buffer+0xca/0x150 [ 1080.830072][T14072] proc_fail_nth_read+0x1e9/0x250 [ 1080.835117][T14072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1080.840785][T14072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.846466][T14072] ? rw_verify_area+0x520/0x6b0 [ 1080.851363][T14072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1080.856944][T14072] vfs_read+0x206/0xbc0 [ 1080.861131][T14072] ? __pfx_lock_release+0x10/0x10 [ 1080.866184][T14072] ? __pfx_vfs_read+0x10/0x10 [ 1080.870898][T14072] ? __fget_files+0x29/0x470 [ 1080.875512][T14072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.881145][T14072] ? __fget_files+0x3f6/0x470 [ 1080.885854][T14072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.891608][T14072] ksys_read+0x1a0/0x2c0 [ 1080.895884][T14072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.901569][T14072] ? __pfx_ksys_read+0x10/0x10 [ 1080.906351][T14072] ? do_syscall_64+0x100/0x230 [ 1080.911156][T14072] ? do_syscall_64+0xb6/0x230 [ 1080.915842][T11660] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1080.923410][T14072] do_syscall_64+0xf3/0x230 [ 1080.927963][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.933906][T14072] RIP: 0033:0x7f5e36975dfc [ 1080.938340][T14072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 1080.957339][T14073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.957952][T14072] RSP: 002b:00007f5e363ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1080.978389][T14072] RAX: ffffffffffffffda RBX: 00007f5e36b05f80 RCX: 00007f5e36975dfc [ 1080.986387][T14072] RDX: 000000000000000f RSI: 00007f5e363ff0b0 RDI: 0000000000000004 [ 1080.994382][T14072] RBP: 00007f5e363ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.002379][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.005949][ T5289] usb 6-1: Using ep0 maxpacket: 8 [ 1081.010347][T14072] R13: 000000000000000b R14: 00007f5e36b05f80 R15: 00007ffc33d71368 [ 1081.010401][T14072] [ 1081.033864][ T5289] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1081.048140][ T5289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1081.058273][ T5289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1081.078710][ T5289] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1081.103144][ T5289] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1081.117494][T11660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.131481][ T5289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.140182][T11660] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1081.153438][T11660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.178103][ C1] eth0: bad gso: type: 1, size: 1408 [ 1081.240140][T11660] usb 2-1: config 0 descriptor?? [ 1081.330809][T13122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.388069][ T5289] usb 6-1: GET_CAPABILITIES returned 0 [ 1081.426941][ T5289] usbtmc 6-1:16.0: can't read capabilities [ 1081.471855][T14082] loop4: detected capacity change from 0 to 47 [ 1081.537367][T14081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 1081.887074][T11660] ath6kl: Unsupported hardware version: 0x0 [ 1082.804122][T11660] ath6kl: Failed to init ath6kl core: -22 [ 1082.812724][T14082] bond0: entered promiscuous mode [ 1082.816578][T11660] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1082.833903][T14089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.860186][T14082] bond_slave_0: entered promiscuous mode [ 1082.877755][ T1847] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1082.894353][T14089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.921441][T14082] bond_slave_1: entered promiscuous mode [ 1083.093413][ T1847] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1083.106239][ T1847] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1083.117237][ T1847] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1083.126607][ T1847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.178767][T14081] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1083.193301][ T1847] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1083.195953][T11660] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1083.280173][ T5289] usb 2-1: USB disconnect, device number 19 [ 1083.639692][T14080] bond0: left promiscuous mode [ 1083.651897][T11660] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1083.795999][T11660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.802055][ T1847] usb 4-1: USB disconnect, device number 17 [ 1083.810161][T14080] bond_slave_0: left promiscuous mode [ 1083.937330][ T46] usb 6-1: USB disconnect, device number 10 [ 1083.947813][T11660] usb 1-1: Product: syz [ 1083.952059][T11660] usb 1-1: Manufacturer: syz [ 1083.981601][T14080] bond_slave_1: left promiscuous mode [ 1084.035745][T11660] usb 1-1: SerialNumber: syz [ 1084.061545][T11660] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1084.126124][ T5289] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1084.226097][T14099] fuse: Unknown parameter '0xffffffffffffffff' [ 1084.288609][T14099] loop5: detected capacity change from 0 to 64 [ 1084.296963][ T5521] kworker/u8:31: attempt to access beyond end of device [ 1084.296963][ T5521] loop4: rw=1, sector=48, nr_sectors = 2 limit=47 [ 1124.193467][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1189.357518][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1189.364517][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14093/1:b..l P2546/1:b..l [ 1189.374898][ C0] rcu: (detected by 0, t=10502 jiffies, g=110677, q=627 ncpus=2) [ 1189.382760][ C0] task:kworker/u8:11 state:R running task stack:20528 pid:2546 tgid:2546 ppid:2 flags:0x00004000 [ 1189.397654][ C0] Workqueue: bat_events batadv_nc_worker [ 1189.403349][ C0] Call Trace: [ 1189.406655][ C0] [ 1189.409607][ C0] __schedule+0x1800/0x4a60 [ 1189.414144][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.419837][ C0] ? __pfx___schedule+0x10/0x10 [ 1189.424705][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.430367][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1189.436404][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 1189.441740][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 1189.446860][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1189.452593][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.458245][ C0] irqentry_exit+0x5e/0x90 [ 1189.462766][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1189.468335][ C0] RIP: 0010:batadv_nc_worker+0x1ee/0x610 [ 1189.473987][ C0] Code: e8 87 db 7a f6 48 8b 6d 00 48 85 ed 74 17 48 81 c5 38 fe ff ff 74 0e e8 b0 a1 13 f6 eb b8 e8 a9 a1 13 f6 eb 05 e8 a2 a1 13 f6 2d 97 35 00 89 c3 31 ff 89 c6 e8 d2 a5 13 f6 85 db 74 15 e8 e9 [ 1189.493629][ C0] RSP: 0018:ffffc900095c7b58 EFLAGS: 00000293 [ 1189.499740][ C0] RAX: ffffffff8b7fc4c7 RBX: ffff888020630ac0 RCX: ffff88802a1a0000 [ 1189.507723][ C0] RDX: 0000000000000000 RSI: ffffffff8c605ba0 RDI: ffffffff8c605b60 [ 1189.515717][ C0] RBP: 0000000000000000 R08: ffffffff8b7fc3e1 R09: 1ffffffff26e5300 [ 1189.523739][ C0] R10: dffffc0000000000 R11: fffffbfff26e5301 R12: ffff88806cb8ccc0 [ 1189.531768][ C0] R13: 00000000000000f4 R14: ffff888020630ac0 R15: dffffc0000000000 [ 1189.539768][ C0] ? batadv_nc_worker+0x101/0x610 [ 1189.544854][ C0] ? batadv_nc_worker+0x1e7/0x610 [ 1189.549902][ C0] ? batadv_nc_worker+0x1e7/0x610 [ 1189.554939][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1189.559896][ C0] ? process_scheduled_works+0x945/0x1830 [ 1189.565642][ C0] process_scheduled_works+0xa2e/0x1830 [ 1189.571262][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1189.577272][ C0] ? assign_work+0x364/0x3d0 [ 1189.581887][ C0] worker_thread+0x86d/0xd40 [ 1189.586607][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1189.591653][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1189.596783][ C0] kthread+0x2f2/0x390 [ 1189.600859][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1189.605992][ C0] ? __pfx_kthread+0x10/0x10 [ 1189.610612][ C0] ret_from_fork+0x4d/0x80 [ 1189.615062][ C0] ? __pfx_kthread+0x10/0x10 [ 1189.619657][ C0] ret_from_fork_asm+0x1a/0x30 [ 1189.624444][ C0] [ 1189.627459][ C0] task:syz-executor state:R running task stack:24656 pid:14093 tgid:14093 ppid:5214 flags:0x00004000 [ 1189.639376][ C0] Call Trace: [ 1189.642653][ C0] [ 1189.645582][ C0] __schedule+0x1800/0x4a60 [ 1189.650153][ C0] ? kernel_text_address+0x71/0xe0 [ 1189.655315][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.660964][ C0] ? __pfx___schedule+0x10/0x10 [ 1189.665844][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.671484][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1189.677495][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 1189.682796][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 1189.687924][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1189.693656][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1189.698712][ C0] irqentry_exit+0x5e/0x90 [ 1189.703137][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1189.709140][ C0] RIP: 0010:page_ext_put+0x16/0xc0 [ 1189.714276][ C0] Code: 0a ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb e8 f3 8d 8d ff 48 85 db 0f 84 93 00 00 00 75 83 af 09 89 c3 31 ff 89 c6 e8 1a 92 8d ff 85 db 74 10 e8 31 [ 1189.734006][ C0] RSP: 0018:ffffc9000cb97730 EFLAGS: 00000286 [ 1189.740087][ C0] RAX: ffffffff8205d87d RBX: ffff888018c2b250 RCX: ffff88802a110000 [ 1189.748059][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888018c2b250 [ 1189.756051][ C0] RBP: ffffc9000cb97830 R08: ffffffff8204285b R09: 1ffff1100318564a [ 1189.764115][ C0] R10: dffffc0000000000 R11: ffffed100318564b R12: 0000000000000001 [ 1189.772108][ C0] R13: 0000000000000001 R14: ffff888018c2b278 R15: ffff888018c2b2a0 [ 1189.780801][ C0] ? __set_page_owner+0x17b/0x800 [ 1189.785888][ C0] ? page_ext_put+0xd/0xc0 [ 1189.790380][ C0] __set_page_owner+0x3f0/0x800 [ 1189.795272][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1189.800664][ C0] ? do_raw_spin_trylock+0xc8/0x1f0 [ 1189.805919][ C0] post_alloc_hook+0x1f3/0x230 [ 1189.810720][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 1189.816315][ C0] ? __alloc_pages_noprof+0x166/0x6c0 [ 1189.821731][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.827388][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1189.833589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.839258][ C0] ? prepare_alloc_pages+0x369/0x5d0 [ 1189.844713][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 1189.850237][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1189.856108][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.861806][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.867482][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.873126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.878779][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1189.884300][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1189.890385][ C0] ? rcu_is_watching+0x15/0xb0 [ 1189.895176][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.900820][ C0] ? __vmalloc_node_range_noprof+0x5dd/0x1460 [ 1189.906985][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.912628][ C0] ? alloc_pages_noprof+0xef/0x170 [ 1189.917762][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 1189.923905][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1189.930378][ C0] vmalloc_user_noprof+0x74/0x80 [ 1189.935369][ C0] ? kcov_ioctl+0x59/0x640 [ 1189.939831][ C0] kcov_ioctl+0x59/0x640 [ 1189.944114][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.949851][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.955495][ C0] ? security_file_ioctl+0x87/0xb0 [ 1189.960872][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 1189.965752][ C0] __se_sys_ioctl+0xfe/0x170 [ 1189.970741][ C0] do_syscall_64+0xf3/0x230 [ 1189.975265][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.981177][ C0] RIP: 0033:0x7f981a376fbb [ 1189.985596][ C0] RSP: 002b:00007ffda3b7d610 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.994046][ C0] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f981a376fbb [ 1190.002038][ C0] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000e0 [ 1190.010206][ C0] RBP: 00007f981a5066d8 R08: 00000000000000da R09: 0000000000000000 [ 1190.018228][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.026212][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1190.034223][ C0] [ 1190.037255][ C0] rcu: rcu_preempt kthread starved for 8783 jiffies! g110677 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1190.048487][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1190.058474][ C0] rcu: RCU grace-period kthread stack dump: [ 1190.064367][ C0] task:rcu_preempt state:R running task stack:25232 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1190.076144][ C0] Call Trace: [ 1190.079425][ C0] [ 1190.082887][ C0] __schedule+0x1800/0x4a60 [ 1190.087431][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1190.093251][ C0] ? __pfx___schedule+0x10/0x10 [ 1190.098123][ C0] ? __pfx_lock_release+0x10/0x10 [ 1190.103160][ C0] ? __asan_memset+0x23/0x50 [ 1190.107763][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1190.113590][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1190.119940][ C0] ? schedule+0x90/0x320 [ 1190.124206][ C0] schedule+0x14b/0x320 [ 1190.128747][ C0] schedule_timeout+0x1be/0x310 [ 1190.133827][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1190.139241][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1190.144568][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1190.150236][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 1190.156173][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1190.161059][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1190.166377][ C0] ? rcu_gp_init+0x1256/0x1630 [ 1190.171274][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1190.176313][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 1190.182481][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1190.187908][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1190.194042][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1190.199701][ C0] ? finish_swait+0xd4/0x1e0 [ 1190.204340][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1190.208948][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1190.214332][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1190.220267][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1190.225930][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1190.231022][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1190.236252][ C0] kthread+0x2f2/0x390 [ 1190.240338][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1190.245553][ C0] ? __pfx_kthread+0x10/0x10 [ 1190.250253][ C0] ret_from_fork+0x4d/0x80 [ 1190.254691][ C0] ? __pfx_kthread+0x10/0x10 [ 1190.259320][ C0] ret_from_fork_asm+0x1a/0x30 [ 1190.264138][ C0] [ 1190.267159][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1190.273506][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1190.278734][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30