last executing test programs: 5m40.78621184s ago: executing program 4 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x27, 0x14, 0x0, &(0x7f00000002c0)="f8c348cc02cb29dcc8007f5b08009ccaa57b0fdf", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18001cffffffffff1900ee0000000000181100ca586178d14ee4515f257f581408498f82d4d7f84d0c6673fdd675ecbcee83d20ea860e257e0e1a2083c9d8dd111bc4dbb463c950add2c90008e04f8d4b4e769a1c421e9c02a371d1d0334139a4a76593c0822ef0a0b00cd0b933aec747e4f75762509bcfeb563acac3a511a9189af17a9e8fb489f60e3d300"/154, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x5608, 0x3) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(r9, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) setrlimit(0x8, 0x0) listen(r10, 0x8b) 5m38.583692002s ago: executing program 4 (id=174): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xfffffffc}]}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)={0x50, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0x5, 0x0, &(0x7f0000000240)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000180)={&(0x7f0000a93000/0x3000)=nil, 0x7fff, 0x2, 0x1}) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000002, 0xdf, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 5m37.252289049s ago: executing program 4 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc", 0x92}], 0x1}, 0x60040005) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) open(0x0, 0x591000, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f000000b2c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f00000005c0)="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", 0xd4d}, {0x0}], 0x3}}, {{&(0x7f00000016c0)=@isdn={0x22, 0x7f, 0x5, 0x8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)={0x20, r9, 0x1, 0x8070bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 5m35.449405893s ago: executing program 4 (id=182): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r2}, 0x18) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) 5m32.205496879s ago: executing program 4 (id=185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000080), 0x0, 0x0, 0x4000, &(0x7f0000000480)=ANY=[]) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$msr(r3, &(0x7f0000034000)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r5, 0x0, &(0x7f0000931000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x40000043, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_query]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3fb}, 0x94) 5m29.297026738s ago: executing program 4 (id=193): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23) write(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 5m28.627731157s ago: executing program 32 (id=193): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23) write(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 3m55.268795227s ago: executing program 1 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m52.264783546s ago: executing program 1 (id=384): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x3f}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000980)='2', 0x51, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) pwrite64(r2, &(0x7f0000000880)='u', 0x1, 0x83) lseek(r1, 0x5, 0x3) 3m50.705234685s ago: executing program 1 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x4, 0x7c}, [@nested={0xc, 0x117, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x4a, {"0f21c7b9800000c00f32f2466e0f30420f06660f380a49003e3e678b070fc731c422a19d1cc8dfb700280000450f01dff30fc770c9420f2023"}}], 0x80}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000"]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x6, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1b8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x17c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x15c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x64, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xc4, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x91, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca0407429934982873a3f054bcbf1e53f85fe7aee4ccd90229e6ba2b45bd165ebd7929c21abcdf0b8d47ff6a950009bf4b1ef96863b19aaa1c52a12b02f39c0816b2c6136341ed251c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b, 0x0, [0x0, 0x0, 0xfffffbfffffffbfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m49.593187501s ago: executing program 1 (id=394): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file1\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x4, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048884) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0x40) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001e005db7000000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4441, &(0x7f000000cd00)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='\t\x00\x00\x00 \x00\x00\x00\n\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) 3m47.611183256s ago: executing program 1 (id=400): socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0x3, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff, 0xee00]) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES16=r2], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64004801}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 3m45.665722992s ago: executing program 1 (id=403): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0x36) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r4, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r5], 0xc0}}, 0x0) inotify_init1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 3m43.374121593s ago: executing program 5 (id=195): unshare(0x6a040000) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x1000003, 0x30, r0, 0x0) unshare(0x10000400) r1 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 3m30.194255476s ago: executing program 33 (id=403): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0x36) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r4, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r5], 0xc0}}, 0x0) inotify_init1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m43.871747238s ago: executing program 6 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000020d700000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006d000000950000a24012a500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000064001280080001007369740058000280060008003300000006000e00ff00000008000100", @ANYRES32, @ANYBLOB="0500050040000000060008003a00000006000f0002000000060011004e24000014000b00fe8800e4ffffff000000000000000001060010000400000008001f0006"], 0x94}}, 0x4010) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, 0x0, 0x0]) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 2m42.14550108s ago: executing program 5 (id=195): unshare(0x6a040000) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x1000003, 0x30, r0, 0x0) unshare(0x10000400) r1 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 2m4.003668129s ago: executing program 6 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000020d700000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006d000000950000a24012a500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000064001280080001007369740058000280060008003300000006000e00ff00000008000100", @ANYRES32, @ANYBLOB="0500050040000000060008003a00000006000f0002000000060011004e24000014000b00fe8800e4ffffff000000000000000001060010000400000008001f0006"], 0x94}}, 0x4010) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, 0x0, 0x0]) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 1m59.056900422s ago: executing program 5 (id=195): unshare(0x6a040000) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x1000003, 0x30, r0, 0x0) unshare(0x10000400) r1 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 1m54.803229783s ago: executing program 2 (id=609): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x41, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x40, 0x9}) 1m53.368481885s ago: executing program 2 (id=613): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4093, 0xffd}, {&(0x7f0000000040)=""/51, 0x33}], 0x2}}], 0x1, 0x20, 0x0) write(r0, &(0x7f0000000100)="1400000016004f7fb3e4bf80a000080000000001", 0x14) 1m51.267166556s ago: executing program 2 (id=616): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0xad, {0x9, 0x21, 0x200, 0x2, 0x1, {0x22, 0xad}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x4, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xb, 0xe5, 0x3, 0x40}, 0xab, &(0x7f0000000080)={0x5, 0xf, 0xab, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x81, 0x7, 0x2}, @ptm_cap={0x3}, @generic={0x8f, 0x10, 0x8, "aa38770cbd4cf382e4d52ef9e9943ba04e897eb3edb1a7ac8032e569a4718e8ff87a5d61e30fbe90c565bf437cc1ec8d2d716376cd83d906b460d052b03c480b2e8cf71b12c546f0b3d76fd59c9db0e3834e2d32ad300522531852f07e758b8c8a4d564f190a3d054bf36dd51b095761072fed62b64b0d247e34f4479ce811a290ba721c7989404835a5469c"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x5, 0x4}]}, 0x5, [{0x99, &(0x7f0000000140)=@string={0x99, 0x3, "0accae19fb5a2f306e6821ac10d323d3721c5cd6f509cab253da9895f764f5b01497245bb86d6037e3b353b5b37b1d81e2bf9f166dc1f381a73d1de3c208e75e045910d60d62eb472f99f929b42d2b4df42b551a524b6b5b0838e569bf505b577cd9045e62fb44324658ef136e6aa97f545a6de66830e7bb62d89f8a86d33272601a2ec8e09dbf88ade0ff289dd4a9aab5277d9f3b0896"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x30, 0x28, {0x28, 0x6, "119d78f28e4f2e3e99ed270c2dbdd2835c3b787837f7b0282e663594bf0748439e9877ccfae1"}}, &(0x7f00000003c0)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000500)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x6, 0xd2, "5e1b29a4", "39814de0"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0xff, 0x6, 0x45}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x40, 0x6, 0x7e, "12990292588c867d3d87d75d55b20a7c5de8d9f1e94ea19c22a448ac80add036b20619988bb1f7ffe11e152508359b942af11f4ba5d0abb3d79bfa4766c79c973d1c9bd79d3281de0997d7929cc51bfdf37731cfe12273ece27de22ec9621a51e2cb4aa8c601a7d102ed29676b6b1caf6be9b0cbb1a771c928afbe793e4e"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x8, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0xef14}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x16}, &(0x7f0000000840)={0x40, 0xb, 0x2, "6ade"}, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2810"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0xa0}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x5}}) r1 = syz_usb_connect$cdc_ecm(0x3, 0x78, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0xf, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "bccca2"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x8, 0x4, 0x7}, [@obex={0x5, 0x24, 0x15, 0x8000}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x3f}, @acm={0x4, 0x24, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x0, 0x3, 0x9, 0xfff9, 0x10}, @dmm={0x7, 0x24, 0x14, 0xf, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x48, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0x9a, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xd, 0x6}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x300, 0xf8, 0x0, 0xf, 0x40, 0x7}, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}, 0x1, [{0xb6, &(0x7f0000000c00)=@string={0xb6, 0x3, "c8b559bb4c4fd2254bfc57b154dfe8149dc8872344184ef105f9d720209c1cfb110ffaf6ff580d6b862eeba4f0c63b57c252f3dd8e9bd4f73bb4664e5a0c06a68edbb47f6400810f8871923ff6613301107223446972aa72e1e647241cb765c8b23d969376942a5185ca70ec8cd1a65e5a194da355e420e7554e7818f2b662321d2da54ff6d94888fee4a867edf963e37bf1bd68321678329e5f5557dfe4ed910e0e1ecbb9e5480b1557b4a4a050d800735910f9"}}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, r2, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000e80)={0x14, &(0x7f0000000d00)={0x40, 0x7, 0x102, {0x102, 0x22, "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"}}, &(0x7f0000000e40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000fc0)={0x1c, &(0x7f0000000ec0)={0x40, 0x16, 0x46, "052fd3ab27ef0d0b1dceeeea480454f70d5acae8640214a86dbbf944809ae30ada985be6afea0c1ea1c296bcd3ebecb3d80a97e0fda8bd68ccb266a662831850d53b5b44d459"}, &(0x7f0000000f40)={0x0, 0xa, 0x1}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0xfe}}) syz_usb_disconnect(r1) r3 = socket(0x21, 0x1, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r3) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x9c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f00000011c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x40, 0x8, 0xc}, {0x9, 0x5, 0x5, 0x2, 0x8, 0x4, 0x8, 0x4}, {0x9, 0x5, 0x9, 0x3, 0x3ff, 0x74, 0xb8, 0xa9}}}}}}]}}, 0x0) syz_usb_ep_write(r5, 0x1, 0xb0, &(0x7f0000001200)="a68969198f7944e663ddaba4bd17d06081a2e317b9967cfa8136bd1969c8966cff85c0524d13000a453894fff3ab78edcedcd88555b5258885815c5d32bd2a59da97bd62443d163a88c2d7a18e1a55cda48c5fe04bd62e76e1c54467147072f1981b15570530925bd990464f118352281f99a0eced6b1add5726c1c71a09e3b9c003d8e3e38a138819cde396b173e890f88ce4ba5131deda8213c00bee1eeff335c6e1d9b3a487c8525d4e160c95cfc4") r6 = gettid() syz_usb_control_io$cdc_ecm(r1, &(0x7f00000013c0)={0x14, &(0x7f00000012c0)={0x20, 0xf, 0xb1, {0xb1, 0x2, "63ae3ba948fa4d10fbe84bdc9476262759a1f7a8383f118dc13a99c4181ae8876d7ff9cc9764074b37a9a252d731c49926b5640cf8228debafbfd2afe4f21cf19e706a58376b0ee6b6501335bc74bae6ed35916e361a425ddd7bad309c96ed76470f4008368110674ddb06382b526b99ff9ee2fbb7702f94ef289059e2e26a54e43d281af3506b89d6ad75ac125c53a084f65f97cc57226ee017ffd3b97525ef32a51e906b3bd034a8f4127cfaca9c"}}, &(0x7f0000001380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000014c0)={0x1c, &(0x7f0000001400)={0x40, 0x5, 0x2c, "e2ca4f8c0353d27aa346811f0ea57d28280c49e71f7374e56cfc13430023a367818427fe0723ea86899f4074"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x7}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000001500)="52feb82152df24e67c65d0805f621e6c61a5a032c8a833e79d4f49ac8b8423a8d25b7b445a884da95e3b10f410e4062b1c41c32d2166388344c92a29e28878bea6b81601ae301fe5fbce28bc122e9e3a0cecab9c20e9ce19c3fb71e498caa005c5980d83", 0x64, r2}, 0x68) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000001600)) capset(&(0x7f0000001640)={0x20071026, r6}, &(0x7f0000001680)={0x4, 0x5, 0x4e64, 0xfffffff7, 0x4, 0x9}) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x894a0811}, 0xc, &(0x7f0000001880)={&(0x7f0000001700)={0x144, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x82f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x389}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3aab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc9e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc508}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000001900)) readv(r3, &(0x7f0000001e00)=[{&(0x7f0000001980)=""/146, 0x92}, {&(0x7f0000001a40)=""/236, 0xec}, {&(0x7f0000001b40)=""/55, 0x37}, {&(0x7f0000001b80)=""/118, 0x76}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/44, 0x2c}, {&(0x7f0000001d00)=""/131, 0x83}, {&(0x7f0000001dc0)=""/16, 0x10}], 0x8) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000002040)={&(0x7f0000001e80), 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x138, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x471}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x2008010}, 0x4000010) r9 = add_key$user(&(0x7f0000002080), &(0x7f00000020c0)={'syz', 0x3}, &(0x7f0000002100)="47a89d3d799190c72bcd18c9e517ab05a85a722ee05df90b1db2eb4b9d02ee6f8f61a2d32ab23fad2e01f17b6699cb01cbf0503d4f7ae9f031521b043c53a7b0531e095fbc20c43a4b1da52880ae1af9c80c7e29b1816f3d11ca2214278ed967dbbb3714dff8a2e1e5d30c828ee1ed6b346ab10a30c999caec6a81852561de9d4e6fb7b73bd1b435865e7625ef", 0x8d, 0xfffffffffffffffa) r10 = add_key$user(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x3}, &(0x7f0000002240)="efc96ac8471323bf293ff57b0c484a03718641ad2ebaa1f51e4e140d9ca9d6aea01629041d08ef1e953d2f9db6fceb7a413f9570bc10bd0762f7fca5a1746ac26c924204de8cbe5aa1a8d386c755e64d92cb80d0eeef540b785f0bd6df2a4d27c0ce92f6144b786982610c8555c6310262c43422884d4333ce097cf7396f3b893c6f38185fc656b054a43be2819adca5ae2c60af707ebf139cadc3be36b9b9bbb0d4739fc281b1f1a8", 0xa9, 0xfffffffffffffff8) r11 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x1}, &(0x7f0000002380)="235060178537863118b12d6b08671c8e0149c77f1fea567c565c286ef178eb543b1c07ef47769220f98bdc4a6fac4b76ac79b61dc5215a74048f55daef3792c0c8d899874800c495a1af8dd47c21ba7cdf97461b89faf5d2c41d325dde79b7b4fbacfb9ed043c6d6f0fd803578aea50d4825f2039701ad2311d3670b25a7136db53e3baa3273bd2644eeebd115a0b8e78a74c366afc92460e5336e5931fcb024c2cdeee360d4cc0fba124a90390341981b75c4009e3a9e2587", 0xb9, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000002440)={r9, r10, r11}, &(0x7f0000002480)=""/174, 0xae, &(0x7f0000002640)={&(0x7f0000002540)={'cryptd(crct10dif-generic)\x00'}, &(0x7f0000002580)="cd928b5846655eb5b7ee39bdbfd75bf19678dde23361056b183c32e4c027e1eeb271d51603498c685121b885d0fdd101b4ec8a9210f2a0dd6f8906d1fee6b22f6e1302d1d4881f87418f0edc92ceceae78c8709a50f047572718bf2ec8653d2b4d5a0b4bb2e6c7a9dffb54cf686b3ae7c5d3c2eea1098efe57615819e8143005e964aa5d27526f098a490c9101b21fc07d1a280c88d7bf30529d0ee8a9814ec599651f566827b48e4befed30e976", 0xae}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000002680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc08d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x80, 0x1d, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x6ba}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x9f, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x2, 0x80}}]}}}]}}]}}, &(0x7f0000002780)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x110, 0x9, 0x5, 0xfa, 0x8, 0x31}, 0x1d, &(0x7f0000002700)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x400, 0xf0f, 0x3, [0xc00f, 0x0, 0x807f30]}]}, 0x1, [{0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x409}}]}) r12 = request_key(&(0x7f0000002880)='rxrpc\x00', &(0x7f00000028c0)={'syz', 0x3}, &(0x7f0000002900)='\x00', 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x0}, &(0x7f0000002840)={0x1, 0x0, @auto=[0x10, 0x2a, 0x30, 0x1e]}, 0xc, r12) 1m47.628339568s ago: executing program 2 (id=622): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$eJzs3EtvG0UcAPD/bl59hZhSXm2hhoKIeCRNWqAHJB4CqRckJDiUY0jTqjRtUBMkWkU0IFSOqJ+gcETiE3CCCwIkJBBXuCOkCuXS0gNatLY3dRI7OGkc0+T3k1zPeGZ3ZnY969mZbgLYssr5P0nEroj4LSIGqtHFGcrVtxvzs+N/z8+OJ5Flb/6VVPJdn58dL7IW2+2sRQbTiPSTJPY1KHf6wsUzY5OTE+dr8eGZs+8NT1+4+Mzps2OnJk5NnBs9evTI4ZHnnxt9dl3a2Z/Xde+HU/sfPPb2ldfHj19554ev8vruqqVfn5/tXbxFqQjsjYhs6f5eaqHMcpQXH8s6j6+u+v97/XXhpLuDFWFVuiIiP109lf4/EF1x6+QNxGsfR6QdrR/QPlmWZX3LPs2vCtvzwFwGbGJJdLoGQGcUv/j5fXzx2uAhSEdde7l6A5S3+0btVU3prtz5lEvVe6P+NpVfjgMRcfPq8bmbV2PJfAoAQDt8k49/nm40/kvjvrp8d9XWhkoRcXdE7I6IeyJiT0TcG1HJe39EPNBqwUnjpZHl459ftq+xaS3Jx38v1Na2Fo//Fua9S121WH+l/T3JydOTE4dqx2Qwevry+MgKZXz76q+fNUsrR0Q+9iteefnFWLBWjz+7l0zQnRibGbudNte7diBib3ej9icLKwFJbFvz/vNjdvrJL/c3S//v9q9gHdaZsi8inqie/7lY0v5CsvL65PC2mJw4NFx8K5b78efLbzQr/7bavw6ufRSxo+H3f6H9paR+vXZ61UV0X/7906b3NGv9/vcmb1XCxaLtB2MzM+dHInqTueWfj97atogX+fP2Dx5s3P93R/zzeW27fRGRf4kfioiHIyp3bXndH4mIRyPi4AoH4PtXHns3f/9pTe1vr7z9J1Z1/usDPbH0k0aBrjPffd2s/NbO/5FKaLD2SSvXv2rhxXWreQXXetwAAADgTpJW/g98kkRU50121aXtiR3p5NT0zFMnp94/d6KaVoqetJjpGqibDx2pzQ0X8dEl8cOVeeMsy7LtlfjQ+NRku9bUgdbsrPb/dGjhWpCmQ0PVtD+6Fud9sSM1BNpqVetozZ5oA+5IrfV/HR82o4X+v/xJwILOD5tUtf93DXS6HsDG8/daYOtq1P8vRdzoQFWADeb3H7Yu/R+2rtX2/1Kb6gFsPL//sCUtfiS+N1p4nL+lwO5j67OfzR/o6nQ1+ta2eaQdP3TLA0mDpLRB5rTlPfeuS8VipTx9EdHqDi/FRh3MTl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1se/AQAA//++KOKq") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x9, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0x24, 0x0) r0 = getgid() r1 = getegid() stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r4 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r4], 0xfc, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f00000002c0)={0x50, 0x0, 0x800, {0x7, 0x29, 0x0, 0x400000, 0x8000, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="aef2274aaa3571a2f64d4b425e82cc530437d5e8ec036e82837dbc2aa4b8afe833a341bedccccb72d33cc1a3d7063e57d74b579be6be9808e4eec720496335e176424ca94919153fa9d1b8a824a8aaa7f695ed92f9a730b42fed46b1f0be01eefe4dccc11cc7342d03eb81b955a7775db5037357909b5e362a256050cb03b2631d0aeb07d033f4710181432a5af194a814a792b8af68725b453164fdb89f67b1d249d02830bf40bdc17ca9da26f8cd992a34a3cfd7d0794845817b7df920216c1594773aed966964f74288164091dd3d375bbc5cd7e7922c3ba5a45975c20d96383ea037f18b478534d2c3617aafc13bf6190754b1575ad930894969b70771bed2f3b543f00487c3c42512845266b9ca8db1cfae189fda8103e464c55e367c0f8094a76547b7e4e64fc2bf533f3c2b22b11df6497a5f8f08bdc02d8f3d3f57c4330b909f16ee8d669fb473ca1d63cf0dd8c46efa31a3158f35d4011acf331aa79c4c381cb67f702e8eccabd2fe716af9bc2db4096568c0f663f4db02e3895dd12b341762a4d58df7f884d713418354e7f1f918c3760f197c472cd45aae7a6e020f5beb480910b0ebaf6d5056fad8d12abb5527abd7fe2d054dbc98a8062816a885b4f4787668e38609afd1849413881d166004c85b34e0044fadefb5f07d9257bfb42dc247a829b42ad6310cc244f79938ec2148705150c1523b3f4d60c65e280a183a2cceaf2fac6f83baa33d6530b8ad96496a1d250d6cf15f6ebb459c7795b5739a8135a8d83dd29147b3c98e8da3fd45a77b3876f5e6d1bd919c2abdda94f19d68eedef09a8f60f046067a3d63f245df430259ddbee316d721894b0df57e00ff0f192fa3450cdd81175f9d9b861fdf723524202402f3ac4af74f8aae5a9d9dfdeb91d530db93322498b20821e1341c83d0fe213cde72e5c0a420767765cb293da262dd8b4fc34d00d5f80258226498fcede4f039c5e0d9f61e4014fbc6cf78881743720c2b31f1ce76ed507e85cbabf80b8514d49e0eac69009c874777a5280167d5fb50a5e28692d74aa68426a7fe516ddd2ab9046fe58ed3eaac2af6cae309145207b00f123dfb1665462d60885dade812fd47f8742eeb00b3c45fd1464c24d13601878904ae7a75af4c22daaff072cf7168c8d513e277ebbd75d724c5e29d7c99077ffb2ab9951f0c4bebf8d1adf9f21a4539c9ca18a959fd0eebfc36e6fb223306e0a08209295c73f005d7832fd0ad27b9092448f14146759619aa07b387d77ddc050b51b56c9e368bb6d00bba934765f0643998535fb4d6f260e51440ac23e7ecaea37d26598ac28445853d8f9838d305f31b84984e1ba42b1d00bfb1d119a363606853ac84c81db27ef582fc2c917cab33028f26ccd05977ad50b100c35bb05aa1cb9792837d421fdc2e689f40c5dee415cded0f5aec85c415873502e99a76eddaa5b3dc35e4cec27d54b2200ab4eb5035b65ccfd6a31d8d5cd6e63d51265f7ae0ce0224ff6f95c74c7ce8a650ed2c6ae28bd8b29d2f662cdf7999641e341719927cffea1483ad026c705db203e5edea57414e66f8e37fd3aa1303eae825c0ca74e5384dd24c97623fa3a9cc520400000000000077e4a10f689a8cf6c951e3cf9147f7da39f5100323bda84c5b020ff3d2ebdd0f4709c8f3664ac2a9238226568bf3998999662e1456532af383af7cc4aa92b95547e3d6cf79c3853c9eb268764b00f805afaeb840b23de031e7f539c86654159da3d453cb0d1c9380e8be66ad86c634b3be7fd97a58e26c35d1c17cec3813b15737a4f3b984a758a641a2a26933d81bede453efdee6792031f0ce8ab0b2bb7fa9fb76f9ca884ccd3a374d27f87c66a72b45c4f39b132881de49d63a3319ef7a6c249cf7dc3ef1a4e90e25e87d10c4126a89e7d6eb538677ead1fb5ed01e02628ebefe2fd7f9375366c656ec9dfa6a7f497c5d29ad333270b1d2fa2308c2e814234e8610f63485f0ce9d6667c7e219fa0c582631c3ea178bfec63bbaaba4a52a6ec5f66ae727e99f45c9f4098feffca5722e5355b3ec37f8bb9b3dc75f1f550c43e297751a108c392616b6b65c652d9be3b1bad3dba6fdf356eac56b729b94f13a4c2445d1eab9f1670964d23ed3b709813cd9600a9c18d727c74eafcbe71f1a9468947139606c221958b8ae2a8fb63a0ae2f928383ec137f0de15a89684b7706908897e0cdfa52bf14a9432eb1906670471182978c00b49facbb4f95bfa0b8c73fc9e3ba1ecc5294439f931dbffb081fee966bbd30aa690e4afec0afd4afed36c570fabeb738889618448e93976d1de98728dc0ac2cab575e1bb2a72154573955ed99eb86831970c2d7317503d6c50d1493e44e5c731c2b40bbcad04a53bacb983cbe53103d837baa32dd554d28a4903ef173f9d758849ca32bb7df61d13d639d55ae27ffc7ef21e1e15c083c4557a3df8f7afab4beb959698c560fcba9f71012c853ca3b7633f3bda7ce95fdb9926f2a2f5c28688f92064c691958a42ab0c7518a04cdc6545fc1fba9eea43abf80a8b4fb97a8c88c8b60a5c9d57d58bc490c81edb8c9a2fcc4fed5a2478cf3967cbd2018c1c9304abfd712e7845c983f2ea40bd9c5e43694538b32b832627f222fbf4af3d619938358fbfb06b5e56aefb008b8a3dc20407a624cd28752553dd666ebb8bf46ee926593ba792f0ff99cf4f57ad90f6c5749f9f9e68fab43aa2388fc837e1ae135ffaf04f8b99911658ff3513131b08ac08c4e17063a66a448e10f6525557f13aaa697b56d4da690ae734f8a324e3c214bf20eaceb62f91855d9cb5087e0fa7f5b5a3237a0f4db0464cb255a7bf266a0702f3aae88f6cff31ef1e5a3046839fa17b4520232baf8627a39a2e301342199434f522ed8d04072a848a1cf23f5a5dfb8bafe4d1b5d38704ec390cbc38a4c70b2b955c6b1775b7f32e286582dbd3cc093709fef1ae99b0eba278787b709445e93b4ea3b26e077b9c2305049afe0e439cf814f6c7a538067fd499e3cc327df64107900a57254b4b4e0752129baeab2cb155f02b1532be72fe8d9f546cff4423e53cd389084050d62fb12a25bfaecf238e4185543f4b143a59ea52e146f7f1c558222c4d84931b2caec643f744f1a986c5dcb33dffcb52670a193dfe2d27d652bff1d2f2016f2958fca24452e23a5dbfdcd779e660a0715a03aa93004a6747ae505de74a2fa782651083a90326e0fd6b4fde44b65ef43c1a03e71acb13b41278c0a5437ceac64974eb0a2dd3322f3a81a719cd4eed104871fd37985056c79a3ccde7fa91f2efcb941ad931b33aa530447257072ae2f3dcd6b4bdbda976af51107fc0aa493acc2b7300b73baf7b1e6656cc72247f0878ff9cf5eece1179b3ae5b2ff23e01167234225a2bdca47f1bfbf882d9d04614a3b29310c9dbf2daba7a27c6e11230087f67374237e56b366e8b50b6f9d8c10a36c896afb3a414667d3b1d66e796be075ace4a624c0d4ed5f635635e9057ac0d34fe79835dc15482df2f7b8acd72e80b283087bae78f9cb9b91c354be64b1e99a46018f2cbe1abf0732113347c77184f5b64ac0c4c2a5b382c055b0e5b4e36c5b93898be0fb8bc1631e9997404bfc529f56e809824dd6d207bb54d233a209a51b53f545c1002d10815e14f30c8048bf51ca1cdcf99fca0de567f8ff2610b74a130a011d0cd2ed972510f375765f1ffba5ff31ec5d307fdeffa3ef28bb4f0cd64ea525316aae57bc2bd380a9bc19501fc0c802a217ffbc050c401a9d6cfd71fb6ea09490e932888dd23d3071418263b5d8a6bb5b1493f5ecebe76836ec0e013dea22042d9cab060dbcab4648bf59d8b2f01a254b9b4b84f1264c0c8157bee5e534f614e1efc3fd98153fc766afe9aaed148803c80e5606cf32dfbe0c17ae8882ac9ab3f055a4bec8c0ddd01721f6f436eea8a9fca2ce1a14acf96af54b9c0a6535395be965f2d715339f16d7d2aa8d2d9e0e5e76f02070dadcfc8af662742bf808c6c7899c6130a8506ce753ef62c22098b1e3bf6a062e50b55d5be26aaae653c6666b56862aa371815f4dfddd9bb3b2c23a5b0a589d045ca6fcc4f05ac1c50f3e66a06f5d09e1ba202730fa7cf31db93ae5f3d5d448e179afd4edf1469008212448e8d51c9d04287eb00cf81d161d9ff828e14123056633e1d78455e1b43093f3a6110637ee2a60e2fcef644190a2ae00a2530fa156a2b8f422180d6a074a6041eae984387d62202b0bfe0ca538cf4c09761cb69fb90aee57d4c7f403b34bf4283db91066cd84b177d55c2c1e3baf10781f0ed66fac5725b176e93fb4ad0697a27712a437e31481e85ed0d96fb77d801219df80a939e0367889d5ffdc4d6a617c86a6935205689dcdd3b537ce91f4dd7c10427502952dcc3a14c0a5b8a04b5d679a410f7e85c63583c691a2a9dc2fdb0911272f192bde2632d70f32b2c1070f454cc53c06e35e687a4093053c56146565266f22bd34dce87675f9649d8699390d302bb5d5025862d8c3c7f9718e5059ec4025e274e7aaea8f76af3309d56131aafa45ee13119c8c44d54cfab501afd59324926e36b6cd2a04d224aab44d66f05325d4bebdf913cd8b74ccd427bb270b28448d0183f4826f6045a96a0a16343dec9d0605e92747dc2c874608776769239ae399cda45bba6f99e00c483b1f7999327d4daa8176ba13d1f8bea9998d60f7b2c8c3aeefbcd43bcdf5df2897549cb17726fbcf43a7d1f67640f084e9873a7ee9804eb4ea58d49b7d8bdfcde55713a07830009719c15eeda90a2be29cadd63a051097e3dd989a732fedbcdc3fb441641565fa8c22f04111c648aee2dc3feea61da3c2b55c76be3b640537f579684f1c2b2cb00c84eddd2c555dc9e9c660a631ebf0f095bc03530ec034a532a458e217c05797ab0c18582c49dc738dcebd87246b06049e8b186d438809c6a6bc7a10ee3b3494ef781771ed5235cda19ed107a1d647fba8079f73c2a27866126530dc4b531119a99f881d001f6c3ec78128b62d65cedf2a0a505b28b3b1dd27bda7fb5cc9acead0bccfbc9c6c88454dd9ddce793b868dee01232eaf36ea0629b0e3eda2e29c4cfc2b52dcff47cb01846166a1a52893dd9a884e9629cb3d35f438347c63bca391b5826f0a4c71d9b8fe0894678cc08607704471e61063924ae090a34579b118b4cfc6f21a82d100c72c93bc35537ef5e5a4c60327b99b9b488b2f46a16b2cc43715bac5148c0e193c06876d46cc2c6da2b3a1b1b917411503818a12bd0dcb2cff6e1a8339d6d551d64f0ed333eb28e887b0d7ea3e8a03590e264ed6cccc7031420b81ea80e8841b0e02fdd0df7515ab5651245500e7624b996a27380a14d201fdd1ab5f024b866972d8a1b689c88b79f38e914972ad76cfa0489ce2596027abbcf33ca7dc9ffd00ab92286c7d8e815b1a208789fac06f9033f99b40ce219f0f454be714f1ba2302be2ee4d7ee16e66f9dd0f0adc13d45f1360c9b95a48d432f99c7c2cf2bc2b11146ac5ba2581647567035113ddfa32d7d22f41e812e9a090d3188e6ff84b808223be36df09bf74175c6a48b9a2de777b1295f80306eac7a7ac4294c98fa9dfa8c20311369c48aeb7b79226d8f619118eee6225d9a0ebefc2d05bc74009f63226cf8a02e614cc21e630fdd07b4f669c4922e15034f3849502374aaa118fc05d3b23ceb663d7ce97032e79f824025e5eebb11886b4ced0ba2c6b7db3f018255452b345fcace69f504c397b9d5fe6ec27f2b9b173083cd4a202324ffa7e976bc8aea5d6e052407c5662c49470ba9eb64a9c3a7680d385bb9c2164b9338f8764cf63c31d1caa2e2a4699ab84cea5ad693338a14245ec122422800193c580eaee1aa84b8b83451c2095b225aa4171ef8de738e39035357ff22c331262d05cdda4b2c72cbfbd1ecfb692196fb32ac15aebaa20f4cebc65b937d938d71f1f6689a74b379358ac521d6964058154c77e2c1c6db2f8059668fcd812d7c30fb9178dcd26bd0ecefb6c526ce45039d492d5a1002f66c4c884373dafedad232d5cf2137c86a8bbec2d238a3b73e36c73baec8d298a11b3e6b3107a8a9ada848a16596cc33ff2ac298f6b11819784479598df918c36b49acbe7187dc35210431b23c0ed44313567ba9eb646ff633a8d3fbeae67479169910ab45d2f177f6a937cb318b926f80b8c6a439ecae706419686fe838dfd9988fa65909d5b7b4a5666b63aceca65cfda662b6dae88aaebb1b8faa86cbbb24b14acd559a8eb1eab51815964cf3bef6df1f216270d0e6807dde51aeb6ff8e49db5f6b673ca00e9a7966e1e3469ed0d2bd613d31c3b57279ed315d629fb7a6e065ea85d11f6aaf1ac6da1fd81ca2a573d722dbdcfbbfa614d79eb24238711c09508dc50a70e5602fdb768c8449b2131925314fba79de6b1b73a176be70fd08ae7993ea3ef240e51e31025f13d3a866cc24c24d51d5f692932527cbb531c628e422e64d1f33057015467d01ed592c5c3a2f63e9db1fbe4afa9831e23966337899d5426c7ff923adc019a7537414e6eb482c538477e8c2bc61aadd48b90b5771802b914031f126f850371cf5a7706a8e2504ccef712773cbbc773d1f40611aae268898bd9339a832aad1e01b3694fc88450f0eb9d279a1531816ff5f213f375867b987882e9bcc89a997c97189a62d4b84850d3136091e44773432b3cb3e1d31035cd2869bf2e5f89a7a066db6704d9950641ea2b922e2730b3c207e37f61581190111252f33fae16945feccb70f12bc487b1b8996f76b4f81c6d7a8389af76db528711d16150c5cfea9e4936c260b72bc27af1db060c9d62676474fd7f6956e41fca51bb4e0a278c01056225d2e0e9993b50ed503e559d3b519e4c72e48692f52a77cec2d4ffabc24ccca06b25a9efbe22493043eb79ddbebf6e0e3013de77f8c646abeb67e906c6a0af27fae50d88a70abed2a37e30a407095b07682a0892ef96eb18b61f904a9edc0a9ef5c4f365dc27c0442a8f7a89e6553a4dc061c09769fde1fbafea56a194ac24eca91acd2a7d91f802cc21b4a3deec2ff395ac28606e3132c673b0cc0d2eadea0955fb8e57a2ea9bf8861837c93b4b609b1f4822b724a9b31733d47d4cc292352b6cb2bb50b613923749600197b5f4797ac82b79d5c98a7e782c5360506c8e8a7bbefd66ac92a1766a2e0cc8886492f06473224cdebd7a6ad803d1a0fe39d00951f6c7a9b094663d881177386b64f5fc3985bce4a17e9217a1946e84589af2ba56810e15b835484f637650cba1530c5438977af634c75750fd2f77f9dbb0cee56f4b7aaa3b4a34eb1bc93ac11249191d5a8b17478bdad56f80d5d3c531f86ee969ecfaefdc45e5d588cab1f43fe421ea3e3568fc7cf3304e9833ccca469b70da619f1ed0851a2f26297a2c061ccc4270b07d6e81e52d26b60b21de9139a740bb7a7aac550ab0ab0029e8fafd77c4a27fee0f77a660b03c76652c109b6276495d24045f00b7181585404ecdf9bede3288373f602831cc5e8c2510f638ac21328b82152af0322e2a5d91d8ce37b7d3afb9b73f90c086d26fc9d0295c6c42200509dbdb780bd1d50f64867a3208e1b20bd7fcc1681fcb40b588908b51255f0fc4d2b7ba86e8a929305aa1111b237c75087d3de02084e11abc6a20c4c7268b8be1558afb0822120742493bf33c056c332543d2eea4d18e5b0486a669d3624d135e8b432d6bf0e0c72bb2bfcf3b71009396ab6c5e639de506bda4985dba6dc67ca0c25553df48ba9f4c708283bdaa7905f98f1a756d86c94b60db11815332ccbd6b6a7b958ae738efec09597952829843025813a4733f34a1abc3c63979358c43df4165a302ed82988070a0f496aa81c7a0971d85d4f67aa4fa11253a956f8e5af31f31520c8a95c3c4515846d5aa07985126212e3d8b6e6350f0d14294db6655bda90fb2bde863716e584fe85115a79d90a01913fe3f307b8816985ae77ecb73e73734af7cb8c5eed2ecc2009cf8eb43793faad3246cb223a7a88704817b800b0f842c2b46dd17829116883d8d4f8b2e8c55c8bd47d6df9c622a5d0da42a4f3c4c773a9a885565f4989ca81da24ed7430f981100021d7f72dedd572e53941bf34ded3c7a642bc32d46112af9195bb0c2d0e969c04a141001f0399ffa7d896b47eb68ca851fa8c0fe368c945c52658be5cac5f582ed06b20e5f6cdf3d4e948b072c7c451e945f851a77248e883da919ae3e0d76ceaf7fe0b2d718a47dceed35f2a212363c565a1099db238b5140b22bc0dba39c9fd3e1b7cc89cf8326e81f515843db90cd83384c19738ad9cc301ca018c59bb887592ea89ff7d3746083c39bf0eab4a47824a5474600d8655644a64cfe0c2e7694d7be85246af80dc839392a1ddf0b44d5d3568adc814981554c394f2fb4c6b3bcfbddaf875c613fe499df7f9028582130b919abdef0e8948f0685ec5b043948a2ba53a61b7d29180933014e9c25b74297e8bb36afdd8fee7241d00924608bcd6cff45468f8776e5e21fa4e7a2186bd461f26c1b625b2c3ccc0fd9cc808bce477f66adf3d584dce667beaf88ea710df35173cdcdedc11f3c1abe4f2811b298cab8ac795632cf1f8248e5f425ca70836146075a1f2d23699c521837f33f81cc87a3b31fa57164ecb4ee940d6f973b473917871cd193c5d348d5b9705253b0677013fcb7d9f7dd49c452f1cc608f5a2b4ebb74dbb7291098d81b1b059b4c88083a796e9f5a416736030ac5d2f1300d3d70732f6d824985b34ed36240d17b340039826131c9ebcd528c2620b28f0cd8c47971a56f4f1ddfac59910a416d0030417c2f6ff99533f589438bfdd209d38238e8c56b803289084f39a4f21e44c7dbc09a77049adeee5854947fedc1db18a88cb7143a16d7d7a61fa47331aac36407d1191c38c2088d8ca839d0f64f060907c668dfd4cc928c723cfa98a685e28882920e056ee340acbb283d8faeda4265feff032ed47f96ac53ea08aba4a6b6f6a3da53ab6a276c0f66c36409eb738fee985c41a74c841ddbfe093917542ff33a5d20da262e491b20f0a510877a34878ecff576147371c2512c6bc1f1fc0b6a9e9cc0f9fe3b559e9e31b506970841084d5ece3480c37f393574f28743bcf1a3dcd3a9dd5464d73a0c1908ea26e2b3a92556d4cdbcbaad5b4d76a71ecc42d0cb54a8915bd2904dff36f1540cdd64963257b4e4b9a0d4b73f960c5aef98224ad015f1f8ddb083e0a4ad81060772ee1c3c23c320967ddd8f776027e9a9d0a92cf19fdf5c49a2e1e99e3448e6043e42b13afbcc2911d235e4a0f96611374066e2aa0a42406913237ae81fb58a362d99f522084fd529f6b0a5931e2ca99a7f5fa7fea2f1cc5bf2742aff2e1339dc18408c48df52883c46178589b72ba39f63e3a7f40bacefcba8454069a2b8e460f7b6dd0a743850825de3ec26ec302cbfcec692463a179aae128dd9b49160aea4b7f611d5eb21fe16f1584a82b1f7de171ecefb809a09e661e7a078f0ae1229d12b511c88df141cb15461466b0fef51ee93a74517598cd6e8ca6494a528973afa1098a350157fe75cc0be57770fdfc96f17e30fd2ca5fff5e18402ef8a6cc1f65a56b237aed43727bfd1e163a2a60dfe979b3cf9760240ca2f7bfa76b34b2b40fda933829ca6458cdff0230f77dd0a2770e8fbfc16b3d385881cbcb189682b99d351270b63c432b15c4935603e05eef3f384beebd0dd8ea4c2e919f93eb62c11978313ac0973fa8d096195c02954db7bd1db313e040a07ba475181013066f557495b2e9b0fbc205bfa074e7dcdbefa38d178da9658d064655f1412498e2047dbc6e99090835291ab982822476087b694a495ead1879b575a98128b459f9855be802925eda28e65b8dbe7bbe44fea75b41254b5446e60fee32df9d8c676bb4ffd958c82ec3d74ef2eb6c4c36e5c184593ce62c0331ece679e588264ce5b8c4d6507768eb4d31888480219779546d99536312971ef05e8710c6e0d4581253334af6dc3d6ce4fe44f1c96da50af4d1dbd18042bb5e8cd26bb03b6e4d0167f8c1ed7feb94b207865fe6d92d390b5124f17241cf7ff286a83520db99b5380384f666622d547812802e7f5829be08ffbbc51c91c2a532ca9fe3895bc27fa7804b7b41f60fdefe1fbc79c24dda59b91979279695eb785cf3f34c3b18e31b6d07926625d1170cafa1b552304d0696d432c59baefd0c1687bc0a01851d3dad8152994257819ac5a78c7af1f1cbb106a27b759d14cfcbba865a8708b203d2fee5610dd30842f80255c88f36824c26cbc478a79864beaffb1e68eb61ed157935f0d8566029113307f1ee53eafd7b3dd2b90eed86dbf52f62e9755717fa7c209a981776977a7eb43f2fee147b387538273f5801a511eeae1144b661c53dbc2df24a238c1cc5e228f60b740cb9b880e9b5b41147b2310562eb777c6775ae0f295c31a22d445727acf2fadfca2aa12df9bfff626454dfe025ecebe8368cc17707d1293db27fd4f7250adefd2ee8b1886df3771560fdf24075bf90594ce4d2440995625f9c32c4dbb85c2e99371e520fac491f4d6671a55e2cf5c9ad8a9fae6ede963acfa586b5173e46d71efba2e21b2699a0169050ff7544beb5f82ce69666d3d129b8eadb11aa72a56b822c9cc85288cadbb140b1502fd09167e2ced58c738d4b54a67d2544d357b9035382062b6f979dac0943bfba726fe0206ba3d9847e93f22ca284396ede878e4d126ba2a5a8f7deef86bed1e89fba087605fe02be1802c49e9b0cf18e7ab6dce52bf564b099f864e81bb7e559bc1e2c27f85a76af30b7369b7ce61e12a86e4e38a904ebf5dfa692b0af4b70a779becbe35956eae191f241c24295af5bac1d82d1da2d28462f1c02c5fb19840027a28387a158ef241fd57f6b6fe74e6dede537c716b933cdff7d14f697410e74844baad2c6ce57f9fbb4e44ca433dce3c2a2950849dbf9f7d81cd785f684c21877cc61016702850ea48ade29fb91e256ff4432ce6271ef2460b09ceaa2d08170fd12dfa96ece57a5ab7de5c26e276682772c70432d44ff12831a518e1a421c1250e9df750d550723690d28e0454bab415548176c9b5da5a54585366da24fa9093a891dd8c41b1db67897dd3ffd69c724e0a21fd1054c804ed4d3c73d362371b03e65c535c08dd27a29cff93d3e7bd0f68cc4001a8bd347e1dd13604578f3b213421b57c38fc0ff68267a3eaa3746b5ff5ba8eeba07c49f5029b92199c3f7b79df9cd523933af5ae4742166365217ef76291dbdf7946b01600dc59990a3121843d0d96ca43e9c5742e74bbec713dba8362177467aace17f75e3abb446a0f913bd09bf9e8d4ed69d60ffa93615386669c94d729b5e305fb40d7ca7f1f38af98432dcbed49c0b5744333e0622ec76d5a55d39593168d08d206751e49d2328efccb4af7ce62dcdbce35de129451133a0f7334097b0fe70b0372249f2bd3f80964b1086040e0f8971f41c7916a41f588d51438beff4a00550d3703f43639e80aeb9e6f58219f29fdac903cc20387dba5b784507f77918b7d6b94211b77bf280fe3653666cf46bbe6567c", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x0, {0x2000003, 0x3, 0x6, 0x0, 0x1ff, 0x3, {0x6, 0x4, 0x7, 0x5, 0x100000001, 0x6, 0x3, 0x0, 0x101, 0x6000, 0x5, 0x0, r4, 0x801, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r8, r8, r8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2cc, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2b8, 0x1, [@m_simple={0x88, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x59, 0x6, "2142fd3b7739e2df1ce11a6cb358923efde1e857b5f4b6f98b557df785dd171fde9589b89159b81ee8cae94d2e9fa3057e2ef1dcb1a91c625616b378bf4efa552a73c8d7f1dcf6bda7d96971955d93d98a6c82b565"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1fc, 0x12, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80007, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0xba, 0x6, "00dbe2375389f4c61bb80b5c04766adf4c4041ab3363ca93e40c5281d6bb7035fa3fb2838101ae15e668e34175f78ce7df4b1c48d956acfb10ab481c7729ee14cbb37713b8e2a37054e99152bbb3f0c77e56a1f6ab9da61c7f00958a0a8d67f277272c411cba11ef13007927c9c52984e903960081484a463aa2d388d77984fa7968102f600b0936201c9964cff6e2e5e131439b5dd84f40bb377965a4af38c2020711a2fad2ba4e11f442caf2f22b704bf9fa63dbd5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r10}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r10, &(0x7f0000000540)="a21bb332f9518fa1cfd248aa1dd88ec1ce139fe7832120df14c9464772158d1c5a0f18368aea10d9d9fe5a56ecc8a4303ae03c63158d1e9ac9c768e3b700ab7ff86e7755b251764f705d0d9ce9937a9c78cd1049431e6420f2d47323f8a9d61a2e574209567245538ce9fe436a790f19"}, 0x20) r11 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000006380)=ANY=[@ANYBLOB="02000000010005000000000002000400", @ANYRES32=0xee01, @ANYBLOB="040002000000000008000200", @ANYRES32=r0, @ANYRESDEC=r10, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="00bbee9851a97015e11f120945e1000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r11, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0xee00, @ANYBLOB="10000000000000002000010000000000"], 0x7c, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000500)=ANY=[], 0xfe37, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1m45.963248097s ago: executing program 2 (id=628): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x111) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="a0a13333", 0x4}], 0x1, 0x7ffd, 0xffffffff, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1c1842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r3, 0x4) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e459, 0x700000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x100001) 1m42.209952586s ago: executing program 2 (id=635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x5}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.562240628s ago: executing program 34 (id=635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x5}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.477684294s ago: executing program 6 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000020d700000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006d000000950000a24012a500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000064001280080001007369740058000280060008003300000006000e00ff00000008000100", @ANYRES32, @ANYBLOB="0500050040000000060008003a00000006000f0002000000060011004e24000014000b00fe8800e4ffffff000000000000000001060010000400000008001f0006"], 0x94}}, 0x4010) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, 0x0, 0x0]) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 1m12.805139337s ago: executing program 5 (id=195): unshare(0x6a040000) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x1000003, 0x30, r0, 0x0) unshare(0x10000400) r1 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 1m7.107261064s ago: executing program 0 (id=686): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x228, &(0x7f00000004c0)="$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") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2$9p(&(0x7f00000027c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x400400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000003580)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1m4.689845766s ago: executing program 0 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="ef", 0x1}], 0x2, 0x1, 0x0) ioperm(0x0, 0x2, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYBLOB="77f70548a55bdd3bd8d3a236fa05308456714ac378c5541001648422b60d722f7664d44e4c1f68ca2d97f06448e733600b94f21fe39018f32e470771bd94eefb5c8c6fc001871ed145f00fd653fc86240659d4eaaba452e10d55888f0ef53c81cb61055a79440ef9388cbd9bbf3d53499421848f74bdb491d0dab14875f11075087d684cabcc753e124688f9fed8e56a", @ANYRES64], 0x1, 0x608, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lgetxattr(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='user'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x78}}, 0x0) ioperm(0x6, 0x5, 0x101) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x20500, 0x46) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 1m3.41054249s ago: executing program 0 (id=691): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000080, 0x0, 0x0, 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1m3.025504362s ago: executing program 0 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000e80)={0x0, 0xffffffff, 0x80}, &(0x7f0000000040), &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000e00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000e00)='./file0/file0\x00', 0x80000, &(0x7f0000000e40)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x10001}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}], [{@subj_role={'subj_role', 0x3d, '\\\xe5\'!@.\''}}, {@smackfsdef={'smackfsdef', 0x3d, 'lowerdir'}}, {@hash}, {@dont_hash}]}}, 0x0, 0x0, &(0x7f0000000fc0)) renameat2(r1, &(0x7f0000000040)='./file2\x00', r2, &(0x7f0000001000)='./file0\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) 1m2.635025537s ago: executing program 0 (id=694): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x228, &(0x7f00000004c0)="$eJzs28tOE2EUAODTUmliTNy7cSGJLpQW1AgrJcH7/fICBCohFm+4EGKibHwPnkyWblj4Aoxhqta2TC9SOhK+L2nmz5z/zH+mmTMzXTSA46sUUYhCzEdEkiSfP04k5bxLAkYj6WfS+OGtv5sM6trAGUCWsb023M67CmD0dubS/o/tiPj249Pi7898n8/vnbliuv3Sln+z3/zNQro9U2rNvxURt3tmF3aTrUb++bb17wy4/sm2/Lt95zfO/8K51vx7EXE/Ih5ExMOIeBQRjyPiSUQ83Wf9pbb1X7Stk5zusyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/VIjJzp3fk7/j+0xoKsbLlXqtmhk/kcanMqJbp8bT+HRmfiN+OTNeTuOTi2/qS0m5W6FAh2JL/xc74r36f6xH/5e69j+Qp7X1jVcL9Xrt/QEHe7eOYRznYhz0ONeHUUbH4F1EdJ2zOawvcyIihly8wZ9BeYjX/GCDG92vn/9ukPedCThslQ+rbytr6xuXVlYXlmvLtddTs9PVKzMzs9WrlfTNvpL5fu/nNhxxzYd+c9/XX9uzeRUFAAAAAAAAAAzkWUQ8z7sIAABgJEbxd6K8zxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAo+9nAAAA//9zGM9s") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2$9p(&(0x7f00000027c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa2741, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x400400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000003580)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1m2.029654287s ago: executing program 0 (id=696): socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_set_ext_scan_params={{0x2041, 0x3}, {0xe, 0xfc, 0x9}}}, 0x7) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="052e"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x40001656, &(0x7f00000003c0)={0x0, 0x33aa, 0x20, 0x2000, 0x3a7}, &(0x7f0000000680)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x10001, 0x3, {{0x19, 0x4, 0x1, 0x18, 0x64, 0x68, 0x0, 0x18, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "72a8796220fb"}]}, @timestamp={0x44, 0x18, 0x17, 0x0, 0x2, [0xd2fe, 0x7, 0x3, 0xfffffff8, 0x892]}, @rr={0x7, 0x1b, 0x49, [@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @remote, @multicast2]}, @noop, @timestamp={0x44, 0xc, 0x4b, 0x0, 0x1, [0x4, 0x81]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x6, '\x00', r6, r5, 0x2, 0x0, 0x5}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="a8"]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r5, 0xfffff000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) write$UHID_CREATE2(r5, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xf5, 0x5, 0x3, 0x1, 0x6, 0x8, "601f08b400f7cf1ac1e056607dae87592fadff232267f77601140172995088be57fa25638600958d82285700142c5d919ddd59b27b18406ec8c72590209a91cd342cc76b200a5fa0ebb4a23961353a1c81a545c942d621fb4e42af007b1d8a473a75de034604d72ef276c32b05b1bb46bacc581a6213996fd702fd0af3ccb24c12a731ac22decf6820cdb654fc56e045c794cd00a3163f67bce6e594f9f3071a4d1a10eb1a46828e5be59c8629bab939c0bde99e813c7ef00b6a707c77d3e0f49db05c885c4bfe530bda428a59843d0b03038ca3d6504e12658d9e6a315b9d48eec0f4e1d2c1c3963820027db9424fdd2e074b2aaa"}}, 0x20d) io_uring_enter(r2, 0x2d3e, 0xfffffffd, 0x5, 0x0, 0x0) 1m1.472259463s ago: executing program 35 (id=696): socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_set_ext_scan_params={{0x2041, 0x3}, {0xe, 0xfc, 0x9}}}, 0x7) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="052e"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x40001656, &(0x7f00000003c0)={0x0, 0x33aa, 0x20, 0x2000, 0x3a7}, &(0x7f0000000680)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x10001, 0x3, {{0x19, 0x4, 0x1, 0x18, 0x64, 0x68, 0x0, 0x18, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "72a8796220fb"}]}, @timestamp={0x44, 0x18, 0x17, 0x0, 0x2, [0xd2fe, 0x7, 0x3, 0xfffffff8, 0x892]}, @rr={0x7, 0x1b, 0x49, [@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @remote, @multicast2]}, @noop, @timestamp={0x44, 0xc, 0x4b, 0x0, 0x1, [0x4, 0x81]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x6, '\x00', r6, r5, 0x2, 0x0, 0x5}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="a8"]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r5, 0xfffff000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) write$UHID_CREATE2(r5, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xf5, 0x5, 0x3, 0x1, 0x6, 0x8, "601f08b400f7cf1ac1e056607dae87592fadff232267f77601140172995088be57fa25638600958d82285700142c5d919ddd59b27b18406ec8c72590209a91cd342cc76b200a5fa0ebb4a23961353a1c81a545c942d621fb4e42af007b1d8a473a75de034604d72ef276c32b05b1bb46bacc581a6213996fd702fd0af3ccb24c12a731ac22decf6820cdb654fc56e045c794cd00a3163f67bce6e594f9f3071a4d1a10eb1a46828e5be59c8629bab939c0bde99e813c7ef00b6a707c77d3e0f49db05c885c4bfe530bda428a59843d0b03038ca3d6504e12658d9e6a315b9d48eec0f4e1d2c1c3963820027db9424fdd2e074b2aaa"}}, 0x20d) io_uring_enter(r2, 0x2d3e, 0xfffffffd, 0x5, 0x0, 0x0) 1m1.45042782s ago: executing program 7 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000003c0)=""/73, &(0x7f0000000300)=0x49) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r6, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="95ed752570f2e0eca00c041ad10b2f3641120f544a63131b6b93c3b13e932ea13ad684b783726bb498277f996b4e35698b302f84b0f10f0c8261ec70e4287ea01ab19cc15b43031af9b72de44607cd0d1a816ae20b3a06cbc4b3974b62a7f832c77940513d7d3f459ce7e624893b0a917aac53f3a4d171e43a225d805ae17aded6a469f7e681e3b73011cc8048dc0197f0114cf532644332ef0ac84c36485eec87748c53eef9d93fea54e8356158400d496afcc9da83f7c115b4d81c02e6cf390f751739144aeed2bce049e3d56a0f83f577a768fabdcaa47e0675e599362015", @ANYBLOB="c70100db5e18a1d76a95f1cb351e8fbb77e8dbd2d2c5d54d07"], 0x1, 0x5d2, &(0x7f00000005c0)="$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") 35.909322774s ago: executing program 6 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000020d700000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006d000000950000a24012a500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000064001280080001007369740058000280060008003300000006000e00ff00000008000100", @ANYRES32, @ANYBLOB="0500050040000000060008003a00000006000f0002000000060011004e24000014000b00fe8800e4ffffff000000000000000001060010000400000008001f0006"], 0x94}}, 0x4010) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, 0x0, 0x0]) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 32.138908446s ago: executing program 5 (id=195): unshare(0x6a040000) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x1000003, 0x30, r0, 0x0) unshare(0x10000400) r1 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 27.229061079s ago: executing program 8 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="ef", 0x1}], 0x2, 0x1, 0x0) ioperm(0x0, 0x2, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYBLOB="77f70548a55bdd3bd8d3a236fa05308456714ac378c5541001648422b60d722f7664d44e4c1f68ca2d97f06448e733600b94f21fe39018f32e470771bd94eefb5c8c6fc001871ed145f00fd653fc86240659d4eaaba452e10d55888f0ef53c81cb61055a79440ef9388cbd9bbf3d53499421848f74bdb491d0dab14875f11075087d684cabcc753e124688f9fed8e56a", @ANYRES64], 0x1, 0x608, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lgetxattr(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='user'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x78}}, 0x0) ioperm(0x6, 0x5, 0x101) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x50, r8, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x20500, 0x46) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 25.527911619s ago: executing program 7 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000003c0)=""/73, &(0x7f0000000300)=0x49) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r6, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="95ed752570f2e0eca00c041ad10b2f3641120f544a63131b6b93c3b13e932ea13ad684b783726bb498277f996b4e35698b302f84b0f10f0c8261ec70e4287ea01ab19cc15b43031af9b72de44607cd0d1a816ae20b3a06cbc4b3974b62a7f832c77940513d7d3f459ce7e624893b0a917aac53f3a4d171e43a225d805ae17aded6a469f7e681e3b73011cc8048dc0197f0114cf532644332ef0ac84c36485eec87748c53eef9d93fea54e8356158400d496afcc9da83f7c115b4d81c02e6cf390f751739144aeed2bce049e3d56a0f83f577a768fabdcaa47e0675e599362015", @ANYBLOB="c70100db5e18a1d76a95f1cb351e8fbb77e8dbd2d2c5d54d07"], 0x1, 0x5d2, &(0x7f00000005c0)="$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") 5.860117633s ago: executing program 3 (id=746): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) keyctl$link(0x8, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4.800722254s ago: executing program 3 (id=747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='y_', 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/4096, 0x1032}, 0x2}], 0x1, 0x0, 0x0) 4.625347971s ago: executing program 3 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x5c) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x44, 0x1, 0x3, "b49e1b62251dd37bb50730df4749af087c17e6e724ae01b9424f5ab23870ecd4"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x810) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 4.398117892s ago: executing program 3 (id=749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@p, {0x3, 0x2, 0x3, 0xa, 0x0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 1.192281309s ago: executing program 3 (id=750): socket(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r6}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000140)={0xffff1000, 0x101000}) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x82000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1.027851895s ago: executing program 6 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000020d700000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006d000000950000a24012a500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000064001280080001007369740058000280060008003300000006000e00ff00000008000100", @ANYRES32, @ANYBLOB="0500050040000000060008003a00000006000f0002000000060011004e24000014000b00fe8800e4ffffff000000000000000001060010000400000008001f0006"], 0x94}}, 0x4010) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, 0x0, 0x0]) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 11.448045ms ago: executing program 3 (id=751): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x10000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x40000004, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001140)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000010c0)=""/118, 0x76}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f0000000140)=""/28, 0x1c}], 0x6}, 0x40010000) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000014c0)={0x3, {{0x2, 0x4e26, @multicast2}}, 0x1}, 0x90) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r5, 0x0, &(0x7f0000bd9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r5, 0x0, &(0x7f00008c2000/0x1000)=nil, 0x1000, 0xffffffff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000002540)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) exit(0x10000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x4, 0x1fc01b, 0x2aff5e}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=195): unshare(0x6a040000) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x1000003, 0x30, r0, 0x0) unshare(0x10000400) r1 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) kernel console output (not intermixed with test programs): RCX: 00007ff87778fed7 [ 383.745989][ T5864] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3ab643e0 [ 383.746002][ T5864] RBP: 00007ffd3ab643e0 R08: 0000000000000000 R09: 0000000000000000 [ 383.746016][ T5864] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3ab65470 [ 383.746029][ T5864] R13: 00007ff877811c05 R14: 000000000005c798 R15: 00007ffd3ab654b0 [ 383.746070][ T5864] [ 383.746079][ T5864] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 383.802508][ T9070] netlink: 'syz.2.581': attribute type 10 has an invalid length. [ 383.884578][ T5962] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 384.073981][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 384.135456][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.142020][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.206854][ T5984] usb 3-1: string descriptor 0 read error: -71 [ 384.280412][ T5984] usb 3-1: USB disconnect, device number 12 [ 384.323454][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 384.331935][ T5962] usb 1-1: config 8 has an invalid interface number: 109 but max is 1 [ 384.340710][ T5962] usb 1-1: config 8 has an invalid interface number: 242 but max is 1 [ 384.372222][ T5962] usb 1-1: config 8 has no interface number 0 [ 384.407772][ T5962] usb 1-1: config 8 has no interface number 1 [ 384.440840][ T5962] usb 1-1: config 8 interface 109 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 384.463495][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 384.506518][ T5962] usb 1-1: config 8 interface 109 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 384.551924][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 384.605869][ T5962] usb 1-1: config 8 interface 109 altsetting 6 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 384.664814][ T5962] usb 1-1: config 8 interface 109 altsetting 6 endpoint 0x81 has invalid maxpacket 57846, setting to 1024 [ 384.687904][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 384.699773][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 384.714569][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 384.727090][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 384.754849][ T5962] usb 1-1: config 8 interface 109 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 384.767003][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 384.777920][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has an endpoint descriptor with address 0x91, changing to 0x81 [ 384.796672][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has a duplicate endpoint with address 0x81, skipping [ 384.809106][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 384.831021][ T5962] usb 1-1: config 8 interface 109 altsetting 6 has 17 endpoint descriptors, different from the interface descriptor's value: 15 [ 384.863286][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x9, skipping [ 384.874349][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x9, skipping [ 384.888133][ T5962] usb 1-1: config 8 interface 242 altsetting 90 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 384.903087][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x7, skipping [ 384.914126][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x8, skipping [ 384.942665][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x2, skipping [ 384.971664][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x81, skipping [ 384.986420][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x9, skipping [ 385.011408][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x3, skipping [ 385.039719][ T5962] usb 1-1: config 8 interface 242 altsetting 90 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 385.067615][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x7, skipping [ 385.112139][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x1, skipping [ 385.155847][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0x7, skipping [ 385.175920][ T9098] loop3: detected capacity change from 0 to 4096 [ 385.182577][ T5962] usb 1-1: config 8 interface 242 altsetting 90 has a duplicate endpoint with address 0xE, skipping [ 385.226555][ T5962] usb 1-1: config 8 interface 109 has no altsetting 0 [ 385.248424][ T5962] usb 1-1: config 8 interface 242 has no altsetting 0 [ 385.268567][ T5962] usb 1-1: New USB device found, idVendor=1199, idProduct=683a, bcdDevice=72.84 [ 385.283963][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.326102][ T5962] usb 1-1: Manufacturer: Ṅꥪ䣕캠掣釸댿䤛è„毧詖罞഼郶粼í¼ê ¬ã€žé¼­åœžã„è¡å©‚嬈禳仩æŠè…®á”—᯸済ﲹ漵ഘî²îŒæ–䛿䞾㩚ߟ郪ꉉ梑㉮ž委å…é‚ë Žä¢åŒ²è‹’娘⸇힩뀙臨陽匀螎â»êšêµ¥æˆá•»ì ‰ç˜¸å€¦ã€«á¼¯ãŽµç¹¶ã ±ã‚³ [ 385.417865][ T9098] ntfs3(loop3): ino=1a, mi_enum_attr [ 385.423731][ T9098] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 385.445535][ T8808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 385.452996][ T5962] usb 1-1: SerialNumber: à°Š [ 385.480567][ T9087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 385.497213][ T8808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 385.520345][ T9087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 385.600149][ T9105] loop2: detected capacity change from 0 to 4096 [ 385.703547][ T9105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.994469][ T8808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.515015][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.523980][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.574044][ T8808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.710609][ T9130] loop3: detected capacity change from 0 to 512 [ 386.777813][ T9121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.585: corrupted inode contents [ 386.840688][ T9130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.861418][ T9121] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.585: mark_inode_dirty error [ 386.887055][ T9130] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.941581][ T9121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.585: corrupted inode contents [ 386.992429][ T9130] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 387.038519][ T9121] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.585: mark_inode_dirty error [ 387.128261][ T9121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.585: corrupted inode contents [ 387.149700][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.254625][ T9121] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.585: mark_inode_dirty error [ 387.330416][ T9121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.585: corrupted inode contents [ 387.429011][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.456974][ T9121] EXT4-fs error (device loop2): ext4_truncate:4666: inode #15: comm syz.2.585: mark_inode_dirty error [ 387.517967][ T9121] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 387.577856][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.600418][ T9121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.585: corrupted inode contents [ 387.634470][ T9121] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 387.755118][ T5962] sierra 1-1:8.109: Sierra USB modem converter detected [ 387.831690][ T5962] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 387.845483][ T9141] fuse: root generation should be zero [ 387.856039][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.863300][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.889276][ T5962] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 387.920647][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.935108][ T8824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.951682][ T5962] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 387.978643][ T5962] usb 1-1: Sierra USB modem converter now attached to ttyUSB3 [ 387.997830][ T8824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.041638][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.048974][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.065637][ T5962] sierra 1-1:8.242: Sierra USB modem converter detected [ 388.111803][ T5962] usb 1-1: Sierra USB modem converter now attached to ttyUSB4 [ 388.170854][ T8824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.195214][ T5962] usb 1-1: USB disconnect, device number 10 [ 388.237920][ T8824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.247965][ T5962] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 388.502833][ T5962] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 388.541696][ T5962] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 388.562687][ T5962] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 388.588634][ T5962] sierra 1-1:8.109: device disconnected [ 388.644752][ T5962] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 388.655645][ T8808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.701928][ T5962] sierra 1-1:8.242: device disconnected [ 389.184796][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.275220][ T8824] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.396498][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.403940][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.458534][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.465781][ T8709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.652469][ T9175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 389.671188][ T9175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.681208][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.708350][ T9175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 389.751224][ T9175] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 389.807905][ T9175] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 389.826067][ T9175] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 389.861904][ T9175] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 389.893605][ T9175] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 390.458070][ T8824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.766701][ T8808] veth0_vlan: entered promiscuous mode [ 390.811994][ T8808] veth1_vlan: entered promiscuous mode [ 390.967010][ T8808] veth0_macvtap: entered promiscuous mode [ 391.030249][ T8808] veth1_macvtap: entered promiscuous mode [ 391.135240][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.185989][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.290926][ T8723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.440200][ T8723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.477676][ T8723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.560481][ T9219] loop2: detected capacity change from 0 to 32768 [ 391.569909][ T9219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.595 (9219) [ 391.591161][ T9219] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 391.601547][ T9219] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 391.606097][ T8723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.690813][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 391.697030][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.770728][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 391.851431][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 392.003139][ T9219] BTRFS info (device loop2): turning off barriers [ 392.009645][ T9219] BTRFS info (device loop2): enabling free space tree [ 392.016798][ T9219] BTRFS info (device loop2): use zstd compression, level 3 [ 392.255356][ T9223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.696284][ T8824] veth0_vlan: entered promiscuous mode [ 392.854485][ T5865] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 392.878056][ T8824] veth1_vlan: entered promiscuous mode [ 393.251014][ T8824] veth0_macvtap: entered promiscuous mode [ 393.865528][ T6330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.942555][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 394.071147][ T8824] veth1_macvtap: entered promiscuous mode [ 394.231643][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.793175][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 394.963441][ T6330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.022109][ T9280] loop2: detected capacity change from 0 to 1024 [ 395.038682][ T9280] EXT4-fs: Ignoring removed i_version option [ 395.101250][ T9280] EXT4-fs: inline encryption not supported [ 395.172751][ T9280] EXT4-fs (loop2): Test dummy encryption mode enabled [ 395.205558][ T9280] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 395.234683][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.344276][ T9280] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.601: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 395.453155][ T9280] EXT4-fs error (device loop2): ext4_quota_enable:7137: comm syz.2.601: Bad quota inode: 4, type: 1 [ 395.478446][ T9280] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 395.527315][ T9280] EXT4-fs (loop2): mount failed [ 395.598329][ T6330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.623558][ T8723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.680176][ T8723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.779728][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.795319][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.812177][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.830178][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.853848][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.917804][ T6330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.976409][ T8723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.999550][ T8723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.020867][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 396.110144][ T5962] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 396.349819][ T9289] lo speed is unknown, defaulting to 1000 [ 396.361465][ T5962] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 396.369770][ T5962] usb 3-1: config 179 has no interface number 0 [ 396.446402][ T5962] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 396.741878][ T9299] loop3: detected capacity change from 0 to 32768 [ 396.754114][ T5962] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 396.768092][ T5962] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 396.803022][ T5962] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 396.825935][ T9300] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 396.867895][ T9299] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 396.876232][ T9299] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 396.898892][ T9299] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 396.915733][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 396.923855][ T5962] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 396.937368][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 396.958326][ T5962] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 396.980103][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.994662][ T9282] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.029825][ T9282] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.218211][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 280ms [ 397.253736][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 397.261007][ T9299] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 397.997637][ T52] Bluetooth: hci2: command tx timeout [ 398.127122][ T9288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.372209][ T9288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.646768][ T24] usb 3-1: USB disconnect, device number 13 [ 398.652849][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 398.652890][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 398.726497][ T6330] bridge_slave_1: left allmulticast mode [ 398.749793][ T6330] bridge_slave_1: left promiscuous mode [ 398.757139][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.807104][ T6330] bridge_slave_0: left allmulticast mode [ 398.830626][ T6330] bridge_slave_0: left promiscuous mode [ 398.836798][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.771739][ T9335] loop3: detected capacity change from 0 to 8 [ 399.962020][ T9339] SQUASHFS error: lzo decompression failed, data probably corrupt [ 400.010079][ T52] Bluetooth: hci2: command tx timeout [ 400.023084][ T9339] SQUASHFS error: Failed to read block 0x71: -5 [ 400.039491][ T9339] SQUASHFS error: lzo decompression failed, data probably corrupt [ 400.061200][ T9339] SQUASHFS error: Failed to read block 0x71: -5 [ 400.096813][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 400.096837][ T30] audit: type=1800 audit(1757573700.466:80): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.606" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 401.081307][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.107267][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.120578][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.136204][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.154427][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 401.283131][ T9331] loop0: detected capacity change from 0 to 32768 [ 401.309999][ T9331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.604 (9331) [ 401.374894][ T9331] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 401.417508][ T9331] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 401.436405][ T9354] loop3: detected capacity change from 0 to 256 [ 401.491233][ T6330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.515869][ T9354] FAT-fs (loop3): Directory bread(block 64) failed [ 401.577101][ T9354] FAT-fs (loop3): Directory bread(block 65) failed [ 401.605093][ T6330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.621321][ T9354] FAT-fs (loop3): Directory bread(block 66) failed [ 401.628104][ T9354] FAT-fs (loop3): Directory bread(block 67) failed [ 401.649712][ T9354] FAT-fs (loop3): Directory bread(block 68) failed [ 401.659628][ T9354] FAT-fs (loop3): Directory bread(block 69) failed [ 401.660938][ T6330] bond0 (unregistering): Released all slaves [ 401.666390][ T9354] FAT-fs (loop3): Directory bread(block 70) failed [ 401.679131][ T9354] FAT-fs (loop3): Directory bread(block 71) failed [ 401.685894][ T9354] FAT-fs (loop3): Directory bread(block 72) failed [ 401.705351][ T9354] FAT-fs (loop3): Directory bread(block 73) failed [ 401.720369][ T9331] BTRFS info (device loop0): enabling ssd optimizations [ 401.761465][ T9331] BTRFS info (device loop0): enabling free space tree [ 401.812845][ T9331] BTRFS info (device loop0): use lzo compression, level 1 [ 401.904628][ T9376] iou-wrk-9354: attempt to access beyond end of device [ 401.904628][ T9376] loop3: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 402.008865][ T9347] lo speed is unknown, defaulting to 1000 [ 402.019642][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 402.090550][ T5870] Bluetooth: hci2: command tx timeout [ 402.122885][ T5864] syz-executor: attempt to access beyond end of device [ 402.122885][ T5864] loop3: rw=2051, sector=1256, nr_sectors = 64 limit=256 [ 402.308139][ T9384] loop2: detected capacity change from 0 to 128 [ 402.325665][ T9391] loop3: detected capacity change from 0 to 8 [ 402.346903][ T9379] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 402.603189][ T9384] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 402.785957][ T9384] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 403.209363][ T5870] Bluetooth: hci4: command tx timeout [ 403.253495][ T6330] hsr_slave_0: left promiscuous mode [ 403.295989][ T6330] hsr_slave_1: left promiscuous mode [ 403.320649][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.352353][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.400588][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.421997][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.448725][ T5867] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.681528][ T6330] veth1_macvtap: left promiscuous mode [ 403.746510][ T6330] veth0_macvtap: left promiscuous mode [ 403.830429][ T6330] veth1_vlan: left promiscuous mode [ 403.857550][ T6330] veth0_vlan: left promiscuous mode [ 404.169199][ T5870] Bluetooth: hci2: command tx timeout [ 404.507209][ T9411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.611'. [ 404.882806][ T6330] team0 (unregistering): Port device team_slave_1 removed [ 404.937925][ T6330] team0 (unregistering): Port device team_slave_0 removed [ 405.300307][ T5870] Bluetooth: hci4: command tx timeout [ 405.585509][ T9289] chnl_net:caif_netlink_parms(): no params data found [ 405.734668][ T9419] loop3: detected capacity change from 0 to 1024 [ 406.598390][ T9429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.612132][ T5984] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 406.804565][ T5984] usb 3-1: Using ep0 maxpacket: 32 [ 406.838520][ T5984] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 406.868794][ T5984] usb 3-1: config 1 interface 0 has no altsetting 0 [ 406.904921][ T5984] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.40 [ 406.979847][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.025568][ T5984] usb 3-1: Product: à š [ 407.030322][ T5984] usb 3-1: Manufacturer: Ð… [ 407.034881][ T5984] usb 3-1: SerialNumber: á°Š [ 407.418965][ T5870] Bluetooth: hci4: command tx timeout [ 407.686739][ T9347] chnl_net:caif_netlink_parms(): no params data found [ 407.717730][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.741846][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.757475][ T9289] bridge_slave_0: entered allmulticast mode [ 407.771335][ T9289] bridge_slave_0: entered promiscuous mode [ 407.875634][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.899141][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.929646][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.938136][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.974157][ T9289] bridge_slave_1: entered allmulticast mode [ 408.003997][ T9289] bridge_slave_1: entered promiscuous mode [ 408.074566][ T9452] loop3: detected capacity change from 0 to 1024 [ 408.165725][ T6330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.472289][ T9289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.501142][ T5984] usbhid 3-1:1.0: can't add hid device: -71 [ 408.916057][ T5984] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 408.981930][ T5984] usb 3-1: USB disconnect, device number 14 [ 409.082205][ T9289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.329003][ T9468] loop2: detected capacity change from 0 to 512 [ 409.344484][ T6330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.407572][ T9468] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.622: bad orphan inode 13 [ 409.436416][ T9468] ext4_test_bit(bit=12, block=4) = 1 [ 409.441881][ T9468] is_bad_inode(inode)=0 [ 409.446212][ T9468] NEXT_ORPHAN(inode)=0 [ 409.450359][ T9468] max_ino=32 [ 409.453648][ T9468] i_nlink=1 [ 409.484908][ T9468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.524897][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.550745][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.578822][ T9347] bridge_slave_0: entered allmulticast mode [ 409.599359][ T9347] bridge_slave_0: entered promiscuous mode [ 409.607873][ T9468] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.622: Unrecognised inode hash code 20 [ 409.623269][ T5870] Bluetooth: hci4: command tx timeout [ 409.654951][ T9468] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.622: Corrupt directory, running e2fsck is recommended [ 409.714658][ T9289] team0: Port device team_slave_0 added [ 409.733134][ T9468] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.622: corrupted in-inode xattr: e_value out of bounds [ 409.757045][ T9478] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.622: Unrecognised inode hash code 20 [ 409.828485][ T9478] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.622: Corrupt directory, running e2fsck is recommended [ 409.835998][ T6330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.852856][ T9478] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.622: corrupted in-inode xattr: e_value out of bounds [ 409.882792][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.895792][ T9481] loop0: detected capacity change from 0 to 256 [ 409.904264][ T9479] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.622: Unrecognised inode hash code 20 [ 409.908241][ T9470] loop3: detected capacity change from 0 to 32768 [ 409.916227][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.923296][ T9473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 409.936903][ T9481] exfat: Deprecated parameter 'namecase' [ 409.968783][ T9347] bridge_slave_1: entered allmulticast mode [ 409.975863][ T9479] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.622: Corrupt directory, running e2fsck is recommended [ 410.004996][ T9479] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.622: corrupted in-inode xattr: e_value out of bounds [ 410.020506][ T9347] bridge_slave_1: entered promiscuous mode [ 410.044828][ T9289] team0: Port device team_slave_1 added [ 410.051460][ T9470] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.061946][ T9481] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 410.099829][ T9468] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.622: Unrecognised inode hash code 20 [ 410.111819][ T9468] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.622: Corrupt directory, running e2fsck is recommended [ 410.124986][ T9468] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.622: corrupted in-inode xattr: e_value out of bounds [ 410.142764][ T9478] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.622: Unrecognised inode hash code 20 [ 410.164697][ T9478] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.622: Corrupt directory, running e2fsck is recommended [ 410.180195][ T6330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.219558][ T9470] XFS (loop3): Ending clean mount [ 410.252674][ T9470] XFS (loop3): Quotacheck needed: Please wait. [ 410.467383][ T9470] XFS (loop3): Quotacheck: Done. [ 410.479090][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.492544][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.519124][ T9490] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.622: corrupted in-inode xattr: e_value out of bounds [ 410.562621][ T9470] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 410.580869][ T9289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.585952][ T9492] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.622: corrupted in-inode xattr: e_value out of bounds [ 410.607766][ T9470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.658150][ T9490] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.622: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 410.664584][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.729641][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.795064][ T9347] team0: Port device team_slave_0 added [ 410.849530][ T5865] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 410.873126][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.885731][ T5864] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.895165][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.940163][ T9289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.967915][ T5865] EXT4-fs error (device loop2): ext4_lookup:1787: inode #16: comm syz-executor: iget: bad i_size value: 880468304680 [ 410.992100][ T9347] team0: Port device team_slave_1 added [ 411.076770][ T9497] IPVS: length: 73 != 24 [ 411.161383][ T9498] loop0: detected capacity change from 0 to 736 [ 411.168790][ T9498] iso9660: Unknown parameter '•íu%pòàì  Ñ /6ATJck“ñ>“.¡:Ö„·ƒrk´˜'™kN5i‹0/„°ñ ‚aìpä(~ ±œÁ[Cù·-äFÍjâ :Ëij—Kb§ø2Çy@Q' [ 411.961388][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.979300][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.035197][ T9504] loop0: detected capacity change from 0 to 1024 [ 412.037752][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.936413][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.962330][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.045161][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.110259][ T9289] hsr_slave_0: entered promiscuous mode [ 413.117064][ T9289] hsr_slave_1: entered promiscuous mode [ 413.151406][ T9289] debugfs: 'hsr0' already exists in 'hsr' [ 413.170706][ T9289] Cannot create hsr debugfs directory [ 413.411294][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 413.594074][ T9347] hsr_slave_0: entered promiscuous mode [ 413.613462][ T9347] hsr_slave_1: entered promiscuous mode [ 413.629089][ T9347] debugfs: 'hsr0' already exists in 'hsr' [ 413.645136][ T9347] Cannot create hsr debugfs directory [ 413.758520][ T6330] bridge_slave_1: left allmulticast mode [ 413.768327][ T6330] bridge_slave_1: left promiscuous mode [ 413.778444][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.800247][ T6330] bridge_slave_0: left allmulticast mode [ 413.800410][ T9530] loop0: detected capacity change from 0 to 4096 [ 413.805939][ T6330] bridge_slave_0: left promiscuous mode [ 413.806216][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.829419][ T9530] ntfs3: Unknown parameter 'è' [ 414.175475][ T9527] loop3: detected capacity change from 0 to 32768 [ 414.240214][ T9527] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.632 (9527) [ 414.310235][ T9527] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 414.336669][ T9527] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 414.556788][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.583351][ T9527] BTRFS info (device loop3): enabling ssd optimizations [ 414.595943][ T9527] BTRFS info (device loop3): enabling free space tree [ 414.604081][ T9527] BTRFS info (device loop3): use zstd compression, level 3 [ 414.718125][ T30] audit: type=1800 audit(1757573715.118:81): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.632" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 415.156135][ T5864] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 416.370153][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 416.435044][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.459461][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.469454][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.490136][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.506649][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.573685][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.588026][ T6330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.596829][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.608109][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 416.617871][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.632661][ T9] usb 1-1: config 0 descriptor?? [ 416.644020][ T6330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.655028][ T6330] bond0 (unregistering): Released all slaves [ 417.079866][ T9] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 417.436615][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input8 [ 417.728177][ T9] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 417.741095][ T9565] loop3: detected capacity change from 0 to 2 [ 417.748165][ T9565] jffs2: rp_size unrepresentable [ 418.073210][ T9565] loop3: detected capacity change from 0 to 40427 [ 418.080485][ T9565] f2fs: Unknown parameter '/dev/video#' [ 418.568567][ T52] Bluetooth: hci1: command tx timeout [ 418.653450][ T6330] hsr_slave_0: left promiscuous mode [ 418.690646][ T9] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 418.713002][ T6330] hsr_slave_1: left promiscuous mode [ 418.730090][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.743925][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.771140][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.794681][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.857459][ T9] usb 1-1: device descriptor read/64, error -32 [ 418.991785][ T6330] veth1_macvtap: left promiscuous mode [ 418.991877][ T6330] veth0_macvtap: left promiscuous mode [ 418.992074][ T6330] veth1_vlan: left promiscuous mode [ 418.992210][ T6330] veth0_vlan: left promiscuous mode [ 419.407715][ T9579] loop3: detected capacity change from 0 to 2 [ 419.414323][ T9579] jffs2: rp_size unrepresentable [ 419.437545][ T9] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 419.674496][ T9579] loop3: detected capacity change from 0 to 40427 [ 419.682106][ T9579] f2fs: Unknown parameter '/dev/video#' [ 419.938056][ T9] usb 1-1: device descriptor read/64, error -32 [ 419.999809][ T9587] loop3: detected capacity change from 0 to 1024 [ 420.647313][ T52] Bluetooth: hci1: command tx timeout [ 420.928881][ T9] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 420.964505][ T9] usb 1-1: device descriptor read/8, error -32 [ 421.243534][ T9] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 421.279632][ T9] usb 1-1: device descriptor read/8, error -32 [ 421.286404][ T6330] team0 (unregistering): Port device team_slave_1 removed [ 421.343680][ T6330] team0 (unregistering): Port device team_slave_0 removed [ 421.390049][ T9] raw-gadget.0 gadget.0: failed to queue suspend event [ 421.417416][ T5984] usb 1-1: USB disconnect, device number 11 [ 421.586532][ T5984] raw-gadget.0 gadget.0: failed to queue reset event [ 421.657250][ T5984] raw-gadget.0 gadget.0: failed to queue resume event [ 421.727107][ T5984] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 421.735030][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 421.743215][ T5984] raw-gadget.0 gadget.0: failed to queue reset event [ 421.830294][ T5984] raw-gadget.0 gadget.0: failed to queue resume event [ 421.897637][ T5984] usb 1-1: device descriptor read/64, error -32 [ 422.007338][ T5984] raw-gadget.0 gadget.0: failed to queue suspend event [ 422.014601][ T5984] raw-gadget.0 gadget.0: failed to queue reset event [ 422.022410][ T9562] lo speed is unknown, defaulting to 1000 [ 422.092165][ T9558] raw-gadget.0 gadget.0: failed to queue disconnect event [ 422.721863][ T44] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 422.731747][ T52] Bluetooth: hci1: command tx timeout [ 422.901017][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 422.921374][ T44] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 422.944671][ T44] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 422.955547][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.975641][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 422.999327][ T44] usb 4-1: config 1 has no interface number 0 [ 423.005836][ T44] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 423.019015][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.043064][ T6330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.078309][ T44] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 423.233324][ T6330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.290569][ T9562] chnl_net:caif_netlink_parms(): no params data found [ 423.320327][ T9600] loop3: detected capacity change from 0 to 764 [ 423.333221][ T9600] iso9660: Unknown parameter '@' [ 423.352905][ T44] snd_usb_pod 4-1:1.1: set_interface failed [ 423.359679][ T44] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 423.369736][ T44] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 423.383523][ T44] usb 4-1: USB disconnect, device number 11 [ 423.582545][ T6330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.736910][ T6330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.779384][ T9289] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.530638][ T9289] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 424.549096][ T9628] pimreg: entered allmulticast mode [ 424.554545][ T9628] pimreg: left allmulticast mode [ 424.614847][ T9631] loop3: detected capacity change from 0 to 4096 [ 424.683533][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.727994][ T9632] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.736456][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.745840][ T9562] bridge_slave_0: entered allmulticast mode [ 424.773002][ T9562] bridge_slave_0: entered promiscuous mode [ 424.799720][ T9289] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.807767][ T52] Bluetooth: hci1: command tx timeout [ 424.860079][ T9289] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 424.991050][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.022626][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.045211][ T9562] bridge_slave_1: entered allmulticast mode [ 425.069308][ T9562] bridge_slave_1: entered promiscuous mode [ 426.458166][ T9562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.695465][ T9562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.747084][ T9660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 426.762682][ T9660] overlayfs: missing 'lowerdir' [ 427.001159][ T9562] team0: Port device team_slave_0 added [ 427.033933][ T9562] team0: Port device team_slave_1 added [ 427.073920][ T9667] loop0: detected capacity change from 0 to 1024 [ 427.091244][ T9667] hfsplus: Unknown parameter 'fù€hr' [ 427.176811][ T6330] dummy0: left allmulticast mode [ 427.206916][ T6330] bridge0: port 3(dummy0) entered disabled state [ 427.231043][ T6330] bridge_slave_1: left allmulticast mode [ 427.264228][ T6330] bridge_slave_1: left promiscuous mode [ 427.295364][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.324811][ T5962] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 427.342453][ T6330] bridge_slave_0: left allmulticast mode [ 427.349416][ T6330] bridge_slave_0: left promiscuous mode [ 427.355241][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.087286][ T5962] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 428.111400][ T5962] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 428.120952][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.144388][ T5962] usb 4-1: Product: syz [ 428.148683][ T5962] usb 4-1: Manufacturer: syz [ 428.153311][ T5962] usb 4-1: SerialNumber: syz [ 428.182045][ T5962] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 428.294663][ T5948] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.610017][ T6330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.621746][ T6330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.633333][ T6330] bond0 (unregistering): Released all slaves [ 428.725007][ T5941] usb 4-1: USB disconnect, device number 12 [ 428.768348][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.782309][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.816582][ T9562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.858926][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.865934][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.892508][ T9562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.367337][ T5948] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 429.386203][ T5948] ath9k_htc: Failed to initialize the device [ 429.429668][ T5941] usb 4-1: ath9k_htc: USB layer deinitialized [ 429.470510][ T9677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.669588][ T5962] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 429.694493][ T9684] hub 8-0:1.0: USB hub found [ 429.711771][ T5962] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 429.733221][ T9684] hub 8-0:1.0: 1 port detected [ 429.755839][ T9562] hsr_slave_0: entered promiscuous mode [ 429.777297][ T9562] hsr_slave_1: entered promiscuous mode [ 429.783842][ T9562] debugfs: 'hsr0' already exists in 'hsr' [ 429.810215][ T9562] Cannot create hsr debugfs directory [ 430.158509][ T6330] hsr_slave_0: left promiscuous mode [ 430.168358][ T6330] hsr_slave_1: left promiscuous mode [ 430.183491][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.201825][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.226300][ T9683] loop0: detected capacity change from 0 to 1024 [ 430.275302][ T6330] veth1_macvtap: left promiscuous mode [ 430.306107][ T6330] veth0_macvtap: left promiscuous mode [ 430.333757][ T6330] veth1_vlan: left promiscuous mode [ 430.358168][ T6330] veth0_vlan: left promiscuous mode [ 430.656958][ T9681] loop3: detected capacity change from 0 to 32768 [ 430.939915][ T1150] hfsplus: b-tree write err: -5, ino 4 [ 431.207923][ T9699] loop3: detected capacity change from 0 to 2048 [ 431.804332][ T9699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.049455][ T6330] team0 (unregistering): Port device team_slave_1 removed [ 434.134814][ T6330] team0 (unregistering): Port device team_slave_0 removed [ 434.209962][ T9721] loop0: detected capacity change from 0 to 4096 [ 434.333535][ T9722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 434.900283][ T9713] tipc: Started in network mode [ 434.905216][ T9713] tipc: Node identity ac1414aa, cluster identity 4711 [ 434.919672][ T9713] tipc: Enabled bearer , priority 10 [ 434.984245][ T9347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 435.027617][ T9347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 435.111275][ T9347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 435.186392][ T9725] loop0: detected capacity change from 0 to 32768 [ 435.220431][ T9289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.237647][ T9347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 435.624441][ T9289] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.689344][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.696592][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.764740][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.771950][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.917405][ T10] tipc: Node number set to 2886997162 [ 436.088016][ T9289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 436.104595][ T9289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.253794][ T9562] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 436.500987][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.627724][ T9562] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 436.735385][ T9562] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.883182][ T9562] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.952780][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.131935][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.139151][ T8708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.290814][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.298060][ T8708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.370508][ T9770] C: renamed from team_slave_0 (while UP) [ 437.412445][ T9770] netlink: 'syz.3.669': attribute type 3 has an invalid length. [ 437.431524][ T9770] netlink: 152 bytes leftover after parsing attributes in process `syz.3.669'. [ 437.445088][ T9770] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 437.767217][ T9289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.776512][ T9347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.907838][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.950804][ T9784] loop3: detected capacity change from 0 to 2048 [ 437.984075][ T9562] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.023520][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.030764][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.104292][ T9784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.108199][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.123617][ T8722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.219553][ T9784] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.462937][ T9562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.580028][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.626958][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.949305][ T9289] veth0_vlan: entered promiscuous mode [ 438.996469][ T9289] veth1_vlan: entered promiscuous mode [ 439.146205][ T9289] veth0_macvtap: entered promiscuous mode [ 439.180195][ T9289] veth1_macvtap: entered promiscuous mode [ 439.263580][ T9562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.328379][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.415975][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.435369][ T6354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.475325][ T6354] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.535203][ T6354] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.588708][ T8713] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.757705][ T9347] veth0_vlan: entered promiscuous mode [ 439.868058][ T9347] veth1_vlan: entered promiscuous mode [ 440.267790][ T9347] veth0_macvtap: entered promiscuous mode [ 440.323874][ T9347] veth1_macvtap: entered promiscuous mode [ 440.695846][ T6354] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.828504][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.899242][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.049256][ T6354] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.129966][ T9839] loop3: detected capacity change from 0 to 32768 [ 441.296988][ T6354] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.361190][ T1150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.374762][ T1150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.413637][ T9839] loop3: detected capacity change from 0 to 256 [ 441.440826][ T9562] veth0_vlan: entered promiscuous mode [ 441.472841][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.515521][ T1150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.627011][ T6354] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.667132][ T9839] overlayfs: failed lookup in lower (newroot/188, name='file1', err=-40): overlapping layers [ 442.128316][ T9848] loop0: detected capacity change from 0 to 32768 [ 442.155714][ T9848] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.676 (9848) [ 442.811208][ T9849] loop3: detected capacity change from 0 to 131072 [ 442.813900][ T9562] veth1_vlan: entered promiscuous mode [ 442.839938][ T9849] F2FS-fs (loop3): Test dummy encryption mode enabled [ 442.842774][ T9848] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 442.876469][ T9849] F2FS-fs (loop3): invalid crc value [ 442.882915][ T9848] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 442.963918][ T9849] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 442.995023][ T9849] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 443.094031][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.123615][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.139450][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.180469][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.190899][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.303174][ T9848] BTRFS info (device loop0): enabling ssd optimizations [ 443.344557][ T9848] BTRFS info (device loop0): enabling free space tree [ 443.375247][ T9848] BTRFS info (device loop0): use zstd compression, level 3 [ 443.458344][ T30] audit: type=1800 audit(1757573743.851:82): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.676" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 443.577231][ T9562] veth0_macvtap: entered promiscuous mode [ 443.599517][ T9876] lo speed is unknown, defaulting to 1000 [ 443.617196][ T9562] veth1_macvtap: entered promiscuous mode [ 443.780836][ T5867] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 443.986702][ T6354] bridge_slave_1: left allmulticast mode [ 444.003669][ T6354] bridge_slave_1: left promiscuous mode [ 444.011527][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.105771][ T6354] bridge_slave_0: left allmulticast mode [ 444.111483][ T6354] bridge_slave_0: left promiscuous mode [ 444.143345][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.295917][ T5870] Bluetooth: hci2: command tx timeout [ 445.389254][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'. [ 445.667360][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.673732][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.150049][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.174757][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.184929][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.194552][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.203792][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 446.247696][ T9896] loop3: detected capacity change from 0 to 2 [ 446.254545][ T9896] jffs2: rp_size unrepresentable [ 446.495627][ T9896] loop3: detected capacity change from 0 to 40427 [ 446.502720][ T9896] f2fs: Unknown parameter '/dev/video#' [ 447.365591][ T5870] Bluetooth: hci2: command tx timeout [ 447.658736][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.703449][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.752706][ T6354] bond0 (unregistering): Released all slaves [ 448.121234][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.251945][ T9902] lo speed is unknown, defaulting to 1000 [ 448.258508][ T5870] Bluetooth: hci4: command tx timeout [ 448.587981][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.164532][ T6354] hsr_slave_0: left promiscuous mode [ 449.393310][ T6354] hsr_slave_1: left promiscuous mode [ 449.418200][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.444229][ T5870] Bluetooth: hci2: command tx timeout [ 449.468249][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.495481][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.528878][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.621379][ T6354] veth1_macvtap: left promiscuous mode [ 449.630405][ T6354] veth0_macvtap: left promiscuous mode [ 449.636225][ T6354] veth1_vlan: left promiscuous mode [ 449.641693][ T6354] veth0_vlan: left promiscuous mode [ 449.848751][ T9931] loop0: detected capacity change from 0 to 256 [ 449.906453][ T9931] MINIX-fs: mounting file system with errors, running fsck is recommended [ 450.324153][ T5870] Bluetooth: hci4: command tx timeout [ 451.298799][ T6354] team0 (unregistering): Port device team_slave_1 removed [ 451.375605][ T6354] team0 (unregistering): Port device team_slave_0 removed [ 451.529666][ T5870] Bluetooth: hci2: command tx timeout [ 452.226878][ T8723] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.263901][ T8709] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.331732][ T9946] loop0: detected capacity change from 0 to 1024 [ 452.340292][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 452.391193][ T8709] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.403968][ T5870] Bluetooth: hci4: command tx timeout [ 452.410451][ T8709] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.621769][ T9953] loop3: detected capacity change from 0 to 256 [ 453.296442][ T9953] ip6gretap1: entered promiscuous mode [ 453.302165][ T9953] ip6gretap1: entered allmulticast mode [ 453.340828][ T9876] chnl_net:caif_netlink_parms(): no params data found [ 453.610561][ T9966] loop0: detected capacity change from 0 to 16 [ 453.641602][ T9902] chnl_net:caif_netlink_parms(): no params data found [ 453.682752][ T9966] erofs (device loop0): mounted with root inode @ nid 36. [ 453.690712][ T9968] loop3: detected capacity change from 0 to 512 [ 453.707242][ T9966] erofs (device loop0): bogus i_mode (4355) @ nid 46 [ 453.785913][ T9968] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 453.818452][ T9968] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.692: attempt to clear invalid blocks 2 len 1 [ 453.838517][ T9968] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 453.861478][ T9968] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.692: invalid indirect mapped block 1819239214 (level 0) [ 453.911288][ T9968] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.692: invalid indirect mapped block 1819239214 (level 1) [ 453.930551][ T9968] EXT4-fs (loop3): 1 truncate cleaned up [ 453.945628][ T9968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.000506][ T9973] loop0: detected capacity change from 0 to 2048 [ 454.036024][ T9973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.049285][ T9974] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.692: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 454.084795][ T9973] overlayfs: upper fs needs to support d_type. [ 454.094721][ T9973] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 454.101786][ T9973] overlayfs: failed to set xattr on upper [ 454.107581][ T9973] overlayfs: ...falling back to redirect_dir=nofollow. [ 454.114484][ T9973] overlayfs: ...falling back to index=off. [ 454.120438][ T9973] overlayfs: ...falling back to uuid=null. [ 454.136782][ T9876] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.146237][ T9973] 9pnet_fd: Insufficient options for proto=fd [ 454.168282][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.185670][ T30] audit: type=1800 audit(1757573754.562:83): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.693" name="file0" dev="overlay" ino=1313 res=0 errno=0 [ 454.196634][ T9876] bridge_slave_0: entered allmulticast mode [ 454.233092][ T9876] bridge_slave_0: entered promiscuous mode [ 454.240338][ T5867] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 454.241133][ T5867] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 454.268611][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.276742][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.284176][ T9876] bridge_slave_1: entered allmulticast mode [ 454.298370][ T9876] bridge_slave_1: entered promiscuous mode [ 454.410310][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.483910][ T5870] Bluetooth: hci4: command tx timeout [ 454.619488][ T9876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.647610][ T9876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.816153][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.833455][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.847945][ T9902] bridge_slave_0: entered allmulticast mode [ 454.872270][ T9902] bridge_slave_0: entered promiscuous mode [ 454.893800][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.903547][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.924210][ T9902] bridge_slave_1: entered allmulticast mode [ 454.945926][ T9902] bridge_slave_1: entered promiscuous mode [ 455.137392][ T6354] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.229192][ T9876] team0: Port device team_slave_0 added [ 455.466986][ T9876] team0: Port device team_slave_1 added [ 455.589913][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.685198][ T6354] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.744513][ T9876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.771865][ T9876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.833225][ T9876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.856600][ T9876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.873023][ T9876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.919456][ T9876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.947352][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.103344][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 456.127642][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 456.138731][ T6354] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.139669][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 456.158512][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 456.169859][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.248908][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.269237][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.284698][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.298625][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.308115][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.337949][ T9902] team0: Port device team_slave_0 added [ 456.364608][ T9990] binder: 9989:9990 ioctl b704 200000000300 returned -22 [ 456.375070][ T9990] binder: 9989:9990 ioctl c0306201 2000000002c0 returned -14 [ 456.384042][ T9990] binder: 9989:9990 ioctl 1261 2000000002c0 returned -22 [ 456.822731][ T6354] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.984705][ T9902] team0: Port device team_slave_1 added [ 457.036903][ T9876] hsr_slave_0: entered promiscuous mode [ 457.046329][ T9876] hsr_slave_1: entered promiscuous mode [ 457.064327][ T9876] debugfs: 'hsr0' already exists in 'hsr' [ 457.070091][ T9876] Cannot create hsr debugfs directory [ 457.119855][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.699'. [ 457.163464][ T9985] lo speed is unknown, defaulting to 1000 [ 457.214774][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.221779][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.255015][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.291607][ T9987] lo speed is unknown, defaulting to 1000 [ 457.310897][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.325305][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.351776][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.252946][ T5870] Bluetooth: hci1: command tx timeout [ 458.403520][ T5870] Bluetooth: hci3: command tx timeout [ 458.420428][ T9902] hsr_slave_0: entered promiscuous mode [ 458.427616][ T9902] hsr_slave_1: entered promiscuous mode [ 458.439885][ T9902] debugfs: 'hsr0' already exists in 'hsr' [ 458.446148][ T9902] Cannot create hsr debugfs directory [ 458.728810][ T6354] bridge_slave_1: left allmulticast mode [ 458.735445][ T6354] bridge_slave_1: left promiscuous mode [ 458.741916][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.756870][ T6354] bridge_slave_0: left allmulticast mode [ 458.762571][ T6354] bridge_slave_0: left promiscuous mode [ 458.768846][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.304794][T10003] loop3: detected capacity change from 0 to 65536 [ 459.386431][T10003] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 459.443870][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.459783][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.475410][T10003] XFS (loop3): Ending clean mount [ 459.477302][ T6354] bond0 (unregistering): Released all slaves [ 459.533918][T10001] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 459.548116][T10001] XFS (loop3): Unmount and run xfs_repair [ 459.563491][T10001] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 459.577698][T10001] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 459.602423][T10001] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 459.612992][T10001] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 459.621891][T10001] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 459.633703][T10001] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 459.646872][T10001] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 459.656198][T10001] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 459.667244][T10001] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 459.688403][T10001] XFS (loop3): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 459.707429][T10001] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 459.732922][T10001] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 459.772382][ T5864] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 460.219347][ T6354] hsr_slave_0: left promiscuous mode [ 460.226776][ T6354] hsr_slave_1: left promiscuous mode [ 460.243621][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.251058][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.268694][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.277847][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.308940][ T6354] veth1_macvtap: left promiscuous mode [ 460.314624][ T6354] veth0_macvtap: left promiscuous mode [ 460.320449][ T6354] veth1_vlan: left promiscuous mode [ 460.325969][ T5870] Bluetooth: hci1: command tx timeout [ 460.335111][ T6354] veth0_vlan: left promiscuous mode [ 460.484056][ T5870] Bluetooth: hci3: command tx timeout [ 461.613587][ T6354] team0 (unregistering): Port device team_slave_1 removed [ 461.669335][ T6354] team0 (unregistering): Port device team_slave_0 removed [ 462.302118][ T9985] chnl_net:caif_netlink_parms(): no params data found [ 462.403539][ T5870] Bluetooth: hci1: command tx timeout [ 462.439267][ T9987] chnl_net:caif_netlink_parms(): no params data found [ 462.629244][ T5870] Bluetooth: hci3: command tx timeout [ 462.752005][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.767957][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.853061][ T9985] bridge_slave_0: entered allmulticast mode [ 463.034432][ T9985] bridge_slave_0: entered promiscuous mode [ 463.363151][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.370351][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.391318][ T9987] bridge_slave_0: entered allmulticast mode [ 463.411940][ T9987] bridge_slave_0: entered promiscuous mode [ 463.427090][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.434532][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.441813][ T9985] bridge_slave_1: entered allmulticast mode [ 463.450012][ T9985] bridge_slave_1: entered promiscuous mode [ 463.451663][T10037] loop3: detected capacity change from 0 to 256 [ 463.466653][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.473882][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.481112][ T9987] bridge_slave_1: entered allmulticast mode [ 463.496518][T10037] MINIX-fs: mounting file system with errors, running fsck is recommended [ 463.503121][ T9987] bridge_slave_1: entered promiscuous mode [ 464.154578][ T9985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.229255][T10040] loop3: detected capacity change from 0 to 8 [ 464.502339][ T5870] Bluetooth: hci1: command tx timeout [ 464.565342][T10041] SQUASHFS error: lzo decompression failed, data probably corrupt [ 464.586212][T10041] SQUASHFS error: Failed to read block 0x71: -5 [ 464.642105][ T5870] Bluetooth: hci3: command tx timeout [ 464.652436][T10041] SQUASHFS error: lzo decompression failed, data probably corrupt [ 464.662702][T10041] SQUASHFS error: Failed to read block 0x71: -5 [ 464.697506][ T9985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.739167][ T30] audit: type=1800 audit(1757573765.083:84): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 464.752392][ T9987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.961052][ T9987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.252085][ T9985] team0: Port device team_slave_0 added [ 465.267878][ T9987] team0: Port device team_slave_0 added [ 465.279492][ T9987] team0: Port device team_slave_1 added [ 465.289205][ T9985] team0: Port device team_slave_1 added [ 465.925833][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.933238][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.959664][ T9985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.999674][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.018385][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.050278][ T9987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.145181][T10048] loop3: detected capacity change from 0 to 128 [ 466.155589][T10048] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 466.191468][T10048] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 466.202192][ T8731] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.242441][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.252580][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.299246][ T9985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.340466][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.353083][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.385306][ T9987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.479231][ T8731] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.568277][ T9985] hsr_slave_0: entered promiscuous mode [ 466.581128][ T9985] hsr_slave_1: entered promiscuous mode [ 466.588357][ T9985] debugfs: 'hsr0' already exists in 'hsr' [ 466.600637][ T9985] Cannot create hsr debugfs directory [ 466.667410][ T8731] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.705029][ T9987] hsr_slave_0: entered promiscuous mode [ 466.712321][ T9987] hsr_slave_1: entered promiscuous mode [ 466.718884][ T9987] debugfs: 'hsr0' already exists in 'hsr' [ 466.725456][ T9987] Cannot create hsr debugfs directory [ 466.794413][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 466.862574][ T8731] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.890221][ T9876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.986655][ T9876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.036978][T10061] loop3: detected capacity change from 0 to 512 [ 468.082170][ T9876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.103295][ T9876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.132736][T10061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.145547][T10061] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.415750][ T8731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.506129][ T9876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.537855][ T9902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 468.548401][ T9902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 468.621787][ T8731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.710227][ T9902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 468.724953][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.727031][ T9902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 468.796619][ T8731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.862139][ T9876] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.104073][T10080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.492414][ T8731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.573811][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.580965][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.787520][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.794768][ T8710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.806864][T10087] loop3: detected capacity change from 0 to 256 [ 469.818905][T10087] MINIX-fs: mounting file system with errors, running fsck is recommended [ 471.176411][T10091] loop3: detected capacity change from 0 to 2 [ 471.183261][T10091] jffs2: rp_size unrepresentable [ 471.428299][T10091] loop3: detected capacity change from 0 to 40427 [ 471.435407][T10091] f2fs: Unknown parameter '/dev/video#' [ 471.507257][ T8731] bridge_slave_1: left allmulticast mode [ 471.514272][ T8731] bridge_slave_1: left promiscuous mode [ 471.520205][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.600754][ T8731] bridge_slave_0: left allmulticast mode [ 471.615857][ T8731] bridge_slave_0: left promiscuous mode [ 471.631890][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.666457][ T8731] bridge_slave_1: left allmulticast mode [ 471.686431][ T8731] bridge_slave_1: left promiscuous mode [ 471.913340][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.930028][ T8731] bridge_slave_0: left allmulticast mode [ 471.941284][ T8731] bridge_slave_0: left promiscuous mode [ 471.947092][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.929477][ T8731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.942331][ T8731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.953279][ T8731] bond0 (unregistering): Released all slaves [ 473.324170][ T8731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.335379][ T8731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.346319][ T8731] bond0 (unregistering): Released all slaves [ 473.360777][ T8731] bond1 (unregistering): Released all slaves [ 473.377531][ T8731] bond2 (unregistering): Released all slaves [ 473.437175][ T9987] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 473.567885][ T9987] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 473.687441][ T9987] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 473.699009][ T8731] IPVS: stopping backup sync thread 8989 ... [ 473.839488][ T9987] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 473.880212][ T9902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.969675][T10103] lo speed is unknown, defaulting to 1000 [ 473.978410][ T9985] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 474.041443][ T9985] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 474.055036][ T9985] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 474.069049][ T9985] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 474.113716][ T9876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.132670][ T9902] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.221680][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 474.250367][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.257649][ T8722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.334697][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.341927][ T8722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.407881][ T8731] hsr_slave_0: left promiscuous mode [ 474.420455][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.431825][ T8731] hsr_slave_1: left promiscuous mode [ 474.436106][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.438108][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.453594][ T24] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 474.461791][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.464522][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.480085][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.488785][ T24] usb 4-1: config 0 descriptor?? [ 474.496272][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.516135][ T8731] hsr_slave_0: left promiscuous mode [ 474.522705][ T8731] hsr_slave_1: left promiscuous mode [ 474.528814][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.536359][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.547139][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.555189][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.607018][ T8731] veth1_macvtap: left promiscuous mode [ 474.613201][ T8731] veth0_macvtap: left promiscuous mode [ 474.618969][ T8731] veth1_vlan: left promiscuous mode [ 474.624890][ T8731] veth0_vlan: left promiscuous mode [ 474.632178][ T8731] veth1_macvtap: left promiscuous mode [ 474.637795][ T8731] veth0_macvtap: left promiscuous mode [ 474.644631][ T8731] veth1_vlan: left promiscuous mode [ 474.650001][ T8731] veth0_vlan: left promiscuous mode [ 475.301948][T10104] loop3: detected capacity change from 0 to 32768 [ 475.397092][T10104] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 475.510501][T10104] XFS (loop3): Ending clean mount [ 475.646762][ T8731] team0 (unregistering): Port device team_slave_1 removed [ 475.713095][ T8731] team0 (unregistering): Port device team_slave_0 removed [ 476.889633][ T8731] team0 (unregistering): Port device team_slave_1 removed [ 476.945884][ T8731] team0 (unregistering): Port device team_slave_0 removed [ 477.986569][ T9876] veth0_vlan: entered promiscuous mode [ 478.054157][ T9985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.147584][ T9876] veth1_vlan: entered promiscuous mode [ 478.188182][ T9987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.241173][ T9985] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.277726][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 478.287253][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 478.323369][ T5864] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 478.365381][ T24] usb 4-1: USB disconnect, device number 13 [ 478.419566][ T9987] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.447888][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.455115][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.546219][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.553548][ T8713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.598671][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.605941][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.645588][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.652816][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.687646][ T9902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.848222][ T9876] veth0_macvtap: entered promiscuous mode [ 479.098340][ T9876] veth1_macvtap: entered promiscuous mode [ 479.835628][ T9876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.963181][ T9876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.064756][ T8731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.124853][ T8731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.178680][ T8710] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.198810][ T8710] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.373424][ T9902] veth0_vlan: entered promiscuous mode [ 480.468537][T10153] loop3: detected capacity change from 0 to 4096 [ 480.489496][ T9902] veth1_vlan: entered promiscuous mode [ 480.528419][T10153] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 480.651575][ T9985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.746625][T10153] ntfs3(loop3): ino=0, attr_set_size [ 480.792265][T10153] ntfs3(loop3): ino=0, attr_set_size [ 480.800037][T10153] ntfs3(loop3): ino=0, attr_set_size [ 480.856727][T10153] ntfs3(loop3): ino=0, attr_set_size [ 480.913808][ T9987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.548831][ T8710] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.947770][ T9902] veth0_macvtap: entered promiscuous mode [ 482.137364][ T8710] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.181141][ T9592] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 482.225270][ T9902] veth1_macvtap: entered promiscuous mode [ 482.347051][ T8710] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.352885][ T9592] usb 4-1: config 4 has an invalid interface number: 88 but max is 1 [ 482.383653][ T9592] usb 4-1: config 4 has an invalid interface number: 29 but max is 1 [ 482.412905][ T9592] usb 4-1: config 4 has no interface number 0 [ 482.419091][ T9592] usb 4-1: config 4 has no interface number 1 [ 482.438553][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.453818][ T9592] usb 4-1: config 4 interface 88 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 482.474566][ T9592] usb 4-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 482.487394][ T9592] usb 4-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 482.499354][ T9592] usb 4-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.514990][ T9592] usb 4-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 482.527036][ T9592] usb 4-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 482.538442][ T9592] usb 4-1: config 4 interface 88 has no altsetting 0 [ 482.545545][ T9592] usb 4-1: config 4 interface 29 has no altsetting 0 [ 482.555365][ T9592] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 482.558473][ T8710] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.575095][ T9592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.575125][ T9592] usb 4-1: Product: syz [ 482.575142][ T9592] usb 4-1: Manufacturer: syz [ 482.575159][ T9592] usb 4-1: SerialNumber: syz [ 482.598356][T10177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 482.703948][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.809805][ T8723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.877149][ T9985] veth0_vlan: entered promiscuous mode [ 482.916312][ T8723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.004961][ T9592] chaoskey 4-1:4.29: Unable to register with hwrng [ 483.019296][ T8723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.042908][ T9592] usb 4-1: USB disconnect, device number 14 [ 483.050648][ T8723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.065435][ T9985] veth1_vlan: entered promiscuous mode [ 483.203023][ T9987] veth0_vlan: entered promiscuous mode [ 483.275441][ T9987] veth1_vlan: entered promiscuous mode [ 483.456092][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.469500][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.480837][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.492523][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.502621][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.568665][ T9985] veth0_macvtap: entered promiscuous mode [ 483.587561][ T9985] veth1_macvtap: entered promiscuous mode [ 483.613485][ T8710] bridge_slave_1: left allmulticast mode [ 483.619206][ T8710] bridge_slave_1: left promiscuous mode [ 483.643836][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.663248][ T8710] bridge_slave_0: left allmulticast mode [ 483.668980][ T8710] bridge_slave_0: left promiscuous mode [ 483.675863][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.102116][ T8710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.113010][ T8710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.125804][ T8710] bond0 (unregistering): Released all slaves [ 484.235782][ T9987] veth0_macvtap: entered promiscuous mode [ 484.429619][T10210] loop3: detected capacity change from 0 to 512 [ 484.434401][ T9987] veth1_macvtap: entered promiscuous mode [ 484.468553][T10210] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 484.550495][T10210] EXT4-fs (loop3): 1 truncate cleaned up [ 484.580419][T10210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.611325][T10198] lo speed is unknown, defaulting to 1000 [ 484.621438][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.677115][ T8710] hsr_slave_0: left promiscuous mode [ 484.684582][ T8710] hsr_slave_1: left promiscuous mode [ 484.711743][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.750189][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.764385][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.791189][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.813475][T10222] EXT4-fs (loop3): shut down requested (2) [ 484.857931][ T8710] veth1_macvtap: left promiscuous mode [ 484.880548][ T8710] veth0_macvtap: left promiscuous mode [ 484.887257][ T8710] veth1_vlan: left promiscuous mode [ 484.903600][ T8710] veth0_vlan: left promiscuous mode [ 485.601392][ T5870] Bluetooth: hci2: command tx timeout [ 485.632011][ T8710] team0 (unregistering): Port device team_slave_1 removed [ 485.683475][ T8710] team0 (unregistering): Port device team_slave_0 removed [ 486.249899][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.278266][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.300028][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.320736][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.328532][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.428579][T10210] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 486.517538][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.569279][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.608768][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.638842][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.689949][ T8731] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.699654][ T8723] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.715788][T10228] lo speed is unknown, defaulting to 1000 [ 486.722586][ T6354] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.798963][ T6354] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.171227][T10237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.457315][ T8731] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.497214][T10243] loop3: detected capacity change from 0 to 8 [ 487.501222][ T8731] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.690449][ T5870] Bluetooth: hci2: command tx timeout [ 487.778398][ T8731] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.838406][ T8731] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.910745][T10244] SQUASHFS error: lzo decompression failed, data probably corrupt [ 487.929496][T10244] SQUASHFS error: Failed to read block 0x71: -5 [ 487.942604][T10244] SQUASHFS error: lzo decompression failed, data probably corrupt [ 487.959380][T10244] SQUASHFS error: Failed to read block 0x71: -5 [ 487.989644][ T30] audit: type=1800 audit(1757573788.396:85): pid=10244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.725" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 488.399390][ T5870] Bluetooth: hci4: command tx timeout [ 489.597982][T10228] chnl_net:caif_netlink_parms(): no params data found [ 489.759223][ T5870] Bluetooth: hci2: command tx timeout [ 490.556974][ T5870] Bluetooth: hci4: command tx timeout [ 490.836630][ T8710] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.471122][ T8710] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.520049][T10198] chnl_net:caif_netlink_parms(): no params data found [ 491.839577][ T5870] Bluetooth: hci2: command tx timeout [ 491.852723][ T8710] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.928747][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.945904][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.958278][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.959334][T10278] loop3: detected capacity change from 0 to 32768 [ 491.979913][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.991276][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.323700][ T8710] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.639798][ T52] Bluetooth: hci4: command tx timeout [ 493.049971][T10228] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.057189][T10228] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.136835][T10228] bridge_slave_0: entered allmulticast mode [ 493.181625][T10228] bridge_slave_0: entered promiscuous mode [ 493.219879][T10228] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.227063][T10228] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.279461][T10228] bridge_slave_1: entered allmulticast mode [ 493.308853][T10228] bridge_slave_1: entered promiscuous mode [ 493.411712][T10288] lo speed is unknown, defaulting to 1000 [ 493.412775][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.432377][T10198] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.457826][T10198] bridge_slave_0: entered allmulticast mode [ 493.481940][T10198] bridge_slave_0: entered promiscuous mode [ 493.484385][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.501643][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.535223][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.557563][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.567600][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.652117][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.673577][T10198] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.683903][T10198] bridge_slave_1: entered allmulticast mode [ 493.696970][T10198] bridge_slave_1: entered promiscuous mode [ 493.745148][T10228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.917428][T10228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.939838][T10198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.985449][T10198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.086263][ T52] Bluetooth: hci1: command tx timeout [ 494.089191][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 494.117629][T10228] team0: Port device team_slave_0 added [ 494.185884][T10198] team0: Port device team_slave_0 added [ 494.204703][T10228] team0: Port device team_slave_1 added [ 494.233338][T10198] team0: Port device team_slave_1 added [ 494.275824][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 494.313389][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.322829][ T8710] bridge_slave_1: left allmulticast mode [ 494.336667][ T8710] bridge_slave_1: left promiscuous mode [ 494.344264][ T10] usb 4-1: Product: syz [ 494.355729][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.364938][ T10] usb 4-1: Manufacturer: syz [ 494.374584][ T10] usb 4-1: SerialNumber: syz [ 494.386309][ T8710] bridge_slave_0: left allmulticast mode [ 494.414676][ T8710] bridge_slave_0: left promiscuous mode [ 494.421136][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.659645][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 494.664269][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.730'. [ 494.680189][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 494.728589][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 494.741287][ T52] Bluetooth: hci4: command tx timeout [ 494.755889][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 494.797627][ T10] usb 4-1: USB disconnect, device number 15 [ 495.166985][ T8710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.178096][ T8710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.188855][ T8710] bond0 (unregistering): Released all slaves [ 495.204456][T10308] lo speed is unknown, defaulting to 1000 [ 495.414705][T10198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.423889][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.453428][T10198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.468057][T10198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.475299][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.507097][T10198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.619001][ T52] Bluetooth: hci3: command tx timeout [ 495.713880][T10228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.721931][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.748972][T10228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.769504][T10228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.776515][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.803375][T10228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.822177][T10288] chnl_net:caif_netlink_parms(): no params data found [ 496.119092][ T8710] hsr_slave_0: left promiscuous mode [ 496.125349][ T8710] hsr_slave_1: left promiscuous mode [ 496.132458][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.143098][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.151954][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.160086][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.173838][ T52] Bluetooth: hci1: command tx timeout [ 496.201450][ T8710] veth1_macvtap: left promiscuous mode [ 496.209816][ T8710] veth0_macvtap: left promiscuous mode [ 496.215888][ T8710] veth1_vlan: left promiscuous mode [ 496.224016][ T8710] veth0_vlan: left promiscuous mode [ 497.115644][ T8710] team0 (unregistering): Port device team_slave_1 removed [ 497.294482][ T8710] team0 (unregistering): Port device team_slave_0 removed [ 497.678362][ T52] Bluetooth: hci3: command tx timeout [ 497.957656][T10350] loop3: detected capacity change from 0 to 2048 [ 498.036860][T10350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.238436][ T52] Bluetooth: hci1: command tx timeout [ 498.467012][T10198] hsr_slave_0: entered promiscuous mode [ 498.474460][T10198] hsr_slave_1: entered promiscuous mode [ 498.494010][T10228] hsr_slave_0: entered promiscuous mode [ 498.506016][T10228] hsr_slave_1: entered promiscuous mode [ 498.516746][T10228] debugfs: 'hsr0' already exists in 'hsr' [ 498.525800][T10228] Cannot create hsr debugfs directory [ 498.773664][T10288] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.784689][T10288] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.792953][T10288] bridge_slave_0: entered allmulticast mode [ 498.805156][T10288] bridge_slave_0: entered promiscuous mode [ 498.881984][ T8709] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 498.903716][ T8709] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 622 with error 28 [ 498.922577][ T8709] EXT4-fs (loop3): This should not happen!! Data will be lost [ 498.922577][ T8709] [ 498.933528][ T8709] EXT4-fs (loop3): Total free blocks count 0 [ 498.944970][ T8709] EXT4-fs (loop3): Free/Dirty block details [ 498.957599][ T8709] EXT4-fs (loop3): free_blocks=2415919504 [ 498.967752][ T8709] EXT4-fs (loop3): dirty_blocks=624 [ 498.967814][T10288] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.983966][ T8709] EXT4-fs (loop3): Block reservation details [ 498.984121][T10288] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.997310][T10288] bridge_slave_1: entered allmulticast mode [ 499.004287][ T8709] EXT4-fs (loop3): i_reserved_data_blocks=39 [ 499.006534][T10288] bridge_slave_1: entered promiscuous mode [ 499.111810][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.227335][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 499.321581][T10288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.350123][T10288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.413508][T10308] chnl_net:caif_netlink_parms(): no params data found [ 499.931241][ T52] Bluetooth: hci3: command tx timeout [ 500.083109][ T8710] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.318446][ T52] Bluetooth: hci1: command tx timeout [ 500.510620][T10288] team0: Port device team_slave_0 added [ 500.587454][T10288] team0: Port device team_slave_1 added [ 500.740904][ T8710] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.916145][T10382] loop3: detected capacity change from 0 to 1024 [ 500.923798][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.953080][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.962785][T10308] bridge_slave_0: entered allmulticast mode [ 500.971297][T10308] bridge_slave_0: entered promiscuous mode [ 500.980155][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.987328][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.001235][T10308] bridge_slave_1: entered allmulticast mode [ 501.009517][T10308] bridge_slave_1: entered promiscuous mode [ 501.053827][ T8710] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.122254][T10288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.144923][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.189605][T10288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.206961][T10288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.215791][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.732449][T10288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.814030][ T8710] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.876848][T10308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.015030][ T52] Bluetooth: hci3: command tx timeout [ 502.034509][T10308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.419806][T10308] team0: Port device team_slave_0 added [ 502.449609][T10288] hsr_slave_0: entered promiscuous mode [ 502.456231][T10288] hsr_slave_1: entered promiscuous mode [ 502.489304][T10288] debugfs: 'hsr0' already exists in 'hsr' [ 502.495161][T10288] Cannot create hsr debugfs directory [ 502.511604][T10308] team0: Port device team_slave_1 added [ 502.593167][T10403] loop3: detected capacity change from 0 to 8 [ 502.927583][T10404] SQUASHFS error: lzo decompression failed, data probably corrupt [ 502.938636][T10404] SQUASHFS error: Failed to read block 0x71: -5 [ 502.956527][T10404] SQUASHFS error: lzo decompression failed, data probably corrupt [ 502.967691][T10404] SQUASHFS error: Failed to read block 0x71: -5 [ 502.987808][ T30] audit: type=1800 audit(1757573803.398:86): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.740" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 503.434418][T10308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.452938][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.486588][T10308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.570572][T10308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.584244][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.623894][T10308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.806540][ T8710] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.857936][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 503.969201][ T8710] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.038211][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 504.054239][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 504.060647][T10308] hsr_slave_0: entered promiscuous mode [ 504.072679][T10308] hsr_slave_1: entered promiscuous mode [ 504.077272][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.088531][T10308] debugfs: 'hsr0' already exists in 'hsr' [ 504.098171][T10308] Cannot create hsr debugfs directory [ 504.135069][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 504.155202][ T9] pvrusb2: ********** [ 504.163003][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 504.181504][ T9] pvrusb2: Important functionality might not be entirely working. [ 504.189544][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 504.207812][ T9] pvrusb2: ********** [ 504.238965][ T8710] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.340826][ T2348] pvrusb2: Invalid write control endpoint [ 504.398811][ T8710] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.500156][ T2348] pvrusb2: Invalid write control endpoint [ 504.506207][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 504.540137][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 504.577727][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 504.589815][ T2348] pvrusb2: Device being rendered inoperable [ 504.594792][T10198] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 504.610568][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 504.623252][T10198] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 504.631048][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 504.662042][T10198] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 504.677899][ T2348] pvrusb2: Attached sub-driver cx25840 [ 504.683673][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 504.712495][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 504.745482][T10198] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 504.908169][T10432] pvrusb2: Attempted to execute control transfer when device not ok [ 504.940490][T10228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 504.962846][T10228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 504.973736][ T8710] bridge_slave_1: left allmulticast mode [ 504.982966][ T8710] bridge_slave_1: left promiscuous mode [ 504.989246][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.000375][ T8710] bridge_slave_0: left allmulticast mode [ 505.006060][ T8710] bridge_slave_0: left promiscuous mode [ 505.012034][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.024103][ T8710] bridge_slave_1: left allmulticast mode [ 505.031755][ T8710] bridge_slave_1: left promiscuous mode [ 505.040503][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.051605][ T8710] bridge_slave_0: left allmulticast mode [ 505.057766][ T8710] bridge_slave_0: left promiscuous mode [ 505.063496][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.555083][ T8710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.566786][ T8710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.577123][ T8710] bond0 (unregistering): Released all slaves [ 505.986694][ T8710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.001359][ T8710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.011952][ T8710] bond0 (unregistering): Released all slaves [ 506.032186][T10228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.169041][T10228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 506.525000][ T8710] hsr_slave_0: left promiscuous mode [ 506.532276][ T8710] hsr_slave_1: left promiscuous mode [ 506.538732][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.546546][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.555443][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.567501][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.580857][ T8710] hsr_slave_0: left promiscuous mode [ 506.587028][ T8710] hsr_slave_1: left promiscuous mode [ 506.593095][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.601425][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.609440][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.616893][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.649739][ T9949] usb 4-1: USB disconnect, device number 16 [ 506.744356][ T8710] veth1_macvtap: left promiscuous mode [ 506.753920][ T8710] veth0_macvtap: left promiscuous mode [ 506.761444][ T8710] veth1_vlan: left promiscuous mode [ 506.766835][ T8710] veth0_vlan: left promiscuous mode [ 506.776697][ T8710] veth1_macvtap: left promiscuous mode [ 506.782413][ T8710] veth0_macvtap: left promiscuous mode [ 506.789242][T10440] loop3: detected capacity change from 0 to 8 [ 506.794355][ T8710] veth1_vlan: left promiscuous mode [ 506.803076][ T8710] veth0_vlan: left promiscuous mode [ 506.965804][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.972535][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.137928][T10441] SQUASHFS error: lzo decompression failed, data probably corrupt [ 507.147575][T10441] SQUASHFS error: Failed to read block 0x71: -5 [ 507.173685][T10441] SQUASHFS error: lzo decompression failed, data probably corrupt [ 507.184526][T10441] SQUASHFS error: Failed to read block 0x71: -5 [ 507.195824][ T30] audit: type=1800 audit(1757573807.608:87): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.743" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 508.085270][ T8710] team0 (unregistering): Port device team_slave_1 removed [ 508.149837][ T8710] team0 (unregistering): Port device team_slave_0 removed [ 510.007504][ T8710] team0 (unregistering): Port device team_slave_1 removed [ 510.114680][ T8710] team0 (unregistering): Port device team_slave_0 removed [ 512.399058][T10198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.422049][T10228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.535411][T10198] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.668509][T10228] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.682630][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.689882][ T8713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.706032][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.713295][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.750404][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.757637][ T8713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.774567][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.781967][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.817616][ T931] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 512.966450][ T931] usb 4-1: device descriptor read/64, error -71 [ 513.239743][ T931] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 513.269017][T10288] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 513.327777][T10288] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 513.390310][ T931] usb 4-1: device descriptor read/64, error -71 [ 513.431230][T10288] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 513.519820][T10288] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 513.527122][ T931] usb usb4-port1: attempt power cycle [ 513.680893][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.745318][T10308] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 513.774257][T10308] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 513.788147][T10308] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 513.836077][T10308] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 513.897145][ T931] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 513.931280][ T931] usb 4-1: device descriptor read/8, error -71 [ 513.972188][T10228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.112795][T10288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.161501][T10308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.194057][T10288] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.197386][ T931] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 514.235258][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.242439][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.252629][ T931] usb 4-1: device descriptor read/8, error -71 [ 514.269913][T10308] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.301092][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.308330][ T8709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.322975][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.330193][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.354186][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.361411][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.378536][ T931] usb usb4-port1: unable to enumerate USB device [ 514.542614][T10198] veth0_vlan: entered promiscuous mode [ 514.594555][T10198] veth1_vlan: entered promiscuous mode [ 514.793768][T10198] veth0_macvtap: entered promiscuous mode [ 514.823895][T10198] veth1_macvtap: entered promiscuous mode [ 514.857886][T10228] veth0_vlan: entered promiscuous mode [ 514.923658][T10228] veth1_vlan: entered promiscuous mode [ 514.943255][T10198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.980544][T10198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.033603][ T8710] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.045476][ T8710] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.081069][ T8731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.090267][ T8731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.145138][T10228] veth0_macvtap: entered promiscuous mode [ 515.157935][T10308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.172911][T10228] veth1_macvtap: entered promiscuous mode [ 515.224993][T10288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.355373][T10228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.413309][T10228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.474713][ T8710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.509564][ T8710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.545519][ T8733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.675459][ T8733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.102065][ T8708] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.274695][ T8708] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.375722][ T8708] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.440602][T10308] veth0_vlan: entered promiscuous mode [ 516.455720][T10288] veth0_vlan: entered promiscuous mode [ 516.485787][ T8708] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.509038][T10288] veth1_vlan: entered promiscuous mode [ 516.551423][T10308] veth1_vlan: entered promiscuous mode [ 516.635984][T10288] veth0_macvtap: entered promiscuous mode [ 516.652140][T10288] veth1_macvtap: entered promiscuous mode [ 516.684165][T10308] veth0_macvtap: entered promiscuous mode [ 516.735245][T10308] veth1_macvtap: entered promiscuous mode [ 516.749527][T10288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.763300][T10288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.833685][T10308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.872322][ T8733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.898549][ T8733] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.029062][T10308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.050146][ T8733] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.060455][ T8733] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.078702][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.751'. [ 517.111485][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.751'. [ 517.123161][ T8709] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.140611][ T8709] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.202507][ T8709] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.222078][ T8709] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.238257][T10537] loop3: detected capacity change from 0 to 512 [ 517.251070][T10537] EXT4-fs: Ignoring removed i_version option [ 517.298825][T10537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 517.352454][ T8708] bridge_slave_1: left allmulticast mode [ 517.377775][ T8708] bridge_slave_1: left promiscuous mode [ 517.395432][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.412842][T10537] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 517.429144][ T8708] bridge_slave_0: left allmulticast mode [ 517.434835][ T8708] bridge_slave_0: left promiscuous mode [ 517.451748][T10537] EXT4-fs (loop3): 1 truncate cleaned up [ 517.457896][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.469230][T10537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.545791][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 517.561828][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 517.572899][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 517.585468][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 517.600066][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 517.780313][ T5864] EXT4-fs warning (device loop3): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting [ 517.806211][ T5864] ------------[ cut here ]------------ [ 517.811761][ T5864] WARNING: fs/ext4/xattr.c:1470 at ext4_xattr_inode_lookup_create+0xa85/0x1c20, CPU#0: syz-executor/5864 [ 517.823341][ T5864] Modules linked in: [ 517.828015][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 517.838497][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.848770][ T5864] RIP: 0010:ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 517.855996][ T5864] Code: 8b 74 24 10 e9 d4 03 00 00 e8 17 a4 39 ff 48 89 df 48 c7 c6 d7 23 b8 8d ba bd 05 00 00 48 c7 c1 80 e1 bf 8b e8 ac 24 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 517.876035][ T5864] RSP: 0018:ffffc900041df3e0 EFLAGS: 00010246 [ 517.882156][ T5864] RAX: d227198f46366b00 RBX: ffff88807aaac000 RCX: d227198f46366b00 [ 517.890402][ T5864] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 517.898514][ T5864] RBP: ffffc900041df570 R08: ffffc900041defc7 R09: 1ffff9200083bdf8 [ 517.906723][ T5864] R10: dffffc0000000000 R11: fffff5200083bdf9 R12: 1ffff9200083be90 [ 517.914759][ T5864] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880593a1f70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 517.923595][ T5864] FS: 0000555557511500(0000) GS:ffff8881259f0000(0000) knlGS:0000000000000000 [ 517.932957][ T5864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.939657][ T5864] CR2: 00007fb49a705000 CR3: 00000000732be000 CR4: 00000000003526f0 [ 517.947730][ T5864] Call Trace: [ 517.951455][ T5864] [ 517.954463][ T5864] ? __pfx___might_resched+0x10/0x10 [ 517.959921][ T5864] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 517.966829][ T5864] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 517.972415][ T5864] ext4_xattr_block_set+0x223/0x2ac0 [ 517.977862][ T5864] ? __pfx___might_resched+0x10/0x10 [ 517.983220][ T5864] ? __pfx_check_xattrs+0x10/0x10 [ 517.989162][ T5864] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 517.994939][ T5864] ? ext4_xattr_block_find+0x2d4/0x350 [ 518.001834][ T5864] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 518.008577][ T5864] __ext4_expand_extra_isize+0x30d/0x400 [ 518.014283][ T5864] __ext4_mark_inode_dirty+0x46c/0x700 [ 518.019882][ T5864] ext4_dirty_inode+0xd0/0x110 [ 518.024692][ T5864] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 518.030195][ T5864] __mark_inode_dirty+0x2e9/0xe10 [ 518.035262][ T5864] iput+0x36b/0xc40 [ 518.039553][ T5864] __dentry_kill+0x209/0x660 [ 518.044199][ T5864] ? shrink_kill+0x8d/0x2c0 [ 518.048857][ T5864] shrink_kill+0xa9/0x2c0 [ 518.053231][ T5864] shrink_dentry_list+0x2e0/0x5e0 [ 518.058397][ T5864] shrink_dcache_parent+0xa1/0x2c0 [ 518.063563][ T5864] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 518.069399][ T5864] ? call_rcu+0x6ff/0x9c0 [ 518.073782][ T5864] do_one_tree+0x23/0xe0 [ 518.079184][ T5864] shrink_dcache_for_umount+0xa0/0x170 [ 518.084702][ T5864] generic_shutdown_super+0x67/0x2c0 [ 518.090449][ T5864] kill_block_super+0x44/0x90 [ 518.095187][ T5864] ext4_kill_sb+0x68/0xb0 [ 518.099645][ T5864] deactivate_locked_super+0xbc/0x130 [ 518.105057][ T5864] cleanup_mnt+0x425/0x4c0 [ 518.109583][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.114834][ T5864] task_work_run+0x1d4/0x260 [ 518.119547][ T5864] ? __pfx_task_work_run+0x10/0x10 [ 518.124696][ T5864] ? __x64_sys_umount+0x122/0x160 [ 518.129818][ T5864] ? exit_to_user_mode_loop+0x40/0x130 [ 518.135320][ T5864] exit_to_user_mode_loop+0xec/0x130 [ 518.140739][ T5864] do_syscall_64+0x2bd/0xfa0 [ 518.145363][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.150661][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.157559][ T5864] ? clear_bhb_loop+0x60/0xb0 [ 518.162281][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.168311][ T5864] RIP: 0033:0x7ff87778fed7 [ 518.172793][ T5864] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 518.192540][ T5864] RSP: 002b:00007ffd3ab64328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 518.201191][ T5864] RAX: 0000000000000000 RBX: 00007ff877811c05 RCX: 00007ff87778fed7 [ 518.210140][ T5864] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3ab643e0 [ 518.218307][ T5864] RBP: 00007ffd3ab643e0 R08: 0000000000000000 R09: 0000000000000000 [ 518.226387][ T5864] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3ab65470 [ 518.234398][ T5864] R13: 00007ff877811c05 R14: 000000000007e657 R15: 00007ffd3ab654b0 [ 518.243940][ T5864] [ 518.247300][ T5864] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 518.254614][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 518.264074][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.274137][ T5864] Call Trace: [ 518.277424][ T5864] [ 518.280395][ T5864] dump_stack_lvl+0x99/0x250 [ 518.284997][ T5864] ? __asan_memcpy+0x40/0x70 [ 518.289592][ T5864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.294795][ T5864] ? __pfx__printk+0x10/0x10 [ 518.299408][ T5864] vpanic+0x237/0x6d0 [ 518.303485][ T5864] ? __pfx_vpanic+0x10/0x10 [ 518.307997][ T5864] ? is_bpf_text_address+0x292/0x2b0 [ 518.313320][ T5864] ? is_bpf_text_address+0x26/0x2b0 [ 518.318568][ T5864] panic+0xb9/0xc0 [ 518.322315][ T5864] ? __pfx_panic+0x10/0x10 [ 518.326768][ T5864] __warn+0x334/0x4c0 [ 518.330773][ T5864] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 518.337149][ T5864] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 518.343534][ T5864] report_bug+0x2be/0x4f0 [ 518.347913][ T5864] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 518.354278][ T5864] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 518.360639][ T5864] ? ext4_xattr_inode_lookup_create+0xa87/0x1c20 [ 518.367001][ T5864] handle_bug+0x84/0x160 [ 518.371260][ T5864] exc_invalid_op+0x1a/0x50 [ 518.375781][ T5864] asm_exc_invalid_op+0x1a/0x20 [ 518.380655][ T5864] RIP: 0010:ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 518.387614][ T5864] Code: 8b 74 24 10 e9 d4 03 00 00 e8 17 a4 39 ff 48 89 df 48 c7 c6 d7 23 b8 8d ba bd 05 00 00 48 c7 c1 80 e1 bf 8b e8 ac 24 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 518.407230][ T5864] RSP: 0018:ffffc900041df3e0 EFLAGS: 00010246 [ 518.413316][ T5864] RAX: d227198f46366b00 RBX: ffff88807aaac000 RCX: d227198f46366b00 [ 518.421311][ T5864] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 518.429301][ T5864] RBP: ffffc900041df570 R08: ffffc900041defc7 R09: 1ffff9200083bdf8 [ 518.437283][ T5864] R10: dffffc0000000000 R11: fffff5200083bdf9 R12: 1ffff9200083be90 [ 518.445352][ T5864] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880593a1f70 [ 518.453370][ T5864] ? __pfx___might_resched+0x10/0x10 [ 518.458686][ T5864] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 518.465301][ T5864] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 518.470722][ T5864] ext4_xattr_block_set+0x223/0x2ac0 [ 518.476059][ T5864] ? __pfx___might_resched+0x10/0x10 [ 518.481397][ T5864] ? __pfx_check_xattrs+0x10/0x10 [ 518.486462][ T5864] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 518.492218][ T5864] ? ext4_xattr_block_find+0x2d4/0x350 [ 518.497700][ T5864] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 518.503652][ T5864] __ext4_expand_extra_isize+0x30d/0x400 [ 518.510884][ T5864] __ext4_mark_inode_dirty+0x46c/0x700 [ 518.516376][ T5864] ext4_dirty_inode+0xd0/0x110 [ 518.521159][ T5864] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 518.526549][ T5864] __mark_inode_dirty+0x2e9/0xe10 [ 518.531591][ T5864] iput+0x36b/0xc40 [ 518.535421][ T5864] __dentry_kill+0x209/0x660 [ 518.540035][ T5864] ? shrink_kill+0x8d/0x2c0 [ 518.544552][ T5864] shrink_kill+0xa9/0x2c0 [ 518.548896][ T5864] shrink_dentry_list+0x2e0/0x5e0 [ 518.553942][ T5864] shrink_dcache_parent+0xa1/0x2c0 [ 518.559075][ T5864] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 518.564810][ T5864] ? call_rcu+0x6ff/0x9c0 [ 518.569156][ T5864] do_one_tree+0x23/0xe0 [ 518.573408][ T5864] shrink_dcache_for_umount+0xa0/0x170 [ 518.578874][ T5864] generic_shutdown_super+0x67/0x2c0 [ 518.584275][ T5864] kill_block_super+0x44/0x90 [ 518.588985][ T5864] ext4_kill_sb+0x68/0xb0 [ 518.593335][ T5864] deactivate_locked_super+0xbc/0x130 [ 518.598718][ T5864] cleanup_mnt+0x425/0x4c0 [ 518.603147][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.608368][ T5864] task_work_run+0x1d4/0x260 [ 518.613078][ T5864] ? __pfx_task_work_run+0x10/0x10 [ 518.618228][ T5864] ? __x64_sys_umount+0x122/0x160 [ 518.623289][ T5864] ? exit_to_user_mode_loop+0x40/0x130 [ 518.628772][ T5864] exit_to_user_mode_loop+0xec/0x130 [ 518.634083][ T5864] do_syscall_64+0x2bd/0xfa0 [ 518.638690][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.643915][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.650027][ T5864] ? clear_bhb_loop+0x60/0xb0 [ 518.654721][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.660626][ T5864] RIP: 0033:0x7ff87778fed7 [ 518.665057][ T5864] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 518.684706][ T5864] RSP: 002b:00007ffd3ab64328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 518.693145][ T5864] RAX: 0000000000000000 RBX: 00007ff877811c05 RCX: 00007ff87778fed7 [ 518.701125][ T5864] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3ab643e0 [ 518.709104][ T5864] RBP: 00007ffd3ab643e0 R08: 0000000000000000 R09: 0000000000000000 [ 518.717083][ T5864] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3ab65470 [ 518.725062][ T5864] R13: 00007ff877811c05 R14: 000000000007e657 R15: 00007ffd3ab654b0 [ 518.733080][ T5864] [ 518.736394][ T5864] Kernel Offset: disabled [ 518.740730][ T5864] Rebooting in 86400 seconds..