last executing test programs: 30m4.666847822s ago: executing program 32 (id=387): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) unshare(0x6020400) socket$unix(0x1, 0x1, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 24m36.787280855s ago: executing program 33 (id=1561): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40100) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x80, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040804}, 0x48040) sendmsg$nl_route(r2, 0x0, 0x0) 18m6.398692777s ago: executing program 34 (id=2820): syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x20000) 16m15.59910238s ago: executing program 5 (id=3052): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) 16m11.378486604s ago: executing program 5 (id=3059): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x0, 0x4, 0x9, 0x150, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x4}, 0x38) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xffb}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r10, 0x3, 0xffffffffffffffff, 0x3, 0x80000}) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 16m9.077999053s ago: executing program 5 (id=3066): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$igmp(0x2, 0x3, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 15m53.565833394s ago: executing program 35 (id=3066): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$igmp(0x2, 0x3, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 11m1.436272136s ago: executing program 36 (id=3439): gettid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 10m57.5956075s ago: executing program 7 (id=3467): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2fdd011a9", 0x5}], 0x1}, 0x40084) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 10m56.589359215s ago: executing program 7 (id=3469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10m56.488042075s ago: executing program 7 (id=3471): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m54.731749355s ago: executing program 7 (id=3475): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 10m54.373837379s ago: executing program 8 (id=3086): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@udp=r1}, 0x20) connect$unix(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004081) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 10m53.905617421s ago: executing program 8 (id=3476): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0xc}, 0xe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x106, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x4c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) 10m51.945110694s ago: executing program 7 (id=3479): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10m51.586906645s ago: executing program 7 (id=3480): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0xc}, 0xe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x106, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x4c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) 10m38.648267607s ago: executing program 37 (id=3476): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0xc}, 0xe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x106, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x4c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) 10m35.732374007s ago: executing program 38 (id=3480): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0xc}, 0xe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x106, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x4c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) 7m58.257948853s ago: executing program 3 (id=3718): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) 7m56.632026014s ago: executing program 3 (id=3720): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m52.786086962s ago: executing program 3 (id=3726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000084ff01050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c"], 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000080000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe73) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x23e8, 0x3}}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendfile(r5, 0xffffffffffffffff, 0x0, 0x7ffff004) 7m51.760129733s ago: executing program 3 (id=3727): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m49.01647741s ago: executing program 3 (id=3732): rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x1}, {0x30}, {0xb, 0x1}, {0xc}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 7m46.556799512s ago: executing program 3 (id=3735): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0xc}, 0xe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r2 = getpid() r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x4c}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) 7m29.86449624s ago: executing program 39 (id=3735): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0xc}, 0xe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r2 = getpid() r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x4c}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) 5m37.998986878s ago: executing program 9 (id=3882): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x5) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r7, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0]) shutdown(r6, 0x0) syz_open_pts(r5, 0x80) 5m36.321887857s ago: executing program 9 (id=3883): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x48850) bind$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m29.575357454s ago: executing program 9 (id=3888): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m23.065171515s ago: executing program 9 (id=3896): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x7fffffff}, &(0x7f0000000240)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 5m21.565296563s ago: executing program 9 (id=3899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 5m21.192899883s ago: executing program 9 (id=3902): r0 = socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0xfffffffffffffffd) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000100)={0x1, 0x5, 0x6}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x110, 0x0, &(0x7f0000000c40)=[@request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x2}, @acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/252, 0xfc, 0x0, 0x33}, @fda={0x66646185, 0x9, 0x1, 0x27}}, &(0x7f0000000780)={0x0, 0x18, 0x40}}}, @register_looper, @decrefs={0x40046307, 0x1}, @register_looper, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x1, 0x0, 0x34}, @fda={0x66646185, 0x9, 0x2, 0x31}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000940)={0x0, 0x20, 0x40}}}, @exit_looper, @transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x1e}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m1.892576477s ago: executing program 40 (id=3902): r0 = socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0xfffffffffffffffd) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000100)={0x1, 0x5, 0x6}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x110, 0x0, &(0x7f0000000c40)=[@request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x2}, @acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/252, 0xfc, 0x0, 0x33}, @fda={0x66646185, 0x9, 0x1, 0x27}}, &(0x7f0000000780)={0x0, 0x18, 0x40}}}, @register_looper, @decrefs={0x40046307, 0x1}, @register_looper, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x1, 0x0, 0x34}, @fda={0x66646185, 0x9, 0x2, 0x31}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000940)={0x0, 0x20, 0x40}}}, @exit_looper, @transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x1e}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m15.674466644s ago: executing program 1 (id=3973): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, 0x0) close(0xffffffffffffffff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) symlink(0x0, &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffeac, 0x1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0xcf2, 0x4}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) accept(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f00000002c0)=0x80) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYBLOB="427e370b7f9a9d1a70ddb74693946736256c712d3f1fbcff37c7d9db3181402ff96ba9dd258d8940edb7eb2ad5795644dc261b9a363c65ecb24910e8445fd2a00980e8408efffda82f1f8e9ea039eb32d90bc769d7cefda814aaa1e82a0277847be838efb27463d899513996706f6588519934b8050de864f7f7f39adeba366216c7750703daca293106ee1c84748e9c013fe3fdce0c3fc88f3f4e64676fdd578618e48c619c47254d8a959bddc628d15535492b02", @ANYBLOB="27e54e41bd57e25cb9373e29bffcff030000000000e3e389433697", @ANYRES32=r3, @ANYRES32=r2, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='/\x00'], 0x20) timer_delete(r6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028009001400aaaaaaaaaabb00000800090000000000"], 0x48}}, 0x0) 4m10.762600632s ago: executing program 1 (id=3975): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m7.478938357s ago: executing program 1 (id=3981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10000001, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f000099c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x5efaa000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x14}, 0x10) sendmsg$NFT_BATCH(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x800, 0x4e, 0x7f, 0x2}, {0x4, 0x9, 0x1, 0x5d34}, {0xb210, 0x5, 0x1, 0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 4m5.41142829s ago: executing program 1 (id=3982): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2fd", 0x2}], 0x1}, 0x40084) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 4m2.88698649s ago: executing program 1 (id=3985): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000008a2e38bcc8874df6569d0a3f7de9aeb0c42e8fc1b86eea683887ebbbfb0c7ce931bdaf43043ce35f1b86eb3e7f26917d7e72e518b2f88e2aaf42a2952a0ab500ced5e053e0cfb8536862c7ef89a8127dea7f39663b55a4cb8e7402cc71e798bd69f73369dd6292db0a5684ee3715b13479c7c8d94b320c75c9533e48dc7a3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) io_uring_setup(0x6c42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x5, 0xc76c, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b", 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) 3m58.606952781s ago: executing program 1 (id=3989): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x20) socket$netlink(0x10, 0x3, 0x0) shutdown(r2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x800}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x801, 0x100) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000001500)={0xc, @raw_data="f110e25d4f4ead0f4484af88216e0359f332efdff520ee4ab1c3ef90b3d6b058ba0633927ea48b3474ed93a1ec1786e9aaecd79626cd58c12fa81bd674f6698b71615e15118936c3db72a7a1b5d23dd0fed216d78a68df13d4b8ea3b55b542ef4f9bbb1ae5984c82108d6160f0e7fcf241f868daf01301e790339e8ae3ca68ee08aae85f33b750317c3e0fcc400d1f42b815d5c649badc9c89b13d1892471969cec764e7cfb569ee4c351c396d680141fe1c99671be3190eeefd81b6aee9cbd4efd7d16b20b93522"}) 3m42.130803377s ago: executing program 41 (id=3989): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x20) socket$netlink(0x10, 0x3, 0x0) shutdown(r2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x800}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x801, 0x100) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000001500)={0xc, @raw_data="f110e25d4f4ead0f4484af88216e0359f332efdff520ee4ab1c3ef90b3d6b058ba0633927ea48b3474ed93a1ec1786e9aaecd79626cd58c12fa81bd674f6698b71615e15118936c3db72a7a1b5d23dd0fed216d78a68df13d4b8ea3b55b542ef4f9bbb1ae5984c82108d6160f0e7fcf241f868daf01301e790339e8ae3ca68ee08aae85f33b750317c3e0fcc400d1f42b815d5c649badc9c89b13d1892471969cec764e7cfb569ee4c351c396d680141fe1c99671be3190eeefd81b6aee9cbd4efd7d16b20b93522"}) 19.787101496s ago: executing program 0 (id=4241): r0 = fanotify_init(0x1, 0x80000) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0xc, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x2b00000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x9, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18.977048161s ago: executing program 0 (id=4243): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x140) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 15.716535456s ago: executing program 0 (id=4248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xda9}], 0x4}}], 0x1, 0x4004000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 14.691256451s ago: executing program 2 (id=4249): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.66436247s ago: executing program 0 (id=4250): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e6740", 0x90, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16", 0x29, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.464927169s ago: executing program 6 (id=4251): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000380)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20004814}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8000000000000000) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0x0, [0x1ff, 0x2, 0x7, 0xc85, 0x1, 0x1], 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0}, &(0x7f0000000280)=0x78) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@barrier}, {@bsdgroups}, {@jqfmt_vfsv1}, {@user_xattr}, {@orlov}, {@abort}]}, 0xfd, 0x59e, &(0x7f00000002c0)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x50}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) 13.044577981s ago: executing program 0 (id=4252): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.772449647s ago: executing program 2 (id=4253): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x11, 0x0, 0x4000800}, 0x800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)={0x10, 0xfffffff5, 0x3}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x24400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x700a}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) write$tun(r4, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) chdir(&(0x7f0000000080)='./file0\x00') linkat(r8, &(0x7f0000000280)='./file0\x00', r3, 0x0, 0x1400) 12.610742572s ago: executing program 6 (id=4254): r0 = fanotify_init(0x1, 0x80000) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0xc, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x2b00000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x9, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.931263671s ago: executing program 6 (id=4256): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e6740", 0x90, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfb", 0x27, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.928975455s ago: executing program 2 (id=4257): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x140) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, 0x0, 0x0) 10.489088092s ago: executing program 0 (id=4258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000287f526daf723e4bafad89782ffe18b94afa27"], 0x40}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 10.475995258s ago: executing program 4 (id=4259): r0 = fanotify_init(0x1, 0x80000) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0xc, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x2b00000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x9, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.146465481s ago: executing program 2 (id=4260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @p_u8=0x0}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x64, 0x0, 0x0, 0x804c040}, 0x0) r6 = dup(r5) shutdown(r5, 0x1) sendmsg$inet_sctp(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000100)=0x4) copy_file_range(r1, &(0x7f0000000100)=0x9, r7, &(0x7f0000000340)=0x941e, 0x7e7, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) 10.145081559s ago: executing program 4 (id=4261): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) 8.478730955s ago: executing program 4 (id=4262): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e6740", 0x90, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16", 0x29, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.401276752s ago: executing program 5 (id=3921): r0 = socket(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0xfffffffffffffffd) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f0000000100)={0x1, 0x5, 0x6}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x110, 0x0, &(0x7f0000000c40)=[@request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x2}, @acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/252, 0xfc, 0x0, 0x33}, @fda={0x66646185, 0x9, 0x1, 0x27}}, &(0x7f0000000780)={0x0, 0x18, 0x40}}}, @register_looper, @decrefs={0x40046307, 0x1}, @register_looper, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x1, 0x0, 0x34}, @fda={0x66646185, 0x9, 0x2, 0x31}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000940)={0x0, 0x20, 0x40}}}, @exit_looper, @transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x1e}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 8.049901648s ago: executing program 6 (id=4263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}}, 0x0) 7.879524154s ago: executing program 6 (id=4264): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.507096128s ago: executing program 2 (id=4265): rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x1}, {0x30}, {0xb, 0x1}, {0xc}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 5.164346895s ago: executing program 5 (id=4266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000084ff01050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000080000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe73) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x23e8, 0x3}}) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff004) 3.996942361s ago: executing program 4 (id=4267): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c617465000000000000c215e28f9cf191210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000731f6a5e1ffb8783b2b31ca1e5751a61fccaf9203c8ae781e1b8c42c6865604f3ce265a09423cae2ea14e1a45bb160518ce06f6f1079c520cde52dc69c7cfd2dafa1813f8a7809367877ab740ed009510e2c53e2adafcbca3768bc969a1b9a56f27906a5b6e6c9484896bf7a899973ee5cb1f04d1b38fba0481c23c7016b9d5a6be5c1bdad3f822f352c97486f890e5a8a87c75eea426e6a856758409e0a146b7014ec2a03bdeca76c358a2d3f7fd778ba45892cf11f9d675c73c3daa7d09bbf89f5385d5725401f140475374b07aaf6ff21e9e32a1aac6ec4ce4ac3bf5e2b626b00"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x5}, {0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, [@offload={0xc}]}, 0xc4}}, 0x0) write$UHID_INPUT(r8, &(0x7f0000000080)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b428f0e1ac6e7049b346d959b189a242a9b3ff3988f7ef319520100ffe8d178708c523c921b1b25470a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490843bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e90af2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0f1f4f674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ffc4ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a5869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be1200fdc4e9134f77020000f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d594c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3eff1b0ff034ef655b253ca050083815b1b6fc6522d4e4fdcf3a38cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d0100d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfd7b2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154504b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b033a53faf46366e7205dd8d6f37525c1a0e94610dd94223f6c15d07f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef928ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd1cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f87a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17cb51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e80e0082d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b13a60459716246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f352ceee26596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f0cfc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea62839b4a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30842b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bbb935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c0bec664bff000000000000005d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e975be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f04817fb909729a7db6ff9576abc9ede7886294ff1aa7082ead01a9b03c37b0969be0bff60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bccf8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000370f00", 0x5bb1f126059684ef}}, 0x1006) 3.890764285s ago: executing program 2 (id=4268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @p_u8=0x0}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x64, 0x0, 0x0, 0x804c040}, 0x0) r6 = dup(r5) shutdown(r5, 0x1) sendmsg$inet_sctp(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000100)=0x4) copy_file_range(r1, &(0x7f0000000100)=0x9, r7, &(0x7f0000000340)=0x941e, 0x7e7, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) 3.670007257s ago: executing program 5 (id=4269): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x140) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, 0x0, 0x0) 2.361536064s ago: executing program 6 (id=4270): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) syz_open_pts(r5, 0x80) 2.207908288s ago: executing program 4 (id=4271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0), 0x0, 0x0, 0x10b8}, 0x106) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, 0x0, 0x0) close(r3) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4020000}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x69, 0xd, 0x1, 0x0, "762f9f4c2dad1fbe5f3da8e2b8bb14d4e790761a97bab6faae95ab0966645e2a93c45265673a60610a4ea7547b5eff4a26bee6990ed176cb0fcd4b1a4cc8ca50f8ef8c86f446cd46767250ac88bab11f0cdd18ad4a0048141d85b5abb68cb2430a9ef7f07b"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 0s ago: executing program 4 (id=4272): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 1772.578591][T19507] veth0_macvtap: entered promiscuous mode [ 1772.589381][T19507] veth1_macvtap: entered promiscuous mode [ 1772.626486][T19507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1772.644016][T19507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1772.917192][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.183827][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.229065][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.256280][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.390155][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.414455][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.440192][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.454149][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.474130][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.496767][ T5620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1773.527375][ T5620] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1773.527394][ T5620] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1773.578559][ T5620] usb 5-1: USB disconnect, device number 46 [ 1773.667844][T14097] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1775.185992][T19856] netlink: 'syz.1.3880': attribute type 4 has an invalid length. [ 1775.875625][T19852] loop4: detected capacity change from 0 to 256 [ 1776.108004][T19852] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1776.814821][T19852] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 1776.971819][ T8776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.971846][ T8776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.886521][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.886550][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.240213][ T4926] Bluetooth: hci4: link tx timeout [ 1778.240652][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.279624][ T4926] Bluetooth: hci4: link tx timeout [ 1778.279650][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.324907][ T4926] Bluetooth: hci4: link tx timeout [ 1778.324932][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.324953][ T4926] Bluetooth: hci4: link tx timeout [ 1778.324966][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.324996][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325009][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325025][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325037][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.325062][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325074][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325098][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325111][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.325135][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325148][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325164][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325176][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.325201][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325214][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325229][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325263][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.325288][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325300][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325316][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325328][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.325349][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325361][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325377][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325389][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.325414][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325426][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325441][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325453][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.325478][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325490][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325506][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325518][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.325545][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325558][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.325573][ T4926] Bluetooth: hci4: link tx timeout [ 1778.325585][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.328629][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328651][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.328670][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328682][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.328711][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328724][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.328740][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328752][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.328776][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328788][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.328804][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328816][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.328877][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328890][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.328906][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328918][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.328971][ T4926] Bluetooth: hci4: link tx timeout [ 1778.328984][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.329000][ T4926] Bluetooth: hci4: link tx timeout [ 1778.329012][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.329038][ T4926] Bluetooth: hci4: link tx timeout [ 1778.329051][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.329067][ T4926] Bluetooth: hci4: link tx timeout [ 1778.329078][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.329131][ T4926] Bluetooth: hci4: link tx timeout [ 1778.329145][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.343178][ T4926] Bluetooth: hci4: link tx timeout [ 1778.343198][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.343238][ T4926] Bluetooth: hci4: link tx timeout [ 1778.343249][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.343264][ T4926] Bluetooth: hci4: link tx timeout [ 1778.343274][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.729221][ T4926] Bluetooth: hci4: link tx timeout [ 1778.729242][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.729261][ T4926] Bluetooth: hci4: link tx timeout [ 1778.729273][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.838245][ T4926] Bluetooth: hci4: link tx timeout [ 1778.838270][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.838288][ T4926] Bluetooth: hci4: link tx timeout [ 1778.838300][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1778.879341][ T4926] Bluetooth: hci4: link tx timeout [ 1778.879366][ T4926] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1778.879387][ T4926] Bluetooth: hci4: link tx timeout [ 1778.879398][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1780.372327][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 1781.796296][ T8472] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1782.482219][ T8472] usb 2-1: Using ep0 maxpacket: 16 [ 1782.496529][ T8472] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1782.496589][ T8472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1782.496618][ T8472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1782.496640][ T8472] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1782.496664][ T8472] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1782.501467][ T8472] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1782.501504][ T8472] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1782.501529][ T8472] usb 2-1: Manufacturer: syz [ 1782.707067][T19885] binder: BINDER_SET_CONTEXT_MGR already set [ 1782.707110][T19885] binder: 19877:19885 ioctl 4018620d 200000000040 returned -16 [ 1782.713471][T19885] binder: 19877:19885 ioctl 40109441 200000000100 returned -22 [ 1783.488021][ T8472] usb 2-1: config 0 descriptor?? [ 1783.569677][ T8472] usb 2-1: can't set config #0, error -71 [ 1783.611791][ T8472] usb 2-1: USB disconnect, device number 24 [ 1783.815147][T16639] Bluetooth: hci4: command 0x0406 tx timeout [ 1784.401000][T19888] loop0: detected capacity change from 0 to 32768 [ 1784.956596][T19888] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1785.100432][T19888] XFS (loop0): Ending clean mount [ 1785.110568][T19888] XFS (loop0): Quotacheck needed: Please wait. [ 1785.601131][T19888] XFS (loop0): Quotacheck: Done. [ 1786.548540][ T38] audit: type=1800 audit(2000001476.272:149): pid=19911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3892" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 1786.936783][T14097] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1787.249676][T19919] loop4: detected capacity change from 0 to 512 [ 1787.252000][ T8472] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1787.369898][T19919] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1787.439729][T19918] loop2: detected capacity change from 0 to 512 [ 1787.496824][ T8472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.496862][ T8472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.496906][ T8472] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1787.496931][ T8472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.500745][T19918] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1787.533794][T19919] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3901: inode has both inline data and extents flags [ 1787.533830][T19919] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1787.534785][T19919] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3901: couldn't read orphan inode 15 (err -117) [ 1787.534816][T19919] loop4: lost filesystem error report for type 5 error -117 [ 1787.536799][ T8472] usb 2-1: config 0 descriptor?? [ 1787.542001][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 1787.542024][ C1] EXT4-fs (loop4): initial error at time 2000001477: ext4_orphan_get:1397: inode 15 [ 1787.542064][ C1] EXT4-fs (loop4): last error at time 2000001477: ext4_orphan_get:1402 [ 1787.550740][T19919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1787.592849][T19918] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3900: inode has both inline data and extents flags [ 1787.592947][T19918] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1787.593429][T19918] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3900: couldn't read orphan inode 15 (err -117) [ 1787.596156][T19918] loop2: lost filesystem error report for type 5 error -117 [ 1787.602397][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 1787.602422][ C1] EXT4-fs (loop2): initial error at time 2000001477: ext4_orphan_get:1397: inode 15 [ 1787.602452][ C1] EXT4-fs (loop2): last error at time 2000001477: ext4_orphan_get:1402 [ 1787.817503][T19918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1787.866167][T19926] binder: 19921:19926 ioctl 40109441 200000000100 returned -22 [ 1788.090971][ T8472] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1788.197309][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1788.257153][ T8472] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1788.373679][ T8472] cp2112 0003:10C4:EA90.0005: error requesting version [ 1788.516102][ T8472] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -32 [ 1788.789022][ T10] usb 2-1: USB disconnect, device number 25 [ 1788.947868][T19934] fido_id[19934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1789.178975][ T5905] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1789.376013][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.376054][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.376098][ T5905] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1789.376125][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.444448][ T5905] usb 1-1: config 0 descriptor?? [ 1789.450422][T19507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.883753][ T5905] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1789.970532][ T5905] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1790.117789][ T5905] cp2112 0003:10C4:EA90.0006: error requesting version [ 1790.176339][ T5905] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -32 [ 1790.204062][ T5905] usb 1-1: USB disconnect, device number 102 [ 1790.285546][T19947] binder: 19946:19947 ioctl 40109441 200000000100 returned -22 [ 1790.743070][T19953] netlink: 'syz.1.3908': attribute type 4 has an invalid length. [ 1791.894471][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.894545][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.637535][T19964] loop4: detected capacity change from 0 to 32768 [ 1793.020053][T19964] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1793.080497][T19964] XFS (loop4): Ending clean mount [ 1793.094086][T19964] XFS (loop4): Quotacheck needed: Please wait. [ 1793.534777][T19964] XFS (loop4): Quotacheck: Done. [ 1793.623790][T19981] loop1: detected capacity change from 0 to 16 [ 1793.723207][T19981] erofs (device loop1): invalid ishare xattr prefix id 0 [ 1794.243295][ T38] audit: type=1800 audit(2000001484.163:150): pid=19985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3913" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4428 res=0 errno=0 [ 1794.630998][T19986] netlink: 'syz.1.3914': attribute type 15 has an invalid length. [ 1794.631055][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1796.253934][T17920] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1808.368876][T20017] netlink: 'syz.4.3915': attribute type 4 has an invalid length. [ 1809.742297][T14099] Bluetooth: hci1: command 0x0406 tx timeout [ 1810.296298][T14099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1810.377246][T14099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1810.387338][T14099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1810.393773][T14099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1810.395361][T14099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1813.177174][T16639] Bluetooth: hci0: command tx timeout [ 1813.602286][T20047] : renamed from bond_slave_0 (while UP) [ 1815.250575][T16639] Bluetooth: hci0: command tx timeout [ 1816.144675][T20062] loop1: detected capacity change from 0 to 32768 [ 1816.182147][T20062] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1816.418610][T20062] XFS (loop1): Ending clean mount [ 1816.452528][T20062] XFS (loop1): Quotacheck needed: Please wait. [ 1817.081897][T20076] : renamed from bond_slave_0 (while UP) [ 1817.837492][T16639] Bluetooth: hci0: command tx timeout [ 1819.950250][T16639] Bluetooth: hci0: command tx timeout [ 1820.884895][T20062] XFS (loop1): Quotacheck: Done. [ 1820.985426][T18625] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1826.061702][T20018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.062179][T20018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.062826][T20018] bridge_slave_0: entered allmulticast mode [ 1826.114084][T20018] bridge_slave_0: entered promiscuous mode [ 1826.136294][T20018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.137224][T20018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.137737][T20018] bridge_slave_1: entered allmulticast mode [ 1826.339383][T20018] bridge_slave_1: entered promiscuous mode [ 1826.633242][ T5905] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1826.633438][T13375] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1829.747198][T20018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.441515][T20018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.728688][ T5905] usb 3-1: device descriptor read/64, error -71 [ 1831.165072][T20143] loop4: detected capacity change from 0 to 32768 [ 1831.280785][T20143] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1831.508739][T20156] loop0: detected capacity change from 0 to 32768 [ 1831.585560][ T5905] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1831.723245][T20156] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1831.740190][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1831.742229][T20143] XFS (loop4): Ending clean mount [ 1831.743224][ T5905] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1831.743286][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1831.743318][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1831.743343][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1831.743370][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1831.744914][ T5905] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1831.744946][ T5905] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1831.744970][ T5905] usb 3-1: Manufacturer: syz [ 1831.750749][ T5905] usb 3-1: config 0 descriptor?? [ 1831.802908][T20143] XFS (loop4): Quotacheck needed: Please wait. [ 1831.928665][T20156] XFS (loop0): Ending clean mount [ 1831.954891][T20156] XFS (loop0): Quotacheck needed: Please wait. [ 1832.449785][T20156] XFS (loop0): Quotacheck: Done. [ 1832.466848][ T38] audit: type=1800 audit(2000001522.405:151): pid=20156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3950" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 1832.521327][ T5905] rc_core: IR keymap rc-hauppauge not found [ 1832.521350][ T5905] Registered IR keymap rc-empty [ 1832.521522][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.539418][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.584782][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1832.596421][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input81 [ 1832.615566][T20018] team0: Port device team_slave_0 added [ 1832.635874][T20018] team0: Port device team_slave_1 added [ 1832.647539][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.698076][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.756058][T14097] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1832.762844][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.780986][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.799323][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.820353][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.840388][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.862482][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.884812][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.914850][ T5905] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.969784][ T5905] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1832.969867][ T5905] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1832.984227][ T1185] bridge_slave_1: left allmulticast mode [ 1832.984263][ T1185] bridge_slave_1: left promiscuous mode [ 1832.984723][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.091581][T13375] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1833.095416][ T5905] usb 3-1: USB disconnect, device number 33 [ 1833.304436][T13375] usb 2-1: Using ep0 maxpacket: 32 [ 1833.313326][T20143] XFS (loop4): Quotacheck: Done. [ 1833.328792][T13375] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1833.328825][T13375] usb 2-1: config 0 has no interface number 0 [ 1833.328879][T13375] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1833.328904][T13375] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 1833.328933][T13375] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1833.334487][T13375] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1833.334521][T13375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.334543][T13375] usb 2-1: Product: syz [ 1833.334560][T13375] usb 2-1: Manufacturer: syz [ 1833.334577][T13375] usb 2-1: SerialNumber: syz [ 1833.382869][T13375] usb 2-1: config 0 descriptor?? [ 1833.388918][T13375] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1833.390207][T13375] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1833.722868][ T38] audit: type=1800 audit(2000001523.655:152): pid=20176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3947" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4428 res=0 errno=0 [ 1836.076217][ T1185] bridge_slave_0: left allmulticast mode [ 1836.076282][ T1185] bridge_slave_0: left promiscuous mode [ 1836.076582][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.250050][ T5739] usb 2-1: USB disconnect, device number 26 [ 1836.322855][T17920] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1838.081189][ T1185] bond0 (unregistering): (slave 30): Releasing backup interface [ 1838.200226][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1838.246552][ T1185] bond0 (unregistering): Released all slaves [ 1838.460099][T20018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1838.460120][T20018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1838.460148][T20018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1838.544448][T20018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1838.544469][T20018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1838.544501][T20018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1838.765344][T20201] loop2: detected capacity change from 0 to 512 [ 1838.793473][T20201] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1839.903905][T20201] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3958: inode has both inline data and extents flags [ 1839.903943][T20201] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1839.916958][T20201] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3958: couldn't read orphan inode 15 (err -117) [ 1839.916998][T20201] loop2: lost filesystem error report for type 5 error -117 [ 1839.963713][T20201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1840.930396][T20018] hsr_slave_0: entered promiscuous mode [ 1840.933044][T20018] hsr_slave_1: entered promiscuous mode [ 1840.935281][T20018] debugfs: 'hsr0' already exists in 'hsr' [ 1840.935311][T20018] Cannot create hsr debugfs directory [ 1845.768365][T19507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.949925][T20232] binder: BINDER_SET_CONTEXT_MGR already set [ 1846.949945][T20232] binder: 20228:20232 ioctl 4018620d 200000000040 returned -16 [ 1846.950545][T20232] binder: 20228:20232 ioctl 40109441 200000000100 returned -22 [ 1847.250034][T18256] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1848.601046][T18256] usb 2-1: Using ep0 maxpacket: 32 [ 1848.603462][T18256] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1848.603493][T18256] usb 2-1: config 0 has no interface number 0 [ 1848.603545][T18256] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1848.603572][T18256] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 1848.603599][T18256] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1848.609959][T18256] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1848.609990][T18256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.610011][T18256] usb 2-1: Product: syz [ 1848.610026][T18256] usb 2-1: Manufacturer: syz [ 1848.610040][T18256] usb 2-1: SerialNumber: syz [ 1849.603055][T18256] usb 2-1: config 0 descriptor?? [ 1849.968611][T18256] usb 2-1: can't set config #0, error -71 [ 1850.249863][T18256] usb 2-1: USB disconnect, device number 27 [ 1852.265862][T20018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.313191][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.313304][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1856.047516][T20018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.132750][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.241802][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.996126][T18674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.008817][T18674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.600751][ T1185] hsr_slave_0: left promiscuous mode [ 1863.668431][ T1185] hsr_slave_1: left promiscuous mode [ 1863.669764][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1863.669793][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.710457][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1863.710487][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1864.833798][ T1185] veth1_macvtap: left promiscuous mode [ 1864.877015][ T1185] veth0_macvtap: left promiscuous mode [ 1864.877412][ T1185] veth1_vlan: left promiscuous mode [ 1864.877646][ T1185] veth0_vlan: left promiscuous mode [ 1865.864036][T20316] loop1: detected capacity change from 0 to 512 [ 1865.866509][T20316] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1865.923623][T20316] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.3985: inode has both inline data and extents flags [ 1865.923651][T20316] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1865.924031][T20316] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3985: couldn't read orphan inode 15 (err -117) [ 1865.924053][T20316] loop1: lost filesystem error report for type 5 error -117 [ 1865.968152][T20316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1866.328819][ T5873] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1866.637918][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 1867.696713][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.696779][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1867.696811][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1867.696836][ T5873] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1867.696861][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.757741][ T5873] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1867.757777][ T5873] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1867.757800][ T5873] usb 1-1: Manufacturer: syz [ 1867.804450][ T5873] usb 1-1: config 0 descriptor?? [ 1868.269309][ T5873] rc_core: IR keymap rc-hauppauge not found [ 1868.269335][ T5873] Registered IR keymap rc-empty [ 1868.269652][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.297316][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.324054][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1868.366053][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input82 [ 1868.410919][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.427596][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.448456][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.468982][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.488140][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.508831][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.528385][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.549270][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.567594][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.589543][ T5873] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1868.663346][ T5873] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1868.663377][ T5873] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1869.162335][ T5873] usb 1-1: USB disconnect, device number 104 [ 1869.644773][T14099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1869.797077][T14099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1869.810966][T14099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1869.848731][T14099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1869.859146][T14099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1869.878411][T18625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.779291][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 1871.906146][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 1872.288422][T16639] Bluetooth: hci2: command tx timeout [ 1874.367050][T16639] Bluetooth: hci2: command tx timeout [ 1874.674616][T20375] loop4: detected capacity change from 0 to 512 [ 1874.809389][T20375] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1874.850394][T20372] loop0: detected capacity change from 0 to 128 [ 1874.891436][T20375] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3995: inode has both inline data and extents flags [ 1874.891487][T20375] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1874.892062][T20375] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3995: couldn't read orphan inode 15 (err -117) [ 1874.892097][T20375] loop4: lost filesystem error report for type 5 error -117 [ 1875.162668][T20375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1876.096437][T20372] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1876.116130][T20372] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1877.521828][T16639] Bluetooth: hci2: command tx timeout [ 1884.340204][T16639] Bluetooth: hci2: command tx timeout [ 1884.799950][T14097] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1886.328102][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1887.847888][ T5905] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1887.985435][T14099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1888.056830][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 1888.062409][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.062448][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1888.062466][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1888.062480][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1888.062494][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1888.063632][ T5905] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1888.063652][ T5905] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1888.063665][ T5905] usb 5-1: Manufacturer: syz [ 1888.157975][ T5905] usb 5-1: config 0 descriptor?? [ 1888.253758][T14099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1888.300215][T14099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1888.380628][T14099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1888.428992][T14099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1889.036138][ T5905] rc_core: IR keymap rc-hauppauge not found [ 1889.036165][ T5905] Registered IR keymap rc-empty [ 1889.036990][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.086298][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.122524][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1889.136267][T16566] bridge_slave_1: left allmulticast mode [ 1889.136307][T16566] bridge_slave_1: left promiscuous mode [ 1889.136649][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.176382][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input83 [ 1889.230253][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.246210][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.286097][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.306153][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.328810][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.331241][T16566] bridge_slave_0: left allmulticast mode [ 1889.331278][T16566] bridge_slave_0: left promiscuous mode [ 1889.331566][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.358670][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.376757][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.396365][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.416500][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.436666][ T5905] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1889.473998][ T5905] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1889.474030][ T5905] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1889.507645][ T5905] usb 5-1: USB disconnect, device number 47 [ 1890.710006][ T5905] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1890.868566][T16639] Bluetooth: hci0: command tx timeout [ 1891.196651][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 1891.199099][ T5905] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1891.199128][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1891.202321][ T5905] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1891.202351][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1891.202384][ T5905] usb 5-1: SerialNumber: syz [ 1891.288467][ T5905] usb 5-1: 0:2 : does not exist [ 1892.043784][ T5905] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1892.056479][ T5905] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1892.060988][ T5905] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1892.065171][ T5905] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1892.102726][ T5905] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1892.126377][ T5905] usb 5-1: USB disconnect, device number 48 [ 1892.162116][T20336] udevd[20336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1892.216677][T16566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1892.276961][T16566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1892.349114][T16566] bond0 (unregistering): Released all slaves [ 1892.926423][T16639] Bluetooth: hci0: command tx timeout [ 1894.942798][T20453] evm: overlay not supported [ 1895.235389][T16639] Bluetooth: hci0: command tx timeout [ 1896.388621][T16566] hsr_slave_0: left promiscuous mode [ 1896.427421][T16566] hsr_slave_1: left promiscuous mode [ 1896.433746][T16566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.507427][T16566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.968685][T16639] Bluetooth: hci0: command tx timeout [ 1898.396493][T16566] team0 (unregistering): Port device team_slave_1 removed [ 1898.458061][T16566] team0 (unregistering): Port device team_slave_0 removed [ 1899.835886][T18256] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1900.845682][T18256] usb 3-1: Using ep0 maxpacket: 16 [ 1900.848479][T18256] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1900.848509][T18256] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1900.850375][T18256] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1900.850408][T18256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1900.850431][T18256] usb 3-1: SerialNumber: syz [ 1901.176484][T18256] usb 3-1: 0:2 : does not exist [ 1901.879748][T20332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.880176][T20332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.880521][T20332] bridge_slave_0: entered allmulticast mode [ 1901.884777][T20332] bridge_slave_0: entered promiscuous mode [ 1901.911010][T20332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.911347][T20332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.911666][T20332] bridge_slave_1: entered allmulticast mode [ 1901.916393][T20332] bridge_slave_1: entered promiscuous mode [ 1902.065932][T18256] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1902.090868][T18256] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1902.117314][T18256] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1902.136995][T18256] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1902.484867][T20332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1902.504579][T18256] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1903.303669][T18256] usb 3-1: USB disconnect, device number 34 [ 1903.578960][T20332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1903.705952][T20492] udevd[20492]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1904.939247][T20332] team0: Port device team_slave_0 added [ 1905.020534][T20332] team0: Port device team_slave_1 added [ 1905.287308][T16566] bridge_slave_1: left allmulticast mode [ 1905.287351][T16566] bridge_slave_1: left promiscuous mode [ 1905.287684][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.385357][T13375] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1905.446966][T16566] bridge_slave_0: left allmulticast mode [ 1905.447010][T16566] bridge_slave_0: left promiscuous mode [ 1905.447381][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.545165][T13375] usb 1-1: Using ep0 maxpacket: 16 [ 1905.550418][T13375] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1905.550451][T13375] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1905.551873][T13375] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1905.551906][T13375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1905.551929][T13375] usb 1-1: SerialNumber: syz [ 1905.629726][T13375] usb 1-1: 0:2 : does not exist [ 1905.996958][T20528] netlink: 'syz.0.4025': attribute type 10 has an invalid length. [ 1907.551762][T16566] bond0 (unregistering): (slave 30): Releasing backup interface [ 1907.608540][T16566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1907.632699][T16566] bond0 (unregistering): Released all slaves [ 1907.912070][T20528] syz_tun: entered promiscuous mode [ 1908.246131][T20552] loop4: detected capacity change from 0 to 512 [ 1908.265986][T20552] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1908.274149][T20552] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4033: inode has both inline data and extents flags [ 1908.274187][T20552] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1908.274912][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1908.274934][ C1] EXT4-fs (loop4): initial error at time 2000001598: ext4_orphan_get:1397: inode 15 [ 1908.274965][ C1] EXT4-fs (loop4): last error at time 2000001598: ext4_orphan_get:1397: inode 15 [ 1908.277753][T20552] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4033: couldn't read orphan inode 15 (err -117) [ 1908.277791][T20552] loop4: lost filesystem error report for type 5 error -117 [ 1908.309813][T20552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1908.376511][T20528] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1908.383700][T20332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.383721][T20332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.383754][T20332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.393490][T16566] tipc: Left network mode [ 1908.544788][T13375] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1908.547095][T20332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.547201][T20332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.547234][T20332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.610857][T13375] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1908.625673][T13375] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1908.632390][T13375] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1908.674148][T13375] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1908.723575][T13375] usb 1-1: USB disconnect, device number 105 [ 1908.964386][T20492] udevd[20492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1913.466774][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.768612][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.768732][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.943006][T20578] binder: 20572:20578 ioctl 40109441 200000000100 returned -22 [ 1915.834083][T20332] hsr_slave_0: entered promiscuous mode [ 1915.840861][T20332] hsr_slave_1: entered promiscuous mode [ 1915.848617][T20332] debugfs: 'hsr0' already exists in 'hsr' [ 1915.848648][T20332] Cannot create hsr debugfs directory [ 1915.952286][T20581] loop4: detected capacity change from 0 to 256 [ 1916.031308][T20406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.031656][T20406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.032041][T20406] bridge_slave_0: entered allmulticast mode [ 1916.064258][T20406] bridge_slave_0: entered promiscuous mode [ 1916.120135][T20406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.120577][T20406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.120929][T20406] bridge_slave_1: entered allmulticast mode [ 1916.150601][T20406] bridge_slave_1: entered promiscuous mode [ 1917.990399][T20406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.071126][T20406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1918.267642][T20592] loop2: detected capacity change from 0 to 512 [ 1918.270956][T20592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1918.334842][T20406] team0: Port device team_slave_0 added [ 1918.357747][T20592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1918.357900][T20592] ext4 filesystem being mounted at /45/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1918.804594][T16566] hsr_slave_0: left promiscuous mode [ 1919.584424][T16566] hsr_slave_1: left promiscuous mode [ 1919.585755][T16566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1919.585786][T16566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1919.691875][T16566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1919.691907][T16566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1919.692196][T19507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1919.769592][T16566] veth1_macvtap: left promiscuous mode [ 1919.769712][T16566] veth0_macvtap: left promiscuous mode [ 1919.770033][T16566] veth1_vlan: left promiscuous mode [ 1919.770265][T16566] veth0_vlan: left promiscuous mode [ 1919.935148][T18213] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1920.086973][T18213] usb 5-1: no configurations [ 1920.086997][T18213] usb 5-1: can't read configurations, error -22 [ 1920.464561][T18213] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1922.781030][T18213] usb 5-1: device descriptor read/all, error -71 [ 1922.781953][T18213] usb usb5-port1: attempt power cycle [ 1923.419265][T18213] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1926.198912][T18213] usb 5-1: device descriptor read/8, error -71 [ 1926.505086][T16566] team0 (unregistering): Port device team_slave_1 removed [ 1926.568467][T16566] team0 (unregistering): Port device team_slave_0 removed [ 1926.771835][T20406] team0: Port device team_slave_1 added [ 1927.221789][T20406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1927.221809][T20406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1927.221842][T20406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1927.493262][T20406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1927.493283][T20406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1927.493315][T20406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1927.517150][T20624] loop0: detected capacity change from 0 to 1024 [ 1927.519961][T20624] EXT4-fs: Ignoring removed orlov option [ 1927.731456][T20624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1927.731625][T20624] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1927.831802][T20332] kthread_run failed with err -4 [ 1927.944183][T20406] hsr_slave_0: entered promiscuous mode [ 1927.946985][T20406] hsr_slave_1: entered promiscuous mode [ 1927.949372][T20406] debugfs: 'hsr0' already exists in 'hsr' [ 1927.949402][T20406] Cannot create hsr debugfs directory [ 1930.459008][T14099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1930.466738][T14099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1930.475389][T20648] loop2: detected capacity change from 0 to 256 [ 1930.477055][T14099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1930.539481][T14099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1930.575312][T14099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1933.412293][T20631] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1933.519096][T14097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1934.108804][T20661] loop0: detected capacity change from 0 to 512 [ 1934.176518][T20661] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1934.198458][T20661] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4056: inode has both inline data and extents flags [ 1934.198499][T20661] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1934.198963][T20661] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4056: couldn't read orphan inode 15 (err -117) [ 1934.199015][T20661] loop0: lost filesystem error report for type 5 error -117 [ 1934.523525][T14099] Bluetooth: hci1: command tx timeout [ 1934.674341][T20661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1937.147224][T14099] Bluetooth: hci1: command tx timeout [ 1937.496423][T14097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1937.617660][ T1185] bridge_slave_1: left allmulticast mode [ 1937.617703][ T1185] bridge_slave_1: left promiscuous mode [ 1937.618049][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.773935][T20698] loop4: detected capacity change from 0 to 512 [ 1937.779305][ T1185] bridge_slave_0: left allmulticast mode [ 1937.779347][ T1185] bridge_slave_0: left promiscuous mode [ 1937.779692][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.782163][T20698] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1937.856213][T20698] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4061: inode has both inline data and extents flags [ 1937.856254][T20698] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1937.860203][T20698] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4061: couldn't read orphan inode 15 (err -117) [ 1937.860242][T20698] loop4: lost filesystem error report for type 5 error -117 [ 1937.931617][T20698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1939.163951][T14099] Bluetooth: hci1: command tx timeout [ 1940.197221][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1940.382468][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1940.789467][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1941.631573][T14099] Bluetooth: hci1: command tx timeout [ 1941.635832][ T1185] bond0 (unregistering): Released all slaves [ 1941.839881][T20406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1941.975885][T20406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1942.166045][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1942.166323][ T8726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1942.227388][T20717] overlayfs: failed to resolve './file0': -2 [ 1942.807932][T16564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1942.808132][T16564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1943.263481][ T1185] hsr_slave_0: left promiscuous mode [ 1943.791906][T20730] overlayfs: failed to resolve './file0': -2 [ 1944.248773][ T1185] hsr_slave_1: left promiscuous mode [ 1944.250065][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1944.980316][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1945.159542][T20733] loop2: detected capacity change from 0 to 256 [ 1947.232426][T16639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1947.319662][T16639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1947.340993][T16639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1947.342455][T16639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1947.361596][T16639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1947.728531][T20746] loop4: detected capacity change from 0 to 512 [ 1947.744093][T20746] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1947.777649][T20746] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4069: inode has both inline data and extents flags [ 1947.777689][T20746] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1947.778759][T20746] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4069: couldn't read orphan inode 15 (err -117) [ 1947.778794][T20746] loop4: lost filesystem error report for type 5 error -117 [ 1947.782729][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 1947.782752][ C0] EXT4-fs (loop4): initial error at time 2000001637: ext4_orphan_get:1397: inode 15 [ 1947.782782][ C0] EXT4-fs (loop4): last error at time 2000001637: ext4_orphan_get:1402 [ 1947.882971][T20746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1948.244041][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 1948.293489][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 1952.371011][T14099] Bluetooth: hci2: command tx timeout [ 1952.518069][T20647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.518527][T20647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.518910][T20647] bridge_slave_0: entered allmulticast mode [ 1952.539545][T20647] bridge_slave_0: entered promiscuous mode [ 1952.569154][T20647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.571138][T20647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.571476][T20647] bridge_slave_1: entered allmulticast mode [ 1952.602619][T20647] bridge_slave_1: entered promiscuous mode [ 1952.644867][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1953.017918][T20647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1953.056383][T20647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1953.126006][T20760] loop4: detected capacity change from 0 to 512 [ 1953.204899][T20647] team0: Port device team_slave_0 added [ 1953.210777][T20647] team0: Port device team_slave_1 added [ 1953.277557][T20647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1953.277580][T20647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.277611][T20647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1953.281642][T20647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1953.281660][T20647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.281691][T20647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1953.414097][T20760] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1953.463215][T20760] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4071: inode has both inline data and extents flags [ 1953.463275][T20760] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1953.463639][T20760] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4071: couldn't read orphan inode 15 (err -117) [ 1953.463671][T20760] loop4: lost filesystem error report for type 5 error -117 [ 1953.482962][T20760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1953.797433][T20767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1954.350863][T20767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.370123][T20767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.522410][T14099] Bluetooth: hci2: command tx timeout [ 1957.747429][T14099] Bluetooth: hci2: command tx timeout [ 1959.275960][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1959.761775][T20793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4079'. [ 1959.834884][T14099] Bluetooth: hci2: command tx timeout [ 1960.387637][ T5873] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1960.947612][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 1960.949689][T20647] hsr_slave_0: entered promiscuous mode [ 1960.954438][ T5873] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1960.954498][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1960.954530][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1960.954550][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1960.954575][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1960.958123][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1960.958153][ T5873] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1960.958174][ T5873] usb 3-1: Manufacturer: syz [ 1960.958627][T20647] hsr_slave_1: entered promiscuous mode [ 1960.972501][T20647] debugfs: 'hsr0' already exists in 'hsr' [ 1960.972531][T20647] Cannot create hsr debugfs directory [ 1960.994698][ T5873] usb 3-1: config 0 descriptor?? [ 1961.829280][ T5873] rc_core: IR keymap rc-hauppauge not found [ 1961.829306][ T5873] Registered IR keymap rc-empty [ 1961.829481][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1961.842094][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1961.864028][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1961.868212][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input84 [ 1961.923206][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1961.942331][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1961.962314][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1961.982225][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1962.002160][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1962.040484][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1962.052066][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1962.072103][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1962.095107][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1962.113395][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1962.179643][ T5873] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1962.179903][ T5873] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1962.365233][ T5873] usb 3-1: USB disconnect, device number 35 [ 1965.396929][T20832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4085'. [ 1966.101912][T12620] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1966.857884][T20647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1967.024993][T20647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1967.061955][T12620] usb 1-1: Using ep0 maxpacket: 32 [ 1967.064657][T12620] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1967.064689][T12620] usb 1-1: config 0 has no interface number 0 [ 1967.064743][T12620] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1967.067790][T12620] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1967.067820][T12620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.067843][T12620] usb 1-1: Product: syz [ 1967.067860][T12620] usb 1-1: Manufacturer: syz [ 1967.067876][T12620] usb 1-1: SerialNumber: syz [ 1967.079118][T12620] usb 1-1: config 0 descriptor?? [ 1967.331900][ T1185] bridge_slave_1: left allmulticast mode [ 1967.331962][ T1185] bridge_slave_1: left promiscuous mode [ 1967.332269][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.723960][ T8472] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1968.482886][T12620] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1968.482924][T12620] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1968.482945][T12620] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1968.483310][T12620] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 1968.572413][ T5739] usb 1-1: USB disconnect, device number 106 [ 1968.572410][ T8472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1968.572444][ T8472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1968.572556][ T8472] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1968.572583][ T8472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.634381][ T1185] bridge_slave_0: left allmulticast mode [ 1968.634422][ T1185] bridge_slave_0: left promiscuous mode [ 1968.634678][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.680491][ T8472] usb 5-1: config 0 descriptor?? [ 1969.130399][T20856] overlayfs: failed to resolve './file1': -2 [ 1970.294117][ T8472] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1970.330656][ T8472] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1970.614371][ T8472] cp2112 0003:10C4:EA90.0007: error requesting version [ 1970.720075][ T8472] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -32 [ 1971.042588][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1971.142542][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1971.224250][ T1185] bond0 (unregistering): Released all slaves [ 1971.241774][T20849] tipc: Started in network mode [ 1971.241792][T20849] tipc: Node identity 4, cluster identity 4711 [ 1971.241802][T20849] tipc: Node number set to 4 [ 1971.340594][ T5905] usb 5-1: USB disconnect, device number 53 [ 1971.517045][T12740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1971.517170][T12740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1971.707768][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.707970][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1971.750467][T20742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1971.750659][T20742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.750920][T20742] bridge_slave_0: entered allmulticast mode [ 1971.766336][T20742] bridge_slave_0: entered promiscuous mode [ 1971.882199][T20865] loop2: detected capacity change from 0 to 512 [ 1971.889208][T20742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.889559][T20742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.889951][T20742] bridge_slave_1: entered allmulticast mode [ 1971.894024][T20742] bridge_slave_1: entered promiscuous mode [ 1971.901552][T20865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1972.125048][T20865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1972.125209][T20865] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1972.258729][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4094'. [ 1974.044166][T20881] loop0: detected capacity change from 0 to 512 [ 1974.064919][T20881] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1974.189781][ T1185] hsr_slave_0: left promiscuous mode [ 1974.284396][ T1185] hsr_slave_1: left promiscuous mode [ 1974.285667][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1974.300314][T20881] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4095: inode has both inline data and extents flags [ 1974.300355][T20881] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1974.301290][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1974.301315][ C1] EXT4-fs (loop0): initial error at time 2000001664: ext4_orphan_get:1397: inode 15 [ 1974.301348][ C1] EXT4-fs (loop0): last error at time 2000001664: ext4_orphan_get:1397: inode 15 [ 1974.315998][T20881] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4095: couldn't read orphan inode 15 (err -117) [ 1974.316036][T20881] loop0: lost filesystem error report for type 5 error -117 [ 1974.326454][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1974.328790][T20881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1976.489709][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.489862][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.161417][T19507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1977.302826][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 1977.306057][T14097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1977.411731][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 1978.022314][T20742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1978.053400][T20742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1978.089144][ T5905] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1978.286097][T20742] team0: Port device team_slave_0 added [ 1978.299285][T20742] team0: Port device team_slave_1 added [ 1978.319916][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 1978.323037][ T5905] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1978.323067][ T5905] usb 5-1: config 0 has no interface number 0 [ 1978.323117][ T5905] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1978.326031][ T5905] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1978.326060][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.326081][ T5905] usb 5-1: Product: syz [ 1978.326096][ T5905] usb 5-1: Manufacturer: syz [ 1978.326111][ T5905] usb 5-1: SerialNumber: syz [ 1978.338990][ T5905] usb 5-1: config 0 descriptor?? [ 1978.678501][T20742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1978.678520][T20742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1978.678550][T20742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1978.683833][T20742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1978.683925][T20742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1978.683957][T20742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1978.845651][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1978.845687][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1978.845709][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1978.846090][ T5905] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1978.978092][T20742] hsr_slave_0: entered promiscuous mode [ 1978.979552][T20742] hsr_slave_1: entered promiscuous mode [ 1978.980701][T20742] debugfs: 'hsr0' already exists in 'hsr' [ 1978.980728][T20742] Cannot create hsr debugfs directory [ 1980.851031][T20912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4102'. [ 1981.420562][ T5905] usb 5-1: USB disconnect, device number 54 [ 1983.271199][T20922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1983.448480][T20922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.455898][T20922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.628622][T20954] loop4: detected capacity change from 0 to 512 [ 1986.689292][T20954] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1986.755364][T20954] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4112: inode has both inline data and extents flags [ 1986.755406][T20954] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1986.757502][T20954] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4112: couldn't read orphan inode 15 (err -117) [ 1986.757540][T20954] loop4: lost filesystem error report for type 5 error -117 [ 1986.809859][T20954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1986.998463][T20742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.036267][T20742] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.123159][T20742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1987.123189][T20742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1987.276380][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.276602][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1988.241532][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.241748][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1988.266730][T20965] loop2: detected capacity change from 0 to 512 [ 1988.292993][T20965] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1988.316186][T20965] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4110: inode has both inline data and extents flags [ 1988.316227][T20965] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1988.318095][T20965] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4110: couldn't read orphan inode 15 (err -117) [ 1988.318130][T20965] loop2: lost filesystem error report for type 5 error -117 [ 1988.320424][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 1988.320449][ C1] EXT4-fs (loop2): initial error at time 2000001678: ext4_orphan_get:1397: inode 15 [ 1988.320482][ C1] EXT4-fs (loop2): last error at time 2000001678: ext4_orphan_get:1402 [ 1988.368411][T20965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1988.569260][T20647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1991.372336][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1992.346890][T16639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1992.477120][T16639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1992.577253][T16639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1992.578871][T16639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1992.603701][T16639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1992.967311][T19507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1993.402857][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1993.465800][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1995.079492][T14099] Bluetooth: hci0: command tx timeout [ 1995.542578][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1995.611437][T21016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1996.936473][T21013] loop0: detected capacity change from 0 to 1024 [ 1997.039972][T21013] EXT4-fs: Ignoring removed orlov option [ 1997.040496][ T1195] bridge_slave_1: left allmulticast mode [ 1997.040529][ T1195] bridge_slave_1: left promiscuous mode [ 1997.040846][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1997.115503][T21013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1997.115675][T21013] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1997.439398][T21026] overlayfs: failed to resolve './file1': -2 [ 1998.711556][T14099] Bluetooth: hci0: command tx timeout [ 1998.765949][ T1195] bridge_slave_0: left allmulticast mode [ 1998.765988][ T1195] bridge_slave_0: left promiscuous mode [ 1998.766269][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1998.779696][T14097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2001.112010][T14099] Bluetooth: hci0: command tx timeout [ 2001.330660][ T1195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2001.410870][ T1195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2001.432548][ T1195] bond0 (unregistering): Released all slaves [ 2002.040081][T20742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2002.581556][ T1195] hsr_slave_0: left promiscuous mode [ 2002.629792][ T1195] hsr_slave_1: left promiscuous mode [ 2002.630723][ T1195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2003.019979][T21054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4122'. [ 2003.160391][T14099] Bluetooth: hci0: command tx timeout [ 2003.690503][ T1195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2005.190019][T21064] loop4: detected capacity change from 0 to 4096 [ 2005.190386][ T1195] team0 (unregistering): Port device team_slave_1 removed [ 2005.192870][T21064] EXT4-fs: Ignoring removed mblk_io_submit option [ 2005.226480][T21064] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2005.238959][T21064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2005.240333][ T1195] team0 (unregistering): Port device team_slave_0 removed [ 2005.420890][T21064] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 2007.132955][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2007.290982][T21079] loop0: detected capacity change from 0 to 512 [ 2007.296791][T21079] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2007.394779][T21079] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4130: inode has both inline data and extents flags [ 2007.394822][T21079] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 2007.399443][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 2007.399471][ C0] EXT4-fs (loop0): initial error at time 2000001697: ext4_orphan_get:1397: inode 15 [ 2007.399506][ C0] EXT4-fs (loop0): last error at time 2000001697: ext4_orphan_get:1397: inode 15 [ 2007.399957][T21079] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4130: couldn't read orphan inode 15 (err -117) [ 2007.399992][T21079] loop0: lost filesystem error report for type 5 error -117 [ 2007.405075][T21079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2011.458939][T16639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2011.578676][T16639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2011.593833][T14097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2011.594382][T16639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2011.613509][T16639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2011.621984][T16639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2012.183693][T20975] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.184038][T20975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.604159][T20975] bridge_slave_0: entered allmulticast mode [ 2013.131566][T21114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4132'. [ 2013.135082][T20975] bridge_slave_0: entered promiscuous mode [ 2013.560780][T20975] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.569337][T20975] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.569725][T20975] bridge_slave_1: entered allmulticast mode [ 2013.573743][T20975] bridge_slave_1: entered promiscuous mode [ 2014.588731][T20975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2014.808767][T14099] Bluetooth: hci1: command tx timeout [ 2014.922032][T20975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2016.630962][T21132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4137'. [ 2017.342182][T14099] Bluetooth: hci1: command tx timeout [ 2017.540542][T21132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.540968][T21132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.715595][T20975] team0: Port device team_slave_0 added [ 2017.786303][T20975] team0: Port device team_slave_1 added [ 2018.011480][T20975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2018.011493][T20975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2018.011512][T20975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2018.093340][T20975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2018.093369][T20975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2018.093400][T20975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.232092][T20975] hsr_slave_0: entered promiscuous mode [ 2019.233622][T20975] hsr_slave_1: entered promiscuous mode [ 2019.234962][T20975] debugfs: 'hsr0' already exists in 'hsr' [ 2019.234993][T20975] Cannot create hsr debugfs directory [ 2019.399147][T14099] Bluetooth: hci1: command tx timeout [ 2019.608872][ T1195] bridge_slave_1: left allmulticast mode [ 2019.608900][ T1195] bridge_slave_1: left promiscuous mode [ 2019.609116][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.040643][ T1195] bridge_slave_0: left allmulticast mode [ 2020.040671][ T1195] bridge_slave_0: left promiscuous mode [ 2020.043793][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.478681][T14099] Bluetooth: hci1: command tx timeout [ 2023.203749][T21169] loop4: detected capacity change from 0 to 32768 [ 2023.967431][T21169] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2024.040252][T21169] XFS (loop4): Ending clean mount [ 2024.043163][T21169] XFS (loop4): Quotacheck needed: Please wait. [ 2024.572726][T21169] XFS (loop4): Quotacheck: Done. [ 2025.636396][ T38] audit: type=1800 audit(2000001715.586:153): pid=21197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4145" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4428 res=0 errno=0 [ 2026.193367][T21199] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4148'. [ 2027.229337][ T1195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2027.512581][ T1195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2027.598252][ T1195] bond0 (unregistering): Released all slaves [ 2028.102112][T17920] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2029.353988][T21213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4150'. [ 2029.368255][ T1195] hsr_slave_0: left promiscuous mode [ 2029.430475][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4150'. [ 2029.438165][ T1195] hsr_slave_1: left promiscuous mode [ 2029.439387][ T1195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2029.529200][ T1195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2030.258806][ T1195] team0 (unregistering): Port device team_slave_1 removed [ 2030.461368][ T1195] team0 (unregistering): Port device team_slave_0 removed [ 2032.232501][ T5905] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2032.407971][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 2032.556241][T21099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.557237][T21099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.574001][T21099] bridge_slave_0: entered allmulticast mode [ 2032.597753][T21099] bridge_slave_0: entered promiscuous mode [ 2032.620696][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.620726][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2032.621853][ T5905] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 2032.621883][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2032.621911][ T5905] usb 1-1: SerialNumber: syz [ 2032.725541][ T5905] usb 1-1: 0:2 : does not exist [ 2032.747243][T21099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2032.747591][T21099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2032.754982][T21099] bridge_slave_1: entered allmulticast mode [ 2032.791202][T21099] bridge_slave_1: entered promiscuous mode [ 2033.115453][T21099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2033.169012][T21099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2033.716485][T21251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4159'. [ 2033.820041][T20975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2033.846547][T20975] 8021q: adding VLAN 0 to HW filter on device team0 [ 2034.588647][T21241] netlink: 'syz.0.4158': attribute type 10 has an invalid length. [ 2034.866530][T21001] udevd[21001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 2034.894545][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.894826][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2034.939784][T21099] team0: Port device team_slave_0 added [ 2035.009583][ T5905] usb 1-1: USB disconnect, device number 107 [ 2035.040001][T21099] team0: Port device team_slave_1 added [ 2035.047542][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.048044][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.187399][T21099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2035.187413][T21099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.223009][T21099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.264309][T21099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.264324][T21099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.264342][T21099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2035.506186][T21099] hsr_slave_0: entered promiscuous mode [ 2035.512660][T21099] hsr_slave_1: entered promiscuous mode [ 2035.516027][T21099] debugfs: 'hsr0' already exists in 'hsr' [ 2035.516054][T21099] Cannot create hsr debugfs directory [ 2037.649618][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.649744][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.351730][T21099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2038.400274][T21099] 8021q: adding VLAN 0 to HW filter on device team0 [ 2038.455753][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.455949][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2038.558001][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.558105][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2039.541194][T20975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2041.156974][T21321] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4170'. [ 2042.665567][T21331] loop2: detected capacity change from 0 to 256 [ 2042.962046][ T38] audit: type=1800 audit(2000001732.847:154): pid=21309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4169" name="file1" dev="overlay" ino=2189 res=0 errno=0 [ 2043.267768][T21099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2043.575373][T20975] veth0_vlan: entered promiscuous mode [ 2043.635930][T20975] veth1_vlan: entered promiscuous mode [ 2043.886988][T20975] veth0_macvtap: entered promiscuous mode [ 2043.979710][T20975] veth1_macvtap: entered promiscuous mode [ 2044.174516][T20975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2044.227817][T20975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2044.317376][ T5620] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2044.467312][ T5620] usb 3-1: Using ep0 maxpacket: 16 [ 2044.470916][ T5620] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.470947][ T5620] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2044.473413][ T5620] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 2044.473445][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2044.473480][ T5620] usb 3-1: SerialNumber: syz [ 2044.540373][ T5620] usb 3-1: 0:2 : does not exist [ 2044.797400][T21001] udevd[21001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 2044.880963][T21344] netlink: 'syz.2.4175': attribute type 10 has an invalid length. [ 2045.072614][T21344] syz_tun: entered promiscuous mode [ 2045.159505][T21344] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2045.189473][ T5620] usb 3-1: USB disconnect, device number 36 [ 2046.673216][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2046.673244][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2046.702590][T21099] veth0_vlan: entered promiscuous mode [ 2046.905185][T21361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4178'. [ 2047.890576][ T8775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2047.890599][ T8775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2048.239804][T21099] veth1_vlan: entered promiscuous mode [ 2048.697213][ T8472] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2048.825591][T21099] veth0_macvtap: entered promiscuous mode [ 2048.854595][T21099] veth1_macvtap: entered promiscuous mode [ 2048.995429][ T8472] usb 1-1: device descriptor read/64, error -71 [ 2049.160555][T21099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2049.182555][T21099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2049.259464][ T8472] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2049.397901][ T8472] usb 1-1: device descriptor read/64, error -71 [ 2049.516431][ T8472] usb usb1-port1: attempt power cycle [ 2049.563859][T21380] loop4: detected capacity change from 0 to 1024 [ 2049.565258][T21380] EXT4-fs: Ignoring removed orlov option [ 2049.869938][T21380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2049.870094][T21380] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2049.907009][ T8472] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2049.927818][ T8472] usb 1-1: device descriptor read/8, error -71 [ 2050.215479][ T8472] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2050.237815][ T8472] usb 1-1: device descriptor read/8, error -71 [ 2050.544240][ T8472] usb usb1-port1: unable to enumerate USB device [ 2051.637026][T21383] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 2051.822564][T16639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2051.945592][T16639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2051.958466][T16639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2052.053809][T16639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2052.060776][T16639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2052.293555][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.293579][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.931508][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2057.074163][T14099] Bluetooth: hci2: command tx timeout [ 2057.188156][ T8775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.188182][ T8775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.530432][T21392] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.530872][T21392] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.531208][T21392] bridge_slave_0: entered allmulticast mode [ 2058.535229][T21392] bridge_slave_0: entered promiscuous mode [ 2058.541556][T21392] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.542004][T21392] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.542331][T21392] bridge_slave_1: entered allmulticast mode [ 2058.547498][T21392] bridge_slave_1: entered promiscuous mode [ 2058.798374][T21392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2058.913958][T21392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2059.046584][T21391] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2059.227997][T14099] Bluetooth: hci2: command tx timeout [ 2059.295563][T21391] usb 5-1: Using ep0 maxpacket: 16 [ 2059.318405][T21391] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.318437][T21391] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2059.320230][T21391] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 2059.320262][T21391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2059.320286][T21391] usb 5-1: SerialNumber: syz [ 2060.060778][T21391] usb 5-1: 0:2 : does not exist [ 2060.183725][T21001] udevd[21001]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 2060.202726][ T5905] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2060.270128][T21432] netlink: 'syz.4.4191': attribute type 10 has an invalid length. [ 2060.317859][ T5905] usb 7-1: device descriptor read/64, error -71 [ 2061.006465][ T5905] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2061.221546][T21452] binder: BINDER_SET_CONTEXT_MGR already set [ 2061.221564][T21452] binder: 21450:21452 ioctl 4018620d 200000000040 returned -16 [ 2061.306488][ T5905] usb 7-1: device descriptor read/64, error -71 [ 2061.322183][T14099] Bluetooth: hci2: command tx timeout [ 2061.417254][ T5905] usb usb7-port1: attempt power cycle [ 2061.442578][T21432] syz_tun: entered promiscuous mode [ 2061.474295][T21432] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2061.506809][ T5620] usb 5-1: USB disconnect, device number 55 [ 2061.608917][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4198'. [ 2061.676634][T21458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4198'. [ 2062.888560][ T5905] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2063.096372][ T5905] usb 7-1: device not accepting address 23, error -71 [ 2063.303661][T21464] loop6: detected capacity change from 0 to 512 [ 2063.731604][T21467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4199'. [ 2063.773073][T14099] Bluetooth: hci2: command tx timeout [ 2064.356500][T18620] bridge_slave_1: left allmulticast mode [ 2064.356543][T18620] bridge_slave_1: left promiscuous mode [ 2064.356852][T18620] bridge0: port 2(bridge_slave_1) entered disabled state [ 2064.389602][T21464] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2064.410664][T21464] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4201: inode has both inline data and extents flags [ 2064.410699][T21464] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 2064.416161][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 2064.416184][ C1] EXT4-fs (loop6): initial error at time 2000001754: ext4_orphan_get:1397: inode 15 [ 2064.416210][ C1] EXT4-fs (loop6): last error at time 2000001754: ext4_orphan_get:1397: inode 15 [ 2064.479451][T21464] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4201: couldn't read orphan inode 15 (err -117) [ 2064.479490][T21464] loop6: lost filesystem error report for type 5 error -117 [ 2064.514069][T21464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2064.541605][T21474] loop4: detected capacity change from 0 to 512 [ 2064.544962][T21474] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2064.645578][T18620] bridge_slave_0: left allmulticast mode [ 2064.645621][T18620] bridge_slave_0: left promiscuous mode [ 2064.645945][T18620] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.659533][T21474] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4202: inode has both inline data and extents flags [ 2064.659569][T21474] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 2064.659893][T21474] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4202: couldn't read orphan inode 15 (err -117) [ 2064.659923][T21474] loop4: lost filesystem error report for type 5 error -117 [ 2064.854344][T21474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2068.197310][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2068.197817][T21099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2068.785529][ T5905] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2068.965968][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 2068.968492][ T5905] usb 1-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 2068.968552][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2068.968586][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2068.968611][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2068.968638][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2068.970164][ T5905] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2068.970194][ T5905] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2068.970217][ T5905] usb 1-1: Manufacturer: syz [ 2068.988422][T21491] loop4: detected capacity change from 0 to 1024 [ 2069.007061][ T5905] usb 1-1: config 0 descriptor?? [ 2069.079910][T21491] EXT4-fs: Ignoring removed orlov option [ 2069.224752][T21491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2069.224906][T21491] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2069.486096][ T5905] rc_core: IR keymap rc-hauppauge not found [ 2069.486122][ T5905] Registered IR keymap rc-empty [ 2069.486293][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2069.510557][T18620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2069.516772][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2069.849650][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2069.900162][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input85 [ 2069.934929][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2069.951129][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2069.976698][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2069.995992][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2070.016106][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2070.036261][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2070.056134][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2070.083444][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2070.098078][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2070.116198][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2070.155583][ T5905] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2070.156045][ T5905] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2070.215929][T18620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2070.259269][ T5905] usb 1-1: USB disconnect, device number 112 [ 2070.269680][T18620] bond0 (unregistering): Released all slaves [ 2070.410959][T21392] team0: Port device team_slave_0 added [ 2070.721485][T21392] team0: Port device team_slave_1 added [ 2071.419471][T21511] binder: BINDER_SET_CONTEXT_MGR already set [ 2071.419490][T21511] binder: 21509:21511 ioctl 4018620d 200000000040 returned -16 [ 2071.868184][T21392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2071.868205][T21392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.868237][T21392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2071.872105][T21392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2071.872133][T21392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.872164][T21392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2072.209533][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2072.274599][T21362] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2072.427758][T21362] usb 7-1: device descriptor read/64, error -71 [ 2072.473076][T21523] overlayfs: missing 'workdir' [ 2072.573007][T21392] hsr_slave_0: entered promiscuous mode [ 2072.574556][T21392] hsr_slave_1: entered promiscuous mode [ 2072.587727][T21392] debugfs: 'hsr0' already exists in 'hsr' [ 2072.587758][T21392] Cannot create hsr debugfs directory [ 2072.695144][T21362] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2072.821678][T21527] loop2: detected capacity change from 0 to 512 [ 2072.836555][T21362] usb 7-1: device descriptor read/64, error -71 [ 2072.850875][T21527] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2072.857738][T21527] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4214: inode has both inline data and extents flags [ 2072.857773][T21527] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 2072.858207][T21527] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4214: couldn't read orphan inode 15 (err -117) [ 2072.858236][T21527] loop2: lost filesystem error report for type 5 error -117 [ 2072.948273][T21362] usb usb7-port1: attempt power cycle [ 2072.985122][T21527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2075.249525][T21362] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2075.322419][T21362] usb 7-1: device descriptor read/8, error -71 [ 2075.431998][T19507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2077.949481][T21539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4216'. [ 2078.005134][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4216'. [ 2078.083732][T21541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4217'. [ 2078.566968][T21548] loop2: detected capacity change from 0 to 1024 [ 2078.569355][T21548] EXT4-fs: Ignoring removed orlov option [ 2079.306190][T21548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2079.306352][T21548] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2080.027064][T21562] binder: BINDER_SET_CONTEXT_MGR already set [ 2080.027083][T21562] binder: 21560:21562 ioctl 4018620d 200000000040 returned -16 [ 2080.195461][T18620] hsr_slave_0: left promiscuous mode [ 2080.235321][T18620] hsr_slave_1: left promiscuous mode [ 2080.236239][T18620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2080.236260][T18620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2080.256676][T18620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2080.256707][T18620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2080.337038][T18620] veth1_macvtap: left promiscuous mode [ 2080.337111][T18620] veth0_macvtap: left promiscuous mode [ 2080.337326][T18620] veth1_vlan: left promiscuous mode [ 2080.337469][T18620] veth0_vlan: left promiscuous mode [ 2081.206192][T18620] team0 (unregistering): Port device team_slave_1 removed [ 2081.245349][T13375] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2081.391287][T18620] team0 (unregistering): Port device team_slave_0 removed [ 2081.426549][T13375] usb 5-1: Using ep0 maxpacket: 16 [ 2081.429322][T13375] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.429351][T13375] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2082.162470][T13375] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2082.162509][T13375] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2082.162531][T13375] usb 5-1: Manufacturer: syz [ 2082.310159][T13375] usb 5-1: config 0 descriptor?? [ 2082.620831][T19507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2082.733935][ T38] audit: type=1326 audit(2000001772.689:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2082.766969][ T38] audit: type=1326 audit(2000001772.689:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2082.767036][ T38] audit: type=1326 audit(2000001772.689:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2082.767088][ T38] audit: type=1326 audit(2000001772.729:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2082.767138][ T38] audit: type=1326 audit(2000001772.729:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2082.823815][ T38] audit: type=1326 audit(2000001772.779:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14c2b2d68e code=0x7ffc0000 [ 2082.825975][ T38] audit: type=1326 audit(2000001772.789:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14c2b2d68e code=0x7ffc0000 [ 2082.827291][ T38] audit: type=1326 audit(2000001772.789:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14c2b2d68e code=0x7ffc0000 [ 2082.828518][ T38] audit: type=1326 audit(2000001772.789:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14c2b2d68e code=0x7ffc0000 [ 2082.830896][ T38] audit: type=1326 audit(2000001772.789:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.6.4228" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14c2b2d68e code=0x7ffc0000 [ 2083.321323][T21392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2083.361656][T21392] 8021q: adding VLAN 0 to HW filter on device team0 [ 2083.379573][T18674] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.379909][T18674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2083.429901][T18674] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.433580][T18674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.289924][T21469] usb 5-1: USB disconnect, device number 56 [ 2085.529813][T21620] binder: BINDER_SET_CONTEXT_MGR already set [ 2085.529832][T21620] binder: 21613:21620 ioctl 4018620d 200000000040 returned -16 [ 2085.573134][T21607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4229'. [ 2088.812801][T21648] loop4: detected capacity change from 0 to 4096 [ 2088.828685][T21648] EXT4-fs: Ignoring removed mblk_io_submit option [ 2088.833791][T21648] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2088.902303][T21648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2089.110346][ T38] kauditd_printk_skb: 127 callbacks suppressed [ 2089.110369][ T38] audit: type=1326 audit(2000001779.069:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a85ce59 code=0x7ffc0000 [ 2089.111344][ T38] audit: type=1326 audit(2000001779.069:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a85ce59 code=0x7ffc0000 [ 2089.111401][ T38] audit: type=1326 audit(2000001779.069:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a85ce59 code=0x7ffc0000 [ 2089.111454][ T38] audit: type=1326 audit(2000001779.069:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a85ce59 code=0x7ffc0000 [ 2089.112287][ T38] audit: type=1326 audit(2000001779.069:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa82a85ce59 code=0x7ffc0000 [ 2089.112505][ T38] audit: type=1326 audit(2000001779.069:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a85ce59 code=0x7ffc0000 [ 2089.113057][ T38] audit: type=1326 audit(2000001779.069:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a85ce59 code=0x7ffc0000 [ 2089.113115][ T38] audit: type=1326 audit(2000001779.069:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa82a81d68e code=0x7ffc0000 [ 2089.114433][ T38] audit: type=1326 audit(2000001779.069:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa82a81d68e code=0x7ffc0000 [ 2089.135064][ T38] audit: type=1326 audit(2000001779.099:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21653 comm="syz.0.4241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa82a81d68e code=0x7ffc0000 [ 2091.020381][T21392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2091.034979][T17920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2091.087570][T21675] loop2: detected capacity change from 0 to 1024 [ 2091.092565][T21675] EXT4-fs: Ignoring removed orlov option [ 2091.232650][T21675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2091.232807][T21675] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2091.342984][T21679] binder: BINDER_SET_CONTEXT_MGR already set [ 2091.343003][T21679] binder: 21673:21679 ioctl 4018620d 200000000040 returned -16 [ 2093.033385][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4247'. [ 2093.038771][T21688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4247'. [ 2094.181277][T19507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2094.446385][T21699] loop6: detected capacity change from 0 to 1024 [ 2094.461333][T21699] EXT4-fs: Ignoring removed orlov option [ 2094.520722][T21699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2094.520883][T21699] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2095.134464][T12620] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2095.381078][T21392] veth0_vlan: entered promiscuous mode [ 2095.396547][T21392] veth1_vlan: entered promiscuous mode [ 2095.405406][T12620] usb 5-1: Using ep0 maxpacket: 16 [ 2095.422674][T12620] usb 5-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 2095.422737][T12620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2095.422769][T12620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2095.422792][T12620] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2095.422817][T12620] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2095.426972][T12620] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2095.427005][T12620] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2095.427029][T12620] usb 5-1: Manufacturer: syz [ 2095.507718][T12620] usb 5-1: config 0 descriptor?? [ 2095.681868][T21392] veth0_macvtap: entered promiscuous mode [ 2095.736719][T21392] veth1_macvtap: entered promiscuous mode [ 2095.795859][T12620] rc_core: IR keymap rc-hauppauge not found [ 2095.795884][T12620] Registered IR keymap rc-empty [ 2095.796059][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2095.828451][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2095.846874][T12620] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2095.871026][T12620] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input86 [ 2095.892234][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2095.904526][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2095.924758][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2095.949053][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2095.964979][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2095.984635][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2095.993979][T21392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2095.999772][T21099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2096.004703][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2096.024626][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2096.044582][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2096.064679][T12620] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2096.108379][T12620] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2096.108408][T12620] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2096.151884][T21392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2096.236978][T21469] usb 5-1: USB disconnect, device number 57 [ 2097.152910][ T38] kauditd_printk_skb: 134 callbacks suppressed [ 2097.152934][ T38] audit: type=1326 audit(2000001787.080:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2097.152992][ T38] audit: type=1326 audit(2000001787.080:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2097.153044][ T38] audit: type=1326 audit(2000001787.090:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2097.153093][ T38] audit: type=1326 audit(2000001787.090:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2097.153150][ T38] audit: type=1326 audit(2000001787.090:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2097.153197][ T38] audit: type=1326 audit(2000001787.090:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2097.153243][ T38] audit: type=1326 audit(2000001787.090:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c2b6ce59 code=0x7ffc0000 [ 2097.153290][ T38] audit: type=1326 audit(2000001787.090:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14c2b2d68e code=0x7ffc0000 [ 2097.153337][ T38] audit: type=1326 audit(2000001787.110:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14c2b2d68e code=0x7ffc0000 [ 2097.153383][ T38] audit: type=1326 audit(2000001787.110:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.6.4254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14c2b2d68e code=0x7ffc0000 [ 2098.107097][T12740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2098.107118][T12740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.503047][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2098.503071][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.998453][T21750] netlink: 'syz.4.4261': attribute type 4 has an invalid length. [ 2099.153397][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.165156][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.789024][T21763] binder: 21754:21763 ioctl 40109441 200000000100 returned -22 [ 2101.994122][T21469] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2102.454071][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2102.614029][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 2102.617314][ T10] usb 3-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 2102.617381][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2102.617415][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2102.617441][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2102.617469][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2102.619447][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2102.619479][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2102.619503][ T10] usb 3-1: Manufacturer: syz [ 2102.746775][ T10] usb 3-1: config 0 descriptor?? [ 2103.104133][T21469] usb 7-1: Using ep0 maxpacket: 32 [ 2103.349243][ T10] rc_core: IR keymap rc-hauppauge not found [ 2103.349275][ T10] Registered IR keymap rc-empty [ 2103.350573][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.369412][T21469] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 2103.369442][T21469] usb 7-1: config 0 has no interface number 0 [ 2103.369499][T21469] usb 7-1: config 0 interface 184 has no altsetting 0 [ 2103.383184][T21469] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2103.383231][T21469] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.383253][T21469] usb 7-1: Product: syz [ 2103.383268][T21469] usb 7-1: Manufacturer: syz [ 2103.383285][T21469] usb 7-1: SerialNumber: syz [ 2103.395984][T21469] usb 7-1: config 0 descriptor?? [ 2103.456089][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.501728][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2103.538346][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input87 [ 2103.666283][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.684210][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.710192][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.730734][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.787733][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.797718][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.837471][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.854170][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.877510][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.898516][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2103.939886][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2103.939917][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2104.093293][ T10] usb 3-1: USB disconnect, device number 37 [ 2104.198239][T21469] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 2104.198277][T21469] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2104.240127][T21772] loop5: detected capacity change from 0 to 256 [ 2104.508989][T21469] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2104.509020][T21469] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2104.509040][T21469] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2104.509061][T21469] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 2104.509287][T21469] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 2104.617920][T21469] usb 7-1: USB disconnect, device number 29 [ 2105.446569][T21780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4267'. [ 2107.327819][T21793] : renamed from bond_slave_0 (while UP) [ 2108.618163][T21469] ------------[ cut here ]------------ [ 2108.618183][T21469] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2108.618202][T21469] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3d5/0x590, CPU#1: kworker/1:0/21469 [ 2108.618256][T21469] Modules linked in: [ 2108.618281][T21469] CPU: 1 UID: 0 PID: 21469 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2108.618312][T21469] Tainted: [L]=SOFTLOCKUP [ 2108.618321][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2108.618336][T21469] Workqueue: events drm_fb_helper_damage_work [ 2108.618371][T21469] RIP: 0010:drm_crtc_wait_one_vblank+0x53c/0x590 [ 2108.618406][T21469] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 44 89 c7 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 13 f4 ff ff b8 92 ff ff ff [ 2108.618426][T21469] RSP: 0018:ffffc90004917920 EFLAGS: 00010246 [ 2108.618446][T21469] RAX: 1ffff11004c05c00 RBX: ffffffff8f985d40 RCX: 0000000000000000 [ 2108.618463][T21469] RDX: ffffffff8bc211e0 RSI: ffffffff8bc3e480 RDI: ffffffff8f985d40 [ 2108.618480][T21469] RBP: ffffc90004917a08 R08: 0000000000000000 R09: 0000000000000000 [ 2108.618497][T21469] R10: dffffc0000000000 R11: fffffbfff1f1a07f R12: ffffffff8bc3e480 [ 2108.618513][T21469] R13: ffff88802602e000 R14: 0000000000000000 R15: ffffffff8bc211e0 [ 2108.618531][T21469] FS: 0000000000000000(0000) GS:ffff888125fcd000(0000) knlGS:0000000000000000 [ 2108.618550][T21469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2108.618566][T21469] CR2: 0000001b32a11ff8 CR3: 00000000249e0000 CR4: 00000000003526f0 [ 2108.618588][T21469] Call Trace: [ 2108.618597][T21469] [ 2108.618614][T21469] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 2108.618647][T21469] ? rt_spin_unlock+0x14f/0x200 [ 2108.618679][T21469] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2108.618711][T21469] ? rt_spin_unlock+0x160/0x200 [ 2108.618745][T21469] ? drm_vblank_get+0x147/0x280 [ 2108.618781][T21469] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 2108.618814][T21469] drm_fb_helper_damage_work+0x131/0x720 [ 2108.618853][T21469] ? process_one_work+0x8be/0x1630 [ 2108.618895][T21469] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 2108.618941][T21469] ? process_one_work+0x8be/0x1630 [ 2108.618976][T21469] process_one_work+0x98b/0x1630 [ 2108.619072][T21469] ? __pfx_process_one_work+0x10/0x10 [ 2108.619106][T21469] ? do_raw_spin_lock+0x12b/0x2f0 [ 2108.619154][T21469] worker_thread+0xb49/0x1140 [ 2108.619190][T21469] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.619245][T21469] kthread+0x388/0x470 [ 2108.619275][T21469] ? __pfx_worker_thread+0x10/0x10 [ 2108.619296][T21469] ? __pfx_kthread+0x10/0x10 [ 2108.619327][T21469] ret_from_fork+0x514/0xb70 [ 2108.619361][T21469] ? __pfx_ret_from_fork+0x10/0x10 [ 2108.619393][T21469] ? __switch_to+0xc79/0x1410 [ 2108.619423][T21469] ? __pfx_kthread+0x10/0x10 [ 2108.619453][T21469] ret_from_fork_asm+0x1a/0x30 [ 2108.619507][T21469] [ 2108.619520][T21469] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2108.619538][T21469] CPU: 1 UID: 0 PID: 21469 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2108.619569][T21469] Tainted: [L]=SOFTLOCKUP [ 2108.619577][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2108.619591][T21469] Workqueue: events drm_fb_helper_damage_work [ 2108.619632][T21469] Call Trace: [ 2108.619641][T21469] [ 2108.619651][T21469] vpanic+0x56c/0xa60 [ 2108.619684][T21469] ? __pfx__printk+0x10/0x10 [ 2108.619708][T21469] ? __pfx_vpanic+0x10/0x10 [ 2108.619738][T21469] ? is_bpf_text_address+0x292/0x2b0 [ 2108.619770][T21469] ? is_bpf_text_address+0x26/0x2b0 [ 2108.619810][T21469] panic+0xc5/0xd0 [ 2108.619841][T21469] ? __pfx_panic+0x10/0x10 [ 2108.619884][T21469] ? ret_from_fork_asm+0x1a/0x30 [ 2108.619923][T21469] __warn+0x315/0x4c0 [ 2108.619954][T21469] ? drm_crtc_wait_one_vblank+0x3d5/0x590 [ 2108.619990][T21469] ? drm_crtc_wait_one_vblank+0x3d5/0x590 [ 2108.620026][T21469] __report_bug+0x339/0x540 [ 2108.620067][T21469] ? drm_crtc_wait_one_vblank+0x3d5/0x590 [ 2108.620102][T21469] ? __pfx___report_bug+0x10/0x10 [ 2108.620138][T21469] ? drm_crtc_wait_one_vblank+0x541/0x590 [ 2108.620180][T21469] report_bug_entry+0x19a/0x290 [ 2108.620207][T21469] ? drm_crtc_wait_one_vblank+0x53c/0x590 [ 2108.620239][T21469] ? drm_crtc_wait_one_vblank+0x541/0x590 [ 2108.620272][T21469] handle_bug+0xce/0x200 [ 2108.620300][T21469] exc_invalid_op+0x1a/0x50 [ 2108.620327][T21469] asm_exc_invalid_op+0x1a/0x20 [ 2108.620350][T21469] RIP: 0010:drm_crtc_wait_one_vblank+0x53c/0x590 [ 2108.620384][T21469] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 44 89 c7 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 13 f4 ff ff b8 92 ff ff ff [ 2108.620404][T21469] RSP: 0018:ffffc90004917920 EFLAGS: 00010246 [ 2108.620423][T21469] RAX: 1ffff11004c05c00 RBX: ffffffff8f985d40 RCX: 0000000000000000 [ 2108.620438][T21469] RDX: ffffffff8bc211e0 RSI: ffffffff8bc3e480 RDI: ffffffff8f985d40 [ 2108.620455][T21469] RBP: ffffc90004917a08 R08: 0000000000000000 R09: 0000000000000000 [ 2108.620470][T21469] R10: dffffc0000000000 R11: fffffbfff1f1a07f R12: ffffffff8bc3e480 [ 2108.620486][T21469] R13: ffff88802602e000 R14: 0000000000000000 R15: ffffffff8bc211e0 [ 2108.620528][T21469] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 2108.620561][T21469] ? rt_spin_unlock+0x14f/0x200 [ 2108.620590][T21469] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2108.620621][T21469] ? rt_spin_unlock+0x160/0x200 [ 2108.620654][T21469] ? drm_vblank_get+0x147/0x280 [ 2108.620690][T21469] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 2108.620723][T21469] drm_fb_helper_damage_work+0x131/0x720 [ 2108.620760][T21469] ? process_one_work+0x8be/0x1630 [ 2108.620799][T21469] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 2108.620846][T21469] ? process_one_work+0x8be/0x1630 [ 2108.620879][T21469] process_one_work+0x98b/0x1630 [ 2108.620940][T21469] ? __pfx_process_one_work+0x10/0x10 [ 2108.620972][T21469] ? do_raw_spin_lock+0x12b/0x2f0 [ 2108.621019][T21469] worker_thread+0xb49/0x1140 [ 2108.621061][T21469] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.621115][T21469] kthread+0x388/0x470 [ 2108.621144][T21469] ? __pfx_worker_thread+0x10/0x10 [ 2108.621165][T21469] ? __pfx_kthread+0x10/0x10 [ 2108.621194][T21469] ret_from_fork+0x514/0xb70 [ 2108.621228][T21469] ? __pfx_ret_from_fork+0x10/0x10 [ 2108.621258][T21469] ? __switch_to+0xc79/0x1410 [ 2108.621288][T21469] ? __pfx_kthread+0x10/0x10 [ 2108.621318][T21469] ret_from_fork_asm+0x1a/0x30 [ 2108.621369][T21469] [ 2108.621831][T21469] Kernel Offset: disabled