last executing test programs: 23m59.417962383s ago: executing program 32 (id=108): syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x80) sysinfo(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 18m50.595866349s ago: executing program 33 (id=702): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 18m43.0489892s ago: executing program 34 (id=717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001200000024"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe9a8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x4c}}, 0x4000080) syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') 12m55.589627464s ago: executing program 35 (id=1337): io_setup(0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000001, 0x0, 0x2, 0x0) gettid() syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800002, &(0x7f0000000100)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec590d6e84de0249d09f31ef580c3d00000000", @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32], 0x1, 0x1b0, &(0x7f0000000700)="$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") ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000940)={0xaa, 0x423}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@dax}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) shutdown(r2, 0x1) 12m35.666294761s ago: executing program 36 (id=1368): prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="080005000200000053296ef228222cc0752a616a0957e618169da1764826db935425dbffea0a954bcadcc876077ff52192d3793e1222af96e98d75596d2c80eb8676f7eabcee4f1c5cb9722f3ea3d74f1dd478b700ffbd11e15a07bf790b6c13601dbc91f44045153bbe"], 0x24}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) unlinkat(0xffffffffffffff9c, 0x0, 0x279) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) mount$overlay(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x1800000, &(0x7f0000000cc0)={[{@upperdir={'upperdir', 0x3d, './file1'}}], [{@fowner_lt}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x243020, &(0x7f0000000680)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@lazytime}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@nouid32}, {@dax_always}, {@noload}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_lt}, {@smackfsdef={'smackfsdef', 0x3d, '\"ic'}}, {@subj_type={'subj_type', 0x3d, '\x8bhpoly1305-avx2\x00=6~S\xb6\xd5\xfb\xab\b\x87@\x15&\x83gF\x10\xa4/\x18\x10\x1f\x882\xec0\xbc\xf3f|/u\xfa\vf\xb3\r\xdd\x12\xa4\x8d\xed\r\xd4\x10'}}, {@subj_role={'subj_role', 0x3d, 'dax=always'}}]}, 0x1, 0x571, &(0x7f0000001180)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000003c0)=@nullb, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) recvmsg$unix(r0, &(0x7f0000000c00)={&(0x7f0000000400)=@abs, 0x6e, 0x0}, 0x40010001) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xff0f0000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m7.91381621s ago: executing program 7 (id=2085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000004b80)=@ethtool_coalesce={0xe, 0x4, 0x9c12, 0x5, 0x1, 0x2000002, 0x0, 0x0, 0x10001, 0x5, 0x8, 0x100, 0x10, 0x4, 0x7, 0x4, 0x9, 0x6, 0x7ff, 0x7, 0x3, 0x1, 0x5653}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$loop(0x0, 0x40, 0x161000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, 0x0, 0x0) 7m6.276992982s ago: executing program 7 (id=2087): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7m6.031901622s ago: executing program 7 (id=2088): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000340), 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe4a}, 0x0, {[0xffffffff, 0x0, 0x4, 0xc26, 0x6, 0x5, 0x5, 0x4]}}, 0x5c) sendfile(r0, r0, 0x0, 0x800000009) 7m5.768386197s ago: executing program 7 (id=2091): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 7m5.54689384s ago: executing program 7 (id=2096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x6000, 0x0) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r8, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000180), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc044560f, 0x0) 7m1.113855324s ago: executing program 7 (id=2105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x6000, 0x0) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 6m45.708498793s ago: executing program 37 (id=2105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x6000, 0x0) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 5m28.364179891s ago: executing program 4 (id=2251): r0 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x31040c4, &(0x7f00000000c0)=ANY=[], 0x1, 0x1cd, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmBiQAAvDC0YGFGAD5TdD6YVQuuKW9ro1p/zOnPTU1Vomy8zQ6qktjywml9pj5Ca5mEeCmSE09cii4sqq7MScnNSi4oUMFbeSkypOn2BguW5/TaVZgtPhjzyHQ5Kmgw7TER+PrBmNJZyTpDTF2NgyFc6e+SC/jk3jCMOjFcwb6zzzGusKQdbnJVVlVWXNmzhx48zGzsbGlRProtL8VjG2pLhsaupkZHLYoiawmdlQfZKN9oR37aseJjmw9nj4NZ8yVnqdynzJeGGR1KkVVTMnfFGazWj4neEOT9kKCQ0NJ4krEhYNJgxH6mwbXEFOTGlgSFMIY0xSYxNr23JmTggzP5vbAoWW5BNMoUc5ls6UsDggVHXyp6XmW4dEtxnbnjqwneE5fJxnTUGfoNFxCQanhYL/ZUDGJDQ0lGmsZVpqu+BLkcZfCa/Vxk4ZDO72TMtgAcrSACJXQnmyYD0JySs8dDQ1jVKSExo2SSQkuRUYKjNs3cO5WqCBASnaVBgYGLYzwuIWAq6hxd8oGAWjYBSMglEwCkbBKBgFo2AUjILhDQABAAD//+vElbk=") r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000040), &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x1001, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) close_range(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 5m26.681405327s ago: executing program 4 (id=2254): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e23, 0xa4bd, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3}], 0x54) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r2 = semget(0x1, 0x5, 0x6b4) semtimedop(r2, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) semctl$GETZCNT(r2, 0x0, 0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = getpgid(0xffffffffffffffff) move_pages(r5, 0x2, &(0x7f0000000000)=[&(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000180), &(0x7f0000000280)=[0x0], 0x4) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe4a}, 0x0, {[0xffffffff, 0x0, 0x4, 0xc26, 0x6, 0x5, 0x5, 0x4]}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 5m21.083657629s ago: executing program 4 (id=2264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000940)=ANY=[], 0x0) 5m19.618127376s ago: executing program 4 (id=2270): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000780)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}, {@noblock_validity}, {@commit}, {@inlinecrypt}, {@delalloc}, {@grpid}, {@auto_da_alloc}, {@resgid}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 5m17.901603711s ago: executing program 4 (id=2273): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000280)=ANY=[@ANYBLOB='nonumtail=0,shortname=winnt,nonumtail=0,iocharset=iso8859-1,codepage=950,shortname=winnt,utf8=0,nonqmtail=0,discard,discard,shortname=lower,A|f8=0,usefree,shortname=win95,uni_xlateH0,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x360, &(0x7f0000001280)="$eJzs3U9oHFUYAPBvO/lbaJODUBSE0ZugoX/woKeUkkJxLypL1YO42FQlGwtZXEwP3caLeBQ86smLeNCDh55FUMSbB69WkKp40N4KFp/s7mx2NrtJU2Fbg7/fYfnyvffNe28zyU4m2ZdXlmPtwnRcvHnzRszNVWJq+cxy3KrEYmTRdzVGzYzJAQAHw62U4s/Us8+SyoSnBABMWPf1/7Ujpcw7X+/VP3n1B4ADr/j5f36vPnO7NVyayJQAgAkbuf//6FDzzPCv+qdKfxUAABxUz7/40jOnqxHP5flcxPq7rVqrFk8P2k9fjDeiEatxPBbidkTvQqHzUOk+nj1XXTme53k7flmMWqeiVYtYb7dqvSuF01m3fjZOxEIsFvXF1UZKKTv7RXXlRN4VEVfb3fFjvdKqTcfhYvwfD8dqnIw8HhipjzhXXTmZFweorffr2xFbg/sWnfkvxUJ8/2pcikZcmD8fKfUva6orV07k+ZlUHapv1WbjwvazsOsdEAAAAAAAAAAAAAAAAAAAAAAA+FeW8m2L2/vfpMH+PUtLY9q7++P06ov9gbZ6+wOl2RQp/fH2E7X3shjaH2jn/jyt2lQcur9LBwAAAAAAAAAAAAAAAAAAgP+M5uZM1BuN1Y3m5uW1ctDeaG4eiohO5s1vP/tqPkb73CGYKsYoNeVF6vJaPWX9zikb6lMEWWfwfubTa9szLveZ3V7F2GnM7t7UaBx55OcPB5mHs/6R/x70yWL8ArMd0ygH60d7U7qbJ+ryqSI4eYfO11NKux3nysujVVGJmLr7T9zeQeoE39x4/cFTzWNPdjNfpp7HHl84f/2Dj39bqzc6I3c0PpnZaN5Oa/Xi4/En2+5BVjp/KtELKuUzYWqv8q3hTD374fcXHnr/u/2NnsqZt8b0yXrL+XyjuVkpvlK6TTO9oJPbUTXfOJdF7DjO9JiTfwLBsY+W69eu/PTrfqtK3yRs1AEAAAAAAAAAAAAAAAAAAPdE6b3iheLNvtN7VT317ORnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zuD//5eCrZHMfoK/2jHaNLu60Yw4er+XCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9w/AQAA///ftWu9") r0 = creat(0x0, 0x4) io_setup(0x202, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0xd7, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x185099, 0x0) syncfs(0xffffffffffffffff) r6 = gettid() syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000900)=""/252, 0x0, 0xfc, 0x1}, 0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x1, 0x8b, 0x3a, 0x20, 0x711, 0x210, 0x7c8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd3, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x62, 0x1, 0x0, 0x5b, 0x37, 0xe1, 0x4}}]}}]}}, 0x0) sendfile(r1, r1, 0x0, 0x200000) 5m10.982035793s ago: executing program 4 (id=2286): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x6, 0x6808, 0x131, &(0x7f00000009c0)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143fdcec18cc8b3213976a3fc08aff92f2b89945b7b0c5eefa27023b1255d07451cb983965bf38fa80e4f5da4a21b5352bff6de3f6e27b29198193485b14b2dfafd1ad93bac454dc7168420ddbb1513d32409ea706b665945461437464ad4a16f867ea0ff0e33665bb6378cd9b2957427ee7f35f80400c9b8242cc33be0bc4b1b4039e069ccf4c75f10653c0036fe1dbb9d7f1a17da09a01e9e7ef6a2210d2b194c29105f128d7fd0c34f1c3c2285c80e5554f85f67350c7e8f73350268219fd32a5781564de771f746a935e1a4d0f93f67613a6f4c694fc0e79741eb12991547ba898bad26d3e5d32cda60f8ba7e8def5e6ba4ec67fbb13a46540600c283dff59a550bde0c387a71e0089744e31a3"}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 5m9.493024946s ago: executing program 38 (id=2286): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x6, 0x6808, 0x131, &(0x7f00000009c0)="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"}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 3m36.867899058s ago: executing program 2 (id=2476): unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x98, 0xd0, 0x48, {}, [@common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x149881) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000000000000014000100"], 0xbc}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[], 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3m34.650810555s ago: executing program 2 (id=2478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x202, &(0x7f0000000340)={0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m33.297926297s ago: executing program 0 (id=2480): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd000020062"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) 3m32.240024346s ago: executing program 0 (id=2481): prlimit64(0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket(0x1, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r2}, 0x10) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3m32.187440917s ago: executing program 2 (id=2482): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x101001a, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB], 0xfb, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m31.525902038s ago: executing program 2 (id=2486): r0 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x31040c4, &(0x7f00000000c0)=ANY=[], 0x1, 0x1cd, &(0x7f0000000780)="$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") socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x1001, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) close_range(r0, r0, 0x0) 3m29.538686134s ago: executing program 2 (id=2489): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}], 0xa, "34ea22841fb2c4dd9a210c21b5e1a4f447aac8d41d156dbbf720c15d87906e"}, 0x2b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x4001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x100}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m28.546482172s ago: executing program 0 (id=2490): r0 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x31040c4, &(0x7f00000000c0)=ANY=[], 0x1, 0x1cd, &(0x7f0000000780)="$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") r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000040), &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x1001, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) close_range(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 3m26.919349602s ago: executing program 0 (id=2492): unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x98, 0xd0, 0x48, {}, [@common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x149881) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 3m26.509680975s ago: executing program 2 (id=2493): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x105) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) close(r2) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100"/192], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3m24.908957205s ago: executing program 0 (id=2495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x202, &(0x7f0000000340)={0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m22.928670256s ago: executing program 0 (id=2500): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3f5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) fsopen(0x0, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], &(0x7f0000007d40)=[{}, {}, {}, {}, {}], &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x1}) read$FUSE(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a283, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3m11.222399826s ago: executing program 39 (id=2493): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x105) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) close(r2) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100"/192], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3m7.234020871s ago: executing program 40 (id=2500): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3f5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) fsopen(0x0, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], &(0x7f0000007d40)=[{}, {}, {}, {}, {}], &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x1}) read$FUSE(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a283, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 23.565828019s ago: executing program 1 (id=2849): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000000000000007", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 21.372894232s ago: executing program 1 (id=2857): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r0, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 18.649271701s ago: executing program 5 (id=2860): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'io'}]}, 0x4) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 18.468738077s ago: executing program 1 (id=2863): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.189504358s ago: executing program 5 (id=2866): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) r1 = socket(0xa, 0x3, 0xff) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x728e, 0x0, 0x0, 0x9, 0x50, 0xb57, 0x5df, 0x9, 0x0, 0xf, 'syz1\x00'}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x528, 0x1c0, 0x340, 0xffffffff, 0x340, 0x340, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x22, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}, @ipv4=@private=0xa010102, @icmp_id=0x67, @gre_key=0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffff9}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0xfa, 0x3, 0x3, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xffffffff], 0x20, 0x1020}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @ipv6=@remote, @gre_key, @gre_key=0x7}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv4=@empty, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @icmp_id=0x68, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x0, 0x19ef, 0x5, 0x3, 0x2800, 0x2800, 0x12, 0xd1, 0x12, 0x30, {0xb, 0x7}, 0xd0, 0x9}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x4c, 0x0, &(0x7f0000000240)) recvfrom$inet(r1, &(0x7f00000001c0)=""/10, 0xa, 0x0, &(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xc220, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0)}) syz_open_procfs(0xffffffffffffffff, 0x0) 17.23932239s ago: executing program 8 (id=2868): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x169042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x6000, 0x0, 0x0) 15.917623045s ago: executing program 5 (id=2870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 15.574303378s ago: executing program 8 (id=2872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x7}}, 0x8001, 0x7f}, &(0x7f0000000c80)=0x90) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)={[{@discard}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@zero_size_dir}, {@sys_tz}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@utf8}, {@utf8}, {@allow_utime={'allow_utime', 0x3d, 0x6}}]}, 0x1, 0x153b, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x2, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x641, 0x96) write$FUSE_STATX(r4, &(0x7f00000004c0)={0x130, 0x0, 0x0, {0x6, 0x6e2de0f9, 0x0, '\x00', {0x10000, 0x1, 0xfffffffffffffffd, 0xe, 0x0, 0x0, 0x1000, '\x00', 0x9, 0x6, 0xecff, 0x99, {0x3, 0xf65}, {0x5b02, 0x4}, {0x8, 0x3}, {0x7, 0xfffffffd}, 0xffff0001, 0x400, 0x954c, 0xffff8bd7}}}, 0x130) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) accept$alg(r5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x5, &(0x7f0000000240)=@raw=[@ldst={0x2, 0x2, 0x3, 0xb, 0x8, 0x5, 0xffffffffffffffff}, @ldst={0x1, 0x2, 0x3, 0x5, 0x6, 0x10, 0xfffffffffffffff0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @ldst={0x1, 0x0, 0x3, 0x6, 0x8, 0xffffffffffffffc0}], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)={0x1ff, 0x3, 0x0, 0x7, 0x3, 0x0, [{0xa, 0xd3eb, 0x6}, {0x1003, 0x1, 0x7fffffff, '\x00', 0x4081}, {0x3, 0x80000000, 0x1, '\x00', 0x108}]}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) 15.568870422s ago: executing program 3 (id=2873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000005c40)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x553}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 15.290114081s ago: executing program 5 (id=2874): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.267132195s ago: executing program 9 (id=2875): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}], 0xa, "34ea22841fb2c4dd9a210c21b5e1a4f447aac8d41d156dbbf720c15d87906e"}, 0x2b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r2, 0x89e2, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x100}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x80000) 14.445937509s ago: executing program 3 (id=2877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r1, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) 13.603905133s ago: executing program 9 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}}, 0x20000052) 13.46246892s ago: executing program 3 (id=2880): unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x100) r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x149881) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 13.32911816s ago: executing program 9 (id=2881): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101343) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0xc) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="000903000000826604"], 0x0, 0x0, 0x0, 0x0, 0x0}) 13.290537464s ago: executing program 8 (id=2882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}], 0x1, 0x800, 0x4000000) 12.597508355s ago: executing program 1 (id=2883): unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x98, 0xd0, 0x48, {}, [@common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x149881) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[], 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 11.277508195s ago: executing program 8 (id=2884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(0x0, 0x1802, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x452280, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 11.277122631s ago: executing program 6 (id=2885): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="26000000220047010500000700000000000000", 0x13) 10.502648704s ago: executing program 5 (id=2886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 10.299286549s ago: executing program 3 (id=2887): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r5, &(0x7f0000000240)="c62ee5d6a89f", 0x6, 0x8040, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x78) sendto$inet6(r5, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c", 0x12, 0x48c5, 0x0, 0x0) 9.648997555s ago: executing program 6 (id=2888): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) r1 = socket(0xa, 0x3, 0xff) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x728e, 0x0, 0x0, 0x9, 0x50, 0xb57, 0x5df, 0x9, 0x0, 0xf, 'syz1\x00'}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x528, 0x1c0, 0x340, 0xffffffff, 0x340, 0x340, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x22, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}, @ipv4=@private=0xa010102, @icmp_id=0x67, @gre_key=0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffff9}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0xfa, 0x3, 0x3, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xffffffff], 0x20, 0x1020}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @ipv6=@remote, @gre_key, @gre_key=0x7}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv4=@empty, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @icmp_id=0x68, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x0, 0x19ef, 0x5, 0x3, 0x2800, 0x2800, 0x12, 0xd1, 0x12, 0x30, {0xb, 0x7}, 0xd0, 0x9}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x4c, 0x0, &(0x7f0000000240)) recvfrom$inet(r1, &(0x7f00000001c0)=""/10, 0xa, 0x0, &(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xc220, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0)}) syz_open_procfs(0xffffffffffffffff, 0x0) 8.545124551s ago: executing program 3 (id=2889): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/4096, 0x1000, 0xff) 8.457124089s ago: executing program 9 (id=2890): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 7.101162063s ago: executing program 6 (id=2891): r0 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x31040c4, &(0x7f00000000c0)=ANY=[], 0x1, 0x1cd, &(0x7f0000000780)="$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") r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000040), &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x1001, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) close_range(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 6.976957083s ago: executing program 8 (id=2892): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}], 0xa, "34ea22841fb2c4dd9a210c21b5e1a4f447aac8d41d156dbbf720c15d87906e"}, 0x2b) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x100}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) 6.936590382s ago: executing program 9 (id=2893): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 6.87457971s ago: executing program 1 (id=2894): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x101, @empty, 0x8000}}, 0x0, 0x0, 0x3f8, 0x1, 0x3c}, 0x9c) 6.175237769s ago: executing program 5 (id=2895): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x98400, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000300)={[{@fileset={'fileset', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x10002}}, {@anchor={'anchor', 0x3d, 0x16}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uid_ignore}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@volume={'volume', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x1, 0xc37, &(0x7f0000001280)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005}) write$binfmt_script(r2, &(0x7f0000000880)={'#! ', '', [{0x20, 'DxU\xfb\b\xfb\xf6^\xaf\xa4Q\x82%\xa5k\x1eR\x16l\xe3*\xa0\xf58\x83\x0f\x9bt\x90\x14\xe19\x04bmJ\x98A\xd1\b\x18\xeb\xf5wJ\x95\xabc\a\xf5Q\xcff\x1a\xa4\xc4|4\"p\xfe\xde\x1cW\xaa\fQ-X\xa4\xe2\xcc\xe1\bE|\xa3\xc7\'\xf5\r\xa9F]\xee\xff\xdb\x96\xc8\xc7\x1c\x93'}, {0x20, '#-)(,}]^:'}, {0x20, '/dev/sg#\x00'}, {0x20, 'ext4\x00'}, {}, {0x20, '#^\x88%$'}, {0x20, '@--#&({'}, {0x20, '-'}, {0x20, '!'}], 0xa, "b33129f110fcc19ef8dff6dafe224cc1041cd0522e02f1fbff61f41bdbb43b87de23d9aa3eeef3d0677a1997e71099946d4a36a142d8dfc9"}, 0xc6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) 6.116452066s ago: executing program 6 (id=2896): connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="01"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) 5.97930314s ago: executing program 9 (id=2897): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589560d38"], 0x0) 5.778088348s ago: executing program 3 (id=2898): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20501, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00', 0x6}, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc2a6}], 0x38) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x8) shmdt(0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) 5.340901769s ago: executing program 1 (id=2899): unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x98, 0xd0, 0x48, {}, [@common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x149881) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 4.956906527s ago: executing program 6 (id=2900): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x107) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xa4c1, 0x8, 0x0, 0x0, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x3, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) close(r6) 416.690096ms ago: executing program 6 (id=2901): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r5, &(0x7f0000000240)="c62ee5d6a89f", 0x6, 0x8040, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x78) sendto$inet6(r5, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c", 0x12, 0x48c5, 0x0, 0x0) 0s ago: executing program 8 (id=2902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x7ffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): /root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1289.801523][ T30] audit: type=1326 audit(1761766866.148:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1289.914194][ T30] audit: type=1326 audit(1761766866.148:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1289.944654][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1289.983064][ T30] audit: type=1326 audit(1761766866.148:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1290.111535][ T30] audit: type=1326 audit(1761766866.148:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1290.259585][ T30] audit: type=1326 audit(1761766866.148:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1290.301940][ T30] audit: type=1326 audit(1761766866.148:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1290.379542][ T30] audit: type=1326 audit(1761766866.148:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1290.456236][ T30] audit: type=1326 audit(1761766866.148:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95bd8efc9 code=0x7ffc0000 [ 1291.196411][T15342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.222208][T15342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.241327][T15342] bridge_slave_0: entered allmulticast mode [ 1291.268931][T15342] bridge_slave_0: entered promiscuous mode [ 1291.297867][ T7157] syz_tun (unregistering): left promiscuous mode [ 1291.313089][T15502] tap0: tun_chr_ioctl cmd 1074812118 [ 1291.339347][T15342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.384937][T15342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.411435][T15342] bridge_slave_1: entered allmulticast mode [ 1291.588994][T15534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1291.595114][T15534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1291.601183][T15534] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1291.607216][T15534] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1291.613172][T15534] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1291.642638][T15342] bridge_slave_1: entered promiscuous mode [ 1291.652961][T15534] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1291.943558][T15342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.978689][T15342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.001400][ T5845] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1293.219553][ T5845] usb 10-1: device descriptor read/64, error -71 [ 1293.363961][T15342] team0: Port device team_slave_0 added [ 1293.404082][T15342] team0: Port device team_slave_1 added [ 1293.487714][ T5845] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1293.649690][ T9303] Bluetooth: hci5: command 0x0c1a tx timeout [ 1293.652145][T11540] Bluetooth: hci0: command 0x0406 tx timeout [ 1293.662862][ T9303] Bluetooth: hci4: command 0x0c1a tx timeout [ 1293.663484][T11540] Bluetooth: hci3: command 0x0c1a tx timeout [ 1293.771704][ T5845] usb 10-1: device descriptor read/64, error -71 [ 1294.013732][ T5845] usb usb10-port1: attempt power cycle [ 1294.217554][T15342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.499881][T15342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.549844][ T5845] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1294.696427][T15342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.110681][T15342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.125481][T15342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.196252][ T5845] usb 10-1: device descriptor read/8, error -71 [ 1295.197925][T15342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.359113][T15578] tipc: Enabling of bearer rejected, already enabled [ 1295.378647][T15581] tipc: Enabling of bearer rejected, already enabled [ 1295.643259][T15585] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2293'. [ 1295.729591][T14735] Bluetooth: hci4: command 0x0c1a tx timeout [ 1296.150741][T15562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1296.189705][T15562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1296.198695][T15562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1296.206782][T15562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1296.227507][T15562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1296.323686][T15342] hsr_slave_0: entered promiscuous mode [ 1296.331256][T15342] hsr_slave_1: entered promiscuous mode [ 1296.337737][T15342] debugfs: 'hsr0' already exists in 'hsr' [ 1296.343503][T15342] Cannot create hsr debugfs directory [ 1296.572617][T15593] loop3: detected capacity change from 0 to 256 [ 1296.615061][T15593] vfat: Unknown parameter 'nonqmtail' [ 1296.641198][T15584] lo speed is unknown, defaulting to 1000 [ 1297.729605][ T6009] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1297.809636][T14735] Bluetooth: hci4: command 0x0c1a tx timeout [ 1298.260947][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1298.260967][ T30] audit: type=1326 audit(1761766874.708:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1298.304468][T14735] Bluetooth: hci2: command tx timeout [ 1298.382000][ T30] audit: type=1326 audit(1761766874.708:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1298.459902][ T30] audit: type=1326 audit(1761766874.708:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1298.777495][ T30] audit: type=1326 audit(1761766874.708:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1299.499049][ T30] audit: type=1326 audit(1761766874.708:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1299.637836][ T30] audit: type=1326 audit(1761766874.708:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1299.662993][ T30] audit: type=1326 audit(1761766874.718:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1299.799594][ T30] audit: type=1326 audit(1761766874.718:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1299.822338][ T30] audit: type=1326 audit(1761766874.718:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1299.940392][ T30] audit: type=1326 audit(1761766874.718:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.9.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8958efc9 code=0x7ffc0000 [ 1300.369776][T14735] Bluetooth: hci2: command tx timeout [ 1301.240114][T12847] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1301.739687][T12847] usb 4-1: device descriptor read/64, error -71 [ 1301.864192][T15584] chnl_net:caif_netlink_parms(): no params data found [ 1301.979564][T12847] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1302.097548][T15662] o2cb: This node has not been configured. [ 1302.103389][T15662] o2cb: Cluster check failed. Fix errors before retrying. [ 1302.111071][T15662] (syz.0.2306,15662,1):user_dlm_register:674 ERROR: status = -22 [ 1302.118793][T15662] (syz.0.2306,15662,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1302.149544][T12847] usb 4-1: device descriptor read/64, error -71 [ 1302.262313][T12847] usb usb4-port1: attempt power cycle [ 1302.384296][T15342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1302.450041][T14735] Bluetooth: hci2: command tx timeout [ 1302.587164][T15342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1302.631656][T12847] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1302.660280][T12847] usb 4-1: device descriptor read/8, error -71 [ 1302.715744][T15584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.750501][T15584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.757706][T15584] bridge_slave_0: entered allmulticast mode [ 1302.783125][T15584] bridge_slave_0: entered promiscuous mode [ 1302.831321][T15584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.838448][T15584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.866667][T15584] bridge_slave_1: entered allmulticast mode [ 1302.881971][T15584] bridge_slave_1: entered promiscuous mode [ 1302.906135][T15342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1302.925118][T15682] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2311'. [ 1302.949609][T12847] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1302.957468][T15682] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2311'. [ 1302.991271][T12847] usb 4-1: device descriptor read/8, error -71 [ 1303.023943][T15342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1303.050119][T15685] fuse: Bad value for 'fd' [ 1303.062837][T15584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.101058][T12847] usb usb4-port1: unable to enumerate USB device [ 1303.134716][T15584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.450208][T15584] team0: Port device team_slave_0 added [ 1303.823705][T15584] team0: Port device team_slave_1 added [ 1304.306211][T15584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.359619][T15584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.495035][T15733] loop3: detected capacity change from 0 to 8 [ 1304.560064][T14735] Bluetooth: hci2: command tx timeout [ 1304.639568][T15584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.049869][T15584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.056842][T15584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.185489][T15584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.003310][T15584] hsr_slave_0: entered promiscuous mode [ 1306.020223][T15584] hsr_slave_1: entered promiscuous mode [ 1306.042667][T15584] debugfs: 'hsr0' already exists in 'hsr' [ 1306.055970][T15584] Cannot create hsr debugfs directory [ 1306.384086][T15756] loop6: detected capacity change from 0 to 128 [ 1306.655634][T15756] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1306.937208][T15760] loop9: detected capacity change from 0 to 8 [ 1306.952061][T15756] ext4 filesystem being mounted at /385/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1307.327419][T15764] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1308.187037][T15342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.271843][T15768] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2324'. [ 1308.332256][T15765] blktrace: Concurrent blktraces are not allowed on sg0 [ 1308.365877][T15768] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2324'. [ 1308.532850][T15342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.644817][ T6436] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1308.820360][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.827569][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.746804][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.753259][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.121732][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.128894][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.155047][T15794] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1312.054531][T15803] loop9: detected capacity change from 0 to 8 [ 1313.912433][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1313.912458][ T30] audit: type=1326 audit(1761766890.508:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.3.2334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa750f8efc9 code=0x0 [ 1314.644055][T15841] comedi comedi0: rti802: a I/O base address must be specified [ 1315.971864][T15844] loop9: detected capacity change from 0 to 8 [ 1316.570222][T15855] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1317.072253][T15584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1317.124648][T15584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1317.213991][T15584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1317.235524][T15584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1318.478502][T15584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.654120][T15584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.731676][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.738856][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.801982][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.809169][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.713049][T15901] loop3: detected capacity change from 0 to 512 [ 1320.745704][T15904] comedi comedi0: rti802: a I/O base address must be specified [ 1321.218420][T15901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1321.267835][T15901] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.387728][ T30] audit: type=1800 audit(1761766897.988:167): pid=15901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2347" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1321.676410][T15915] o2cb: This node has not been configured. [ 1321.682598][T15915] o2cb: Cluster check failed. Fix errors before retrying. [ 1321.690956][T15915] (syz.3.2347,15915,0):user_dlm_register:674 ERROR: status = -22 [ 1321.698860][T15915] (syz.3.2347,15915,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1322.392610][T12115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.438515][T15922] loop6: detected capacity change from 0 to 8 [ 1322.847376][T15925] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1323.677290][ T30] audit: type=1326 audit(1761766900.278:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.3.2351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa750f8efc9 code=0x0 [ 1324.466619][T15562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1324.505307][T15562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1324.513654][T15562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1324.532768][T15562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1324.553146][T15562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1324.722687][T15584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.619669][T15562] Bluetooth: hci4: command tx timeout [ 1327.205011][T15584] veth0_vlan: entered promiscuous mode [ 1327.234736][T15584] veth1_vlan: entered promiscuous mode [ 1328.689984][T15562] Bluetooth: hci4: command tx timeout [ 1328.821010][T15938] lo speed is unknown, defaulting to 1000 [ 1329.295249][T15972] comedi comedi0: rti802: a I/O base address must be specified [ 1329.781406][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1329.911674][T15976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1330.011707][T15584] veth0_macvtap: entered promiscuous mode [ 1330.197692][T15584] veth1_macvtap: entered promiscuous mode [ 1330.487852][T15584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.774109][T15562] Bluetooth: hci4: command tx timeout [ 1331.185454][T15584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.283931][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.337539][T14026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.423046][ T6008] bridge_slave_1: left allmulticast mode [ 1331.453617][ T6008] bridge_slave_1: left promiscuous mode [ 1331.459511][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.746874][ T6008] bridge_slave_0: left allmulticast mode [ 1332.539008][ T6008] bridge_slave_0: left promiscuous mode [ 1332.560238][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.688464][T16008] loop6: detected capacity change from 0 to 512 [ 1332.853279][T15562] Bluetooth: hci4: command tx timeout [ 1332.883662][ T8594] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1332.936648][T16008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.953535][T16008] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.294189][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 1333.320013][ T8594] usb 10-1: Using ep0 maxpacket: 16 [ 1333.684629][ T8594] usb 10-1: config 0 has no interfaces? [ 1333.699966][ T30] audit: type=1800 audit(1761766910.298:169): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2368" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1333.723227][ T8594] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1333.733813][ T8594] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.742772][ T8594] usb 10-1: Product: syz [ 1333.750784][ T8594] usb 10-1: Manufacturer: syz [ 1333.756039][ T8594] usb 10-1: SerialNumber: syz [ 1333.767613][ T8594] usb 10-1: config 0 descriptor?? [ 1334.260741][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.278199][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.290066][ T6008] bond0 (unregistering): Released all slaves [ 1334.330258][T14026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.341539][T14026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.391882][ T6436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.916952][T10466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.968809][T10466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.509633][ T9234] usb 10-1: USB disconnect, device number 26 [ 1335.534850][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.571841][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.633278][ T6008] hsr_slave_0: left promiscuous mode [ 1335.640269][ T6008] hsr_slave_1: left promiscuous mode [ 1335.651239][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.670274][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.730574][T16042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2374'. [ 1335.748569][T16042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2374'. [ 1336.598087][T16052] loop3: detected capacity change from 0 to 128 [ 1336.634469][T16052] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1336.669602][T16052] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.190800][T16059] blktrace: Concurrent blktraces are not allowed on sg0 [ 1337.447407][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 1337.614886][T12115] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1337.645344][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 1338.905082][T16077] loop6: detected capacity change from 0 to 512 [ 1338.958661][T16077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.049075][T16077] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.114415][T16086] loop3: detected capacity change from 0 to 512 [ 1339.116779][ T30] audit: type=1800 audit(1761766915.708:170): pid=16077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2381" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1339.191176][T16086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.263668][T16090] o2cb: This node has not been configured. [ 1339.270759][T16090] o2cb: Cluster check failed. Fix errors before retrying. [ 1339.270861][T16086] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.280834][T16090] (syz.6.2381,16090,0):user_dlm_register:674 ERROR: status = -22 [ 1339.298472][T16090] (syz.6.2381,16090,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1339.832095][ T30] audit: type=1800 audit(1761766916.438:171): pid=16086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2382" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1340.434202][ T6436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.475678][T12115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.249652][ T30] audit: type=1326 audit(1761766919.748:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.3.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1343.477682][ T30] audit: type=1326 audit(1761766919.748:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.3.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1343.515105][T15938] chnl_net:caif_netlink_parms(): no params data found [ 1343.589568][ T30] audit: type=1326 audit(1761766919.748:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.3.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1343.699880][ T30] audit: type=1326 audit(1761766919.748:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.3.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1343.750429][T16156] loop6: detected capacity change from 0 to 128 [ 1343.831041][T16156] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1343.837410][ T30] audit: type=1326 audit(1761766919.748:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.3.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1343.916845][T16156] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.939572][ T30] audit: type=1326 audit(1761766919.748:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.3.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1343.963942][ T30] audit: type=1326 audit(1761766919.748:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.3.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1344.026129][ T30] audit: type=1326 audit(1761766919.748:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.3.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1344.181750][T15938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.232139][T16168] loop1: detected capacity change from 0 to 512 [ 1345.068882][T15938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.143359][T15938] bridge_slave_0: entered allmulticast mode [ 1345.236964][T16168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1345.252133][T15938] bridge_slave_0: entered promiscuous mode [ 1345.333812][T15938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.369756][T16168] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1345.380994][T16169] blktrace: Concurrent blktraces are not allowed on sg0 [ 1345.398175][T15938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.571072][T15938] bridge_slave_1: entered allmulticast mode [ 1345.714928][T15938] bridge_slave_1: entered promiscuous mode [ 1345.741928][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1345.741958][ T30] audit: type=1800 audit(1761766922.328:192): pid=16168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2394" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1347.212461][ T6436] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1347.218808][T16186] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2398'. [ 1347.271312][T16186] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2398'. [ 1347.314883][T15938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.366254][T15938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.484672][T15584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.662847][T15938] team0: Port device team_slave_0 added [ 1347.717330][T15938] team0: Port device team_slave_1 added [ 1349.435809][T15938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.472773][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.590306][T15938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.649733][T15938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.010368][T16212] loop9: detected capacity change from 0 to 32768 [ 1350.022482][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.059516][T15938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.101447][T16212] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1350.109669][T16212] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1350.188032][T16212] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1350.207825][T12847] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1350.219503][T12847] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1350.339047][T15938] hsr_slave_0: entered promiscuous mode [ 1350.360117][T12847] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 1350.365290][T15938] hsr_slave_1: entered promiscuous mode [ 1350.399588][T12847] gfs2: fsid=syz:syz.0: jid=0: Done [ 1350.404831][T16212] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1350.687041][T15938] debugfs: 'hsr0' already exists in 'hsr' [ 1350.699471][T15938] Cannot create hsr debugfs directory [ 1351.805004][T16237] loop3: detected capacity change from 0 to 8 [ 1353.098837][T16251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2414'. [ 1353.129315][T16248] loop6: detected capacity change from 0 to 512 [ 1353.159963][T16251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2414'. [ 1353.464532][T16248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.019627][T16248] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.093854][T16263] loop9: detected capacity change from 0 to 128 [ 1354.149356][T16263] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1354.192404][ T30] audit: type=1800 audit(1761766930.788:193): pid=16248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2413" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1354.253281][T16263] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.690466][ T6009] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1355.598724][ T6009] usb 2-1: Using ep0 maxpacket: 16 [ 1355.651501][ T6009] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.740310][ T6009] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1355.762691][T16274] blktrace: Concurrent blktraces are not allowed on sg0 [ 1355.804782][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.890695][ T6009] usb 2-1: Product: syz [ 1356.339486][ T6009] usb 2-1: Manufacturer: syz [ 1356.344121][ T6009] usb 2-1: SerialNumber: syz [ 1356.932467][ T6009] usb 2-1: config 0 descriptor?? [ 1357.065926][ T6436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.309231][T15938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1357.309648][T11884] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1357.434262][T15938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1357.516481][T15938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1357.574313][T15938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1358.096572][T16297] loop3: detected capacity change from 0 to 32768 [ 1358.128489][T16297] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1358.136770][T16297] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1358.196106][T16297] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1358.206193][ T8594] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1358.215171][ T8594] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1358.336250][ T5845] usb 2-1: USB disconnect, device number 10 [ 1358.490522][ T8594] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 275ms [ 1358.537716][ T8594] gfs2: fsid=syz:syz.0: jid=0: Done [ 1358.586854][T16297] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1358.683109][T15938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.758895][T15938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.823470][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.830672][T10466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.083141][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.090324][T10466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.020334][T16332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2428'. [ 1360.029325][T16332] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2428'. [ 1360.521345][T16345] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2430'. [ 1361.711253][T16353] loop1: detected capacity change from 0 to 512 [ 1361.869840][T16353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1361.871771][T15938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.944409][T15938] veth0_vlan: entered promiscuous mode [ 1361.967260][T15938] veth1_vlan: entered promiscuous mode [ 1362.016959][T16353] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.818264][T15938] veth0_macvtap: entered promiscuous mode [ 1363.065877][ T30] audit: type=1800 audit(1761766939.668:194): pid=16353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2433" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1363.503894][T15938] veth1_macvtap: entered promiscuous mode [ 1363.745608][T15938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.850691][T15938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.942493][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.960555][T15584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.979945][T14808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.994775][T14808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.027176][T14808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.370447][ T8483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.440454][ T8483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.369848][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.405765][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.546301][T16460] o2cb: This node has not been configured. [ 1368.552297][T16460] o2cb: Cluster check failed. Fix errors before retrying. [ 1368.559403][T16460] (syz.0.2442,16460,1):user_dlm_register:674 ERROR: status = -22 [ 1368.567937][T16460] (syz.0.2442,16460,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1369.816639][T16478] trusted_key: syz.6.2446 sent an empty control message without MSG_MORE. [ 1369.835595][T16479] loop2: detected capacity change from 0 to 256 [ 1369.879001][T16479] exfat: Deprecated parameter 'namecase' [ 1369.979687][T16479] exfat: Deprecated parameter 'namecase' [ 1369.999780][T16479] exfat: Deprecated parameter 'namecase' [ 1370.056879][T16479] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1370.254128][T16479] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1370.436394][T16479] loop2: detected capacity change from 0 to 1024 [ 1370.912047][T16479] EXT4-fs: Ignoring removed orlov option [ 1370.948795][T16479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1371.176280][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.182734][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.291709][T16479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1372.191427][T15938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.247132][T16525] loop2: detected capacity change from 0 to 512 [ 1374.426512][T16525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.479593][T16525] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.608023][ T30] audit: type=1800 audit(1761766951.208:195): pid=16525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2456" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1375.890781][T15938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.083064][T16542] loop9: detected capacity change from 0 to 128 [ 1376.154905][T16542] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1376.189783][T16542] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.268497][T16521] loop6: detected capacity change from 0 to 32768 [ 1376.558677][T16521] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 1376.627497][T16550] blktrace: Concurrent blktraces are not allowed on sg0 [ 1379.288660][ T6436] ocfs2: Unmounting device (7,6) on (node local) [ 1379.582905][T11884] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1379.891669][ T30] audit: type=1326 audit(1761766956.338:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1379.949541][ T8701] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1380.075806][ T30] audit: type=1326 audit(1761766956.338:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1380.159537][ T8701] usb 3-1: Using ep0 maxpacket: 16 [ 1380.175195][ T8701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.310832][ T8701] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1380.546822][ T30] audit: type=1326 audit(1761766956.338:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1380.569896][ T30] audit: type=1326 audit(1761766956.338:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1380.592408][ T30] audit: type=1326 audit(1761766956.338:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1381.323515][ T30] audit: type=1326 audit(1761766956.338:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1381.380177][ T8701] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1381.390425][ T30] audit: type=1326 audit(1761766956.338:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1381.418434][T16581] veth0_to_team: entered promiscuous mode [ 1381.424420][T16581] veth0_to_team: entered allmulticast mode [ 1381.550210][ T30] audit: type=1326 audit(1761766956.338:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1381.599753][ T8701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.636903][ T30] audit: type=1326 audit(1761766956.338:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1381.648472][ T8701] usb 3-1: Product: syz [ 1382.228322][ T8701] usb 3-1: Manufacturer: syz [ 1382.253069][ T8701] usb 3-1: SerialNumber: syz [ 1382.285222][ T8701] usb 3-1: config 0 descriptor?? [ 1382.573715][ T30] audit: type=1326 audit(1761766956.338:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1382.791174][ T8701] usb 3-1: can't set config #0, error -71 [ 1382.852033][ T8701] usb 3-1: USB disconnect, device number 9 [ 1384.581523][T16614] loop2: detected capacity change from 0 to 512 [ 1384.889282][T16614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.027544][T16614] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.298206][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1385.298232][ T30] audit: type=1800 audit(1761766961.898:216): pid=16614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2474" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1385.913143][T15938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.334976][T16661] comedi comedi0: rti802: a I/O base address must be specified [ 1391.033505][ T30] audit: type=1326 audit(1761766967.638:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16681 comm="syz.1.2484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26d1d8efc9 code=0x0 [ 1391.317620][ T9234] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1392.064098][ T9234] usb 4-1: Using ep0 maxpacket: 16 [ 1392.178656][ T9234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.222989][ T9234] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1392.286691][T16693] loop2: detected capacity change from 0 to 8 [ 1392.578416][ T9234] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1392.653910][ T9234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.676950][ T9234] usb 4-1: Product: syz [ 1392.686745][ T9234] usb 4-1: Manufacturer: syz [ 1392.698588][ T9234] usb 4-1: SerialNumber: syz [ 1392.769806][ T9234] usb 4-1: config 0 descriptor?? [ 1394.395678][ T6009] usb 4-1: USB disconnect, device number 21 [ 1394.839595][T16707] syz1: rxe_newlink: already configured on syz_tun [ 1395.865965][T16709] loop3: detected capacity change from 0 to 256 [ 1395.890551][T16709] vfat: Unknown parameter 'nonqmtail' [ 1397.329984][ T6009] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1397.799523][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 1397.807757][ T6009] usb 4-1: config 211 has an invalid interface number: 98 but max is 0 [ 1397.909530][ T6009] usb 4-1: config 211 has no interface number 0 [ 1397.915819][ T6009] usb 4-1: config 211 interface 98 has no altsetting 0 [ 1398.042973][ T6009] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1398.114349][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.178103][ T6009] usb 4-1: Product: syz [ 1398.196597][ T6009] usb 4-1: Manufacturer: syz [ 1398.201816][ T6009] usb 4-1: SerialNumber: syz [ 1399.767607][ T6009] mct_u232 4-1:211.98: MCT U232 converter detected [ 1399.813397][ T6009] mct_u232 ttyUSB0: expected endpoint missing [ 1399.859744][ T6009] usb 4-1: USB disconnect, device number 22 [ 1399.867272][ T6009] mct_u232 4-1:211.98: device disconnected [ 1400.275572][T16762] loop3: detected capacity change from 0 to 512 [ 1400.282470][T16762] EXT4-fs: Ignoring removed nobh option [ 1400.317700][T16762] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1400.327761][T16762] EXT4-fs (loop3): group descriptors corrupted! [ 1400.750014][T12847] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1401.230039][T12847] usb 10-1: Using ep0 maxpacket: 16 [ 1401.237754][T12847] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.508585][T12847] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1401.597452][T12847] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1401.675479][T12847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.759880][T12847] usb 10-1: Product: syz [ 1401.805966][T12847] usb 10-1: Manufacturer: syz [ 1401.877999][T12847] usb 10-1: SerialNumber: syz [ 1401.986914][T12847] usb 10-1: config 0 descriptor?? [ 1403.533156][T16786] loop3: detected capacity change from 0 to 8 [ 1403.566218][ T5986] usb 10-1: USB disconnect, device number 27 [ 1403.989840][T16789] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1406.723267][T16834] loop3: detected capacity change from 0 to 128 [ 1406.776975][T16834] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1406.899756][T16834] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.363866][T12115] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1410.129693][T16860] loop3: detected capacity change from 0 to 512 [ 1410.139369][T16860] EXT4-fs: Ignoring removed nobh option [ 1410.169925][T16860] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1410.180631][T16860] EXT4-fs (loop3): group descriptors corrupted! [ 1410.309040][T16862] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2518'. [ 1410.654461][T16864] loop1: detected capacity change from 0 to 512 [ 1410.841593][T16864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1411.407458][T16864] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.578055][ T30] audit: type=1800 audit(1761766988.178:218): pid=16864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2519" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1413.955655][T14735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1413.965881][T14735] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1413.974177][T14735] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1413.982785][T14735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1414.083345][T14735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1414.557462][T16914] lo speed is unknown, defaulting to 1000 [ 1416.210002][T14735] Bluetooth: hci6: command tx timeout [ 1416.785328][ T6008] smc: removing ib device syz1 [ 1416.911918][T15584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.926058][T16955] comedi comedi0: rti802: a I/O base address must be specified [ 1417.420332][T11540] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1417.447856][T11540] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1417.462967][T11540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1417.489725][T11540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1417.499686][T11540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1417.641442][ T6474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.959781][ T43] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1418.315553][T11540] Bluetooth: hci6: command tx timeout [ 1418.439676][ T43] usb 7-1: config index 0 descriptor too short (expected 65214, got 100) [ 1418.481085][ T6474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.509959][ T43] usb 7-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 1418.543389][T16968] loop3: detected capacity change from 0 to 4096 [ 1418.597959][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1418.742229][ T43] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1418.972511][ T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1419.103038][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.246572][ T43] usb 7-1: Product: syz [ 1419.330261][T11540] Bluetooth: hci2: command 0x0406 tx timeout [ 1419.338450][ T43] usb 7-1: Manufacturer: syz [ 1419.370424][T16968] ntfs3(loop3): ino=b, mi_enum_attr [ 1419.409328][ T43] usb 7-1: SerialNumber: syz [ 1419.419636][T16968] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1419.485896][T16968] ntfs3(loop3): Failed to load $Extend (-22). [ 1419.523339][T16968] ntfs3(loop3): Failed to initialize $Extend. [ 1419.569627][T14735] Bluetooth: hci1: command tx timeout [ 1419.656303][ T6474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.708838][T16961] lo speed is unknown, defaulting to 1000 [ 1419.737396][ T43] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1419.748572][ T43] cdc_ncm 7-1:1.0: bind() failure [ 1419.799364][ T43] usb 7-1: USB disconnect, device number 29 [ 1419.849475][T12334] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1419.997878][ T6474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.071573][T12334] usb 4-1: Using ep0 maxpacket: 8 [ 1420.107509][T12334] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1420.131039][T12334] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1420.139299][T12334] usb 4-1: Product: syz [ 1420.143873][T12334] usb 4-1: Manufacturer: syz [ 1420.148638][T12334] usb 4-1: SerialNumber: syz [ 1420.177859][T12334] usb 4-1: config 0 descriptor?? [ 1420.369784][T14735] Bluetooth: hci6: command tx timeout [ 1420.632286][T12334] usb 4-1: USB disconnect, device number 23 [ 1420.657056][T17017] loop9: detected capacity change from 0 to 256 [ 1420.760930][T17017] vfat: Unknown parameter 'nonqmtail' [ 1421.728413][T14735] Bluetooth: hci1: command tx timeout [ 1422.399617][ T5900] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1422.453537][T11540] Bluetooth: hci6: command tx timeout [ 1422.685777][T17028] comedi comedi0: rti802: a I/O base address must be specified [ 1423.171211][T16914] chnl_net:caif_netlink_parms(): no params data found [ 1423.275749][T17036] loop6: detected capacity change from 0 to 8 [ 1424.289851][T11540] Bluetooth: hci1: command tx timeout [ 1425.103123][ T6474] bridge_slave_1: left allmulticast mode [ 1425.138196][ T6474] bridge_slave_1: left promiscuous mode [ 1425.360706][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.222706][ T6474] bridge_slave_0: left allmulticast mode [ 1426.228404][ T6474] bridge_slave_0: left promiscuous mode [ 1426.314033][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.371030][T11540] Bluetooth: hci1: command tx timeout [ 1426.377417][T17062] loop6: detected capacity change from 0 to 16 [ 1426.410489][T17062] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1426.714844][T17066] comedi comedi0: rti802: a I/O base address must be specified [ 1428.509488][ T5986] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1428.691807][ T5986] usb 10-1: Using ep0 maxpacket: 16 [ 1428.792440][ T5986] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1428.816819][ T5986] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1428.826420][ T5986] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.849579][ T5986] usb 10-1: Product: syz [ 1428.853947][ T5986] usb 10-1: Manufacturer: syz [ 1428.858643][ T5986] usb 10-1: SerialNumber: syz [ 1428.891860][ T5986] usb 10-1: config 0 descriptor?? [ 1428.936835][T17083] loop3: detected capacity change from 0 to 8 [ 1429.138438][T17075] loop6: detected capacity change from 0 to 32768 [ 1429.221382][T17075] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1429.258846][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.267824][T17075] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1429.279860][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.290808][T17075] XFS (loop6): Starting recovery (logdev: internal) [ 1429.304651][ T6474] bond0 (unregistering): Released all slaves [ 1429.317838][T17075] XFS (loop6): Ending recovery (logdev: internal) [ 1429.343335][T17075] XFS (loop6): Quotacheck needed: Please wait. [ 1429.445063][T17075] XFS (loop6): Quotacheck: Done. [ 1429.563608][ T30] audit: type=1804 audit(1761767006.168:219): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2560" name="/newroot/446/file1/file1" dev="loop6" ino=4422 res=1 errno=0 [ 1429.641549][ T6436] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1429.657767][T16914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.681709][T16914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.695463][T16914] bridge_slave_0: entered allmulticast mode [ 1429.711032][T16914] bridge_slave_0: entered promiscuous mode [ 1429.726603][T16914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.734243][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.741790][T16914] bridge_slave_1: entered allmulticast mode [ 1429.750671][T16914] bridge_slave_1: entered promiscuous mode [ 1429.769597][T16961] chnl_net:caif_netlink_parms(): no params data found [ 1430.653037][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2566'. [ 1430.736772][ T5900] usb 10-1: USB disconnect, device number 29 [ 1430.782743][T16914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.813536][T16914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.907345][T17115] comedi comedi0: rti802: a I/O base address must be specified [ 1432.638988][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.657857][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.679109][ T6474] hsr_slave_0: left promiscuous mode [ 1434.550511][ T6474] hsr_slave_1: left promiscuous mode [ 1434.589666][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.603792][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1434.648138][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.685737][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.686262][ T6474] veth1_macvtap: left promiscuous mode [ 1435.691922][ T6474] veth0_macvtap: left promiscuous mode [ 1435.697588][ T6474] veth1_vlan: left promiscuous mode [ 1435.702985][ T6474] veth0_vlan: left promiscuous mode [ 1436.077114][T17174] loop3: detected capacity change from 0 to 8 [ 1436.964527][T17183] comedi comedi0: rti802: a I/O base address must be specified [ 1439.915542][T17198] loop3: detected capacity change from 0 to 512 [ 1439.997589][T17198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.038192][T17198] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.246471][ T30] audit: type=1800 audit(1761767016.758:220): pid=17198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2585" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1440.577463][T12115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.065199][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 1441.735831][T17220] loop3: detected capacity change from 0 to 8 [ 1441.836470][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 1445.248038][T16914] team0: Port device team_slave_0 added [ 1445.255362][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.275400][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.335550][T16961] bridge_slave_0: entered allmulticast mode [ 1445.380704][T16961] bridge_slave_0: entered promiscuous mode [ 1445.398720][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.409552][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.432859][T16961] bridge_slave_1: entered allmulticast mode [ 1445.441707][T16961] bridge_slave_1: entered promiscuous mode [ 1445.612591][T16914] team0: Port device team_slave_1 added [ 1445.721753][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.954476][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.276289][T16914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.299137][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.337764][T17260] loop1: detected capacity change from 0 to 128 [ 1447.382005][T17260] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1447.399517][T16914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.424996][T16914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.438924][T17260] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1447.462389][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.488524][T16914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.851811][T17267] loop6: detected capacity change from 0 to 32768 [ 1447.910868][T17267] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1447.919057][T17267] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1448.049271][T16961] team0: Port device team_slave_0 added [ 1448.085100][T17267] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1448.096727][ T6009] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1448.119087][ T6009] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1448.308539][T17272] blktrace: Concurrent blktraces are not allowed on sg0 [ 1448.722686][T16961] team0: Port device team_slave_1 added [ 1448.770936][ T6009] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 651ms [ 1448.803515][ T6009] gfs2: fsid=syz:syz.0: jid=0: Done [ 1448.808755][T17267] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1449.127386][T15584] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1449.577039][T17279] loop1: detected capacity change from 0 to 512 [ 1450.069917][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.079746][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.208241][T17279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.226245][T17279] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.237689][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.325913][T16914] hsr_slave_0: entered promiscuous mode [ 1450.397093][ T30] audit: type=1800 audit(1761767026.998:221): pid=17279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2608" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1450.451209][T16914] hsr_slave_1: entered promiscuous mode [ 1450.457633][T16914] debugfs: 'hsr0' already exists in 'hsr' [ 1450.522098][T16914] Cannot create hsr debugfs directory [ 1450.752998][T17268] lo speed is unknown, defaulting to 1000 [ 1450.856201][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.875549][T17289] loop3: detected capacity change from 0 to 128 [ 1450.881939][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.940305][T17289] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1450.956858][T15584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.983953][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.997083][T17289] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.141205][T17293] comedi comedi0: rti802: a I/O base address must be specified [ 1451.731582][T17289] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1451.781548][T17289] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1452.343135][T12115] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1453.152169][T16961] hsr_slave_0: entered promiscuous mode [ 1453.174778][T16961] hsr_slave_1: entered promiscuous mode [ 1453.190479][T16961] debugfs: 'hsr0' already exists in 'hsr' [ 1453.196212][T16961] Cannot create hsr debugfs directory [ 1456.723038][T17325] loop1: detected capacity change from 0 to 128 [ 1456.772915][T17325] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1456.877891][T17325] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1457.260595][T17330] blktrace: Concurrent blktraces are not allowed on sg0 [ 1458.038516][T15584] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1458.135734][T17345] loop6: detected capacity change from 0 to 1024 [ 1458.143368][T17345] EXT4-fs: Ignoring removed nobh option [ 1458.148944][T17345] EXT4-fs: Ignoring removed bh option [ 1458.230990][T17345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.421106][ T30] audit: type=1804 audit(1761767035.018:222): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2619" name="/newroot/455/file2/bus" dev="loop6" ino=18 res=1 errno=0 [ 1458.602605][ T6436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.877299][T17373] loop1: detected capacity change from 0 to 512 [ 1459.943184][T17373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.005854][T17373] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1460.953800][ T30] audit: type=1800 audit(1761767037.558:223): pid=17373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2626" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1461.568909][T17388] comedi comedi0: rti802: a I/O base address must be specified [ 1462.039227][T15584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.084719][ T6474] bridge_slave_1: left allmulticast mode [ 1462.100595][ T6474] bridge_slave_1: left promiscuous mode [ 1462.130073][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.501673][ T6474] bridge_slave_0: left allmulticast mode [ 1462.507350][ T6474] bridge_slave_0: left promiscuous mode [ 1462.586935][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.119749][ T5900] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1463.459451][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 1463.466718][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1463.479796][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1463.512251][T17406] loop3: detected capacity change from 0 to 512 [ 1463.518952][T17406] EXT4-fs: Ignoring removed nobh option [ 1463.525328][T17406] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1463.535397][T17406] EXT4-fs (loop3): group descriptors corrupted! [ 1463.573818][ T5900] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1463.591553][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.619047][ T5900] usb 2-1: Product: syz [ 1463.644323][ T5900] usb 2-1: Manufacturer: syz [ 1463.648955][ T5900] usb 2-1: SerialNumber: syz [ 1463.702751][ T5900] usb 2-1: config 0 descriptor?? [ 1463.742638][ T5900] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1463.805506][ T5900] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1464.377869][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.413260][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.451285][ T5900] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1464.459713][ T5900] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1464.468617][ T6474] bond0 (unregistering): Released all slaves [ 1464.475188][T17413] loop3: detected capacity change from 0 to 2048 [ 1464.482195][ T5900] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1464.496461][ T5900] em28xx 2-1:0.0: No AC97 audio processor [ 1464.523951][ T5900] usb 2-1: USB disconnect, device number 11 [ 1464.531542][ T5900] em28xx 2-1:0.0: Disconnecting em28xx [ 1464.538755][ T5900] em28xx 2-1:0.0: Freeing device [ 1464.586440][T17413] loop3: p1 p2 p3 [ 1464.620346][ T6474] tipc: Disabling bearer [ 1464.634134][ T6474] tipc: Disabling bearer [ 1464.699006][ T6474] tipc: Left network mode [ 1465.338137][T17425] loop1: detected capacity change from 0 to 128 [ 1465.896727][T17425] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1465.954789][T17425] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1465.966089][T16914] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1466.356076][T16914] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1466.641512][T16914] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1466.833679][T15584] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1467.298870][T16914] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1467.494241][ T30] audit: type=1326 audit(1761767043.918:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1467.517241][ T6009] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1467.577910][ T30] audit: type=1326 audit(1761767043.918:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1467.619970][ T30] audit: type=1326 audit(1761767043.918:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1467.689579][ T6009] usb 4-1: Using ep0 maxpacket: 16 [ 1467.697616][ T6009] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1467.717058][ T6009] usb 4-1: config 0 has no interface number 0 [ 1467.724485][ T30] audit: type=1326 audit(1761767043.918:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1467.776749][ T6009] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1467.797555][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.808530][ T30] audit: type=1326 audit(1761767043.918:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1467.848463][ T6009] usb 4-1: Product: syz [ 1467.874884][ T6009] usb 4-1: Manufacturer: syz [ 1467.905701][ T6009] usb 4-1: SerialNumber: syz [ 1467.944348][ T30] audit: type=1326 audit(1761767043.918:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1467.966679][ C0] vkms_vblank_simulate: vblank timer overrun [ 1468.020514][ T6009] usb 4-1: config 0 descriptor?? [ 1468.090157][ T30] audit: type=1326 audit(1761767043.918:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1468.112515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1468.130810][ T6009] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1468.202625][ T30] audit: type=1326 audit(1761767043.918:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1468.203574][ T6474] hsr_slave_0: left promiscuous mode [ 1468.243362][ T30] audit: type=1326 audit(1761767043.918:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1468.265708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1468.280481][ T6474] hsr_slave_1: left promiscuous mode [ 1468.285890][ T30] audit: type=1326 audit(1761767043.918:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.1.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1d8efc9 code=0x7ffc0000 [ 1468.336642][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.357185][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.871272][ T6009] gspca_spca1528: reg_w err -110 [ 1469.012029][T17497] loop3: detected capacity change from 0 to 16 [ 1469.819553][T17497] erofs (device loop3): mounted with root inode @ nid 36. [ 1469.862143][T17497] syz.3.2640: attempt to access beyond end of device [ 1469.862143][T17497] loop3: rw=524288, sector=128, nr_sectors = 8 limit=16 [ 1469.879004][T17497] syz.3.2640: attempt to access beyond end of device [ 1469.879004][T17497] loop3: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 1471.834467][ T6009] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 1471.945680][ T6009] usb 4-1: USB disconnect, device number 24 [ 1473.608531][T17516] comedi comedi0: rti802: a I/O base address must be specified [ 1473.817740][T14735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1473.890317][T14735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1473.898721][T14735] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1473.907322][T14735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1473.915477][T14735] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1474.708635][T16914] kthread_run failed with err -4 [ 1474.950432][T17509] lo speed is unknown, defaulting to 1000 [ 1475.948398][T16961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1476.211085][T14735] Bluetooth: hci4: command tx timeout [ 1478.290067][T14735] Bluetooth: hci4: command tx timeout [ 1478.849198][T17509] chnl_net:caif_netlink_parms(): no params data found [ 1479.311690][T17593] loop1: detected capacity change from 0 to 64 [ 1480.049732][T15562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1480.073158][T15562] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1480.081514][T15562] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1480.097765][T15562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1480.106357][T15562] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1480.284698][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.291972][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.299181][T17509] bridge_slave_0: entered allmulticast mode [ 1480.329478][T17509] bridge_slave_0: entered promiscuous mode [ 1480.364585][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.372058][T14735] Bluetooth: hci4: command tx timeout [ 1480.408887][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.450594][T17509] bridge_slave_1: entered allmulticast mode [ 1480.458893][T17509] bridge_slave_1: entered promiscuous mode [ 1480.622097][T17509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.723013][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1480.723041][ T30] audit: type=1326 audit(1761767057.248:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1480.847835][ T5900] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1480.850968][T17509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.922134][ T30] audit: type=1326 audit(1761767057.248:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1481.049850][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 1481.316866][ T5900] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1481.329253][ T5900] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1481.359855][ T30] audit: type=1326 audit(1761767057.248:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1481.369506][ T5900] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1481.419542][ T30] audit: type=1326 audit(1761767057.248:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1481.470559][ T5900] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1481.476939][T17602] lo speed is unknown, defaulting to 1000 [ 1481.486440][T17509] team0: Port device team_slave_0 added [ 1481.513839][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1481.620080][ T30] audit: type=1326 audit(1761767057.248:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1481.645516][ T30] audit: type=1326 audit(1761767057.248:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1481.666156][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.675180][ T30] audit: type=1326 audit(1761767057.248:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1481.715439][T17509] team0: Port device team_slave_1 added [ 1481.727394][ T30] audit: type=1326 audit(1761767057.248:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1481.729922][ T5900] usb 2-1: Product: syz [ 1481.752257][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.814438][T17622] loop9: detected capacity change from 0 to 256 [ 1481.852067][T17622] vfat: Unknown parameter 'nonqmtail' [ 1481.859881][ T5900] usb 2-1: Manufacturer: syz [ 1481.864627][ T5900] usb 2-1: SerialNumber: syz [ 1481.866151][ T30] audit: type=1326 audit(1761767057.248:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1482.187571][ T30] audit: type=1326 audit(1761767057.248:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.6.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df738efc9 code=0x7ffc0000 [ 1482.213502][T14735] Bluetooth: hci6: command tx timeout [ 1482.248184][ T5900] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1482.280374][T17509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.459606][T14735] Bluetooth: hci4: command tx timeout [ 1483.023159][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.058004][ T5900] usb 2-1: USB disconnect, device number 12 [ 1483.068260][ T5900] usblp0: removed [ 1483.088419][T17509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.126078][T17509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.208029][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.431557][T17509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.903247][T17509] hsr_slave_0: entered promiscuous mode [ 1483.956750][T17509] hsr_slave_1: entered promiscuous mode [ 1484.014412][T17509] debugfs: 'hsr0' already exists in 'hsr' [ 1484.035421][T17509] Cannot create hsr debugfs directory [ 1484.297690][T14735] Bluetooth: hci6: command tx timeout [ 1484.600213][T17652] tipc: Started in network mode [ 1484.605407][T17652] tipc: Node identity ac1414aa, cluster identity 4711 [ 1484.616857][T17652] tipc: Enabled bearer , priority 10 [ 1484.626864][T17658] tipc: Enabled bearer , priority 0 [ 1484.785037][T17602] chnl_net:caif_netlink_parms(): no params data found [ 1485.590145][T17666] loop9: detected capacity change from 0 to 256 [ 1485.620605][T17666] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1485.730123][ T6009] tipc: Node number set to 2886997162 [ 1486.369973][T14735] Bluetooth: hci6: command tx timeout [ 1486.528304][T17602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.576564][T17602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.614076][T17602] bridge_slave_0: entered allmulticast mode [ 1486.748243][T17602] bridge_slave_0: entered promiscuous mode [ 1486.858536][T17602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.895239][T17602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.955463][T17602] bridge_slave_1: entered allmulticast mode [ 1488.920215][T14735] Bluetooth: hci6: command tx timeout [ 1489.213476][T17602] bridge_slave_1: entered promiscuous mode [ 1492.298354][T17602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.310221][T17729] slcan: can't register candev [ 1492.315233][T17729] Falling back ldisc for ttyS3. [ 1492.468169][T17602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.100885][T17602] team0: Port device team_slave_0 added [ 1493.308562][T17602] team0: Port device team_slave_1 added [ 1493.317485][T17743] loop6: detected capacity change from 0 to 256 [ 1493.345303][T17743] vfat: Unknown parameter 'nonqmtail' [ 1493.614535][T17750] x_tables: duplicate underflow at hook 1 [ 1493.682444][T17755] loop9: detected capacity change from 0 to 512 [ 1494.442667][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.449193][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.136861][T17755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.274601][T17755] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1495.913927][T17602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.925182][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1495.925205][ T30] audit: type=1800 audit(1761767072.528:269): pid=17755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2679" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1495.977019][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.095953][T17602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.156851][T11884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.252227][T17602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.404272][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.443462][T17602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1496.679672][T17777] loop1: detected capacity change from 0 to 64 [ 1496.716658][T14735] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 1497.299647][T17602] hsr_slave_0: entered promiscuous mode [ 1497.340787][T17602] hsr_slave_1: entered promiscuous mode [ 1497.350283][T17602] debugfs: 'hsr0' already exists in 'hsr' [ 1497.367950][T17602] Cannot create hsr debugfs directory [ 1499.758559][T17797] loop1: detected capacity change from 0 to 4096 [ 1499.955289][T17509] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1500.049861][T17797] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1500.081172][T17797] ntfs3(loop1): ino=1a, mi_enum_attr [ 1500.094589][T17797] ntfs3(loop1): ino=1a, mi_enum_attr [ 1500.107507][T17509] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1500.114898][T17797] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1500.197066][T17509] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1500.230234][T17509] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1500.685144][T17809] loop1: detected capacity change from 0 to 32768 [ 1500.825552][T17809] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1500.833858][T17809] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1500.861500][T17809] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1500.994872][T15217] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1501.122612][T15217] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1501.338600][T17820] loop9: detected capacity change from 0 to 512 [ 1501.511217][T17820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.526397][T17820] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.595780][ T30] audit: type=1800 audit(1761767078.198:270): pid=17820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2692" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1501.640015][T15217] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 517ms [ 1501.722495][T11884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.742043][T15217] gfs2: fsid=syz:syz.0: jid=0: Done [ 1501.760110][T17809] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1502.324992][T17509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.418552][T17509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.947071][T14020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.954281][T14020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.134099][T14020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.141288][T14020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1504.196545][ T5900] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1504.334461][T17509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1504.387295][T17509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1504.400045][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 1504.468011][ T5900] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1504.516020][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.546671][ T5900] usb 7-1: Product: syz [ 1504.565853][ T5900] usb 7-1: Manufacturer: syz [ 1504.593180][ T5900] usb 7-1: SerialNumber: syz [ 1504.619157][ T5900] usb 7-1: config 0 descriptor?? [ 1504.655749][ T5900] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1505.849866][ T5900] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 1506.598455][T17602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1506.642222][T17602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1506.671158][T17602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1506.969326][T17602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1507.617876][ T43] usb 7-1: USB disconnect, device number 30 [ 1507.758811][T17890] loop3: detected capacity change from 0 to 1024 [ 1507.775581][T17509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.790431][T17890] EXT4-fs: Ignoring removed nobh option [ 1507.802721][T17890] EXT4-fs: inline encryption not supported [ 1507.875225][T17890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.957891][T17602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.053013][T17902] fuse: Unknown parameter 'group_id00000000000000000000' [ 1508.248833][T12115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.647531][T17602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.736181][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.743373][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.825716][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.832861][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.888973][T17922] batman_adv: batadv0: Adding interface: dummy0 [ 1509.908838][T17922] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.029703][T17922] batman_adv: batadv0: Interface activated: dummy0 [ 1510.487141][T17923] batadv0: mtu less than device minimum [ 1510.509601][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1510.521631][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1510.533666][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1510.545661][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1510.557657][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1510.569684][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1510.581692][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1510.593691][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1510.605718][T17923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1511.372677][T17602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1513.664424][T17509] veth0_vlan: entered promiscuous mode [ 1513.739789][T17509] veth1_vlan: entered promiscuous mode [ 1513.761950][T17960] loop6: detected capacity change from 0 to 1024 [ 1513.821387][T17960] EXT4-fs: Ignoring removed nobh option [ 1513.827004][T17960] EXT4-fs: inline encryption not supported [ 1513.932877][T17509] veth0_macvtap: entered promiscuous mode [ 1514.015303][T17509] veth1_macvtap: entered promiscuous mode [ 1514.032897][T17960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.199544][T17509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.264407][T17509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.343262][ T6436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.415512][T14025] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.444161][T14025] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.520421][T14025] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.551579][T14025] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.627767][T17602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.061697][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.096381][T17989] syz.9.2721 (17989): drop_caches: 2 [ 1517.131152][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.269427][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.297558][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.512744][T18023] loop8: detected capacity change from 0 to 1024 [ 1519.586518][T18023] EXT4-fs: Ignoring removed nobh option [ 1519.676211][T18023] EXT4-fs: inline encryption not supported [ 1519.737708][T18023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1519.776368][T17602] veth0_vlan: entered promiscuous mode [ 1520.003409][T17602] veth1_vlan: entered promiscuous mode [ 1520.125420][T17602] veth0_macvtap: entered promiscuous mode [ 1520.134770][T17509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.204267][T17602] veth1_macvtap: entered promiscuous mode [ 1520.329169][T17602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.470477][T17602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.805965][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.751931][ T6007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.859672][ T6007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.979066][ T6007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.981037][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.059530][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.493618][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.548785][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.908172][ T30] audit: type=1326 audit(1761767101.508:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18073 comm="syz.5.2527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b59f8efc9 code=0x0 [ 1526.099611][ T5900] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1526.569525][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 1526.631083][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1526.682057][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1526.733429][ T5900] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1526.759323][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.835571][ T5900] usb 4-1: Product: syz [ 1526.859410][ T5900] usb 4-1: Manufacturer: syz [ 1526.871015][ T5900] usb 4-1: SerialNumber: syz [ 1527.100816][ T5900] usb 4-1: config 0 descriptor?? [ 1527.123966][ T5900] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1527.989597][ T5900] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1528.668923][ T5900] em28xx 4-1:0.0: chip ID is em2874 [ 1528.835943][T18105] loop8: detected capacity change from 0 to 4096 [ 1529.020543][ T5900] usb 4-1: USB disconnect, device number 25 [ 1529.076244][T18105] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1529.138476][ T5900] em28xx 4-1:0.0: Disconnecting em28xx [ 1529.343801][ T5900] em28xx 4-1:0.0: Freeing device [ 1529.824684][T18105] ntfs3(loop8): Failed to load $Extend (-22). [ 1529.992996][T18105] ntfs3(loop8): Failed to initialize $Extend. [ 1532.142290][T18152] loop3: detected capacity change from 0 to 64 [ 1535.241144][T18179] fuse: Bad value for 'user_id' [ 1535.257773][T18179] fuse: Bad value for 'user_id' [ 1537.191000][T18190] binder: BINDER_SET_CONTEXT_MGR already set [ 1537.238132][T18193] loop6: detected capacity change from 0 to 512 [ 1537.248420][T18190] binder: 18189:18190 ioctl 4018620d 200000000280 returned -16 [ 1537.439478][T18193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1537.541311][T18193] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.622038][T18202] loop3: detected capacity change from 0 to 8 [ 1538.632363][T18199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1539.434592][T18211] infiniband syz1: set active [ 1539.439312][T18211] infiniband syz1: added syz_tun [ 1539.542028][T18211] RDS/IB: syz1: added [ 1539.546070][T18211] smc: adding ib device syz1 with port count 1 [ 1539.552358][T18211] smc: ib device syz1 port 1 has no pnetid [ 1542.280782][T18222] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1542.280782][T18222] program syz.1.2769 not setting count and/or reply_len properly [ 1542.466884][ T6436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.776943][T18227] loop3: detected capacity change from 0 to 4096 [ 1543.104616][ T5900] lo speed is unknown, defaulting to 1000 [ 1543.133290][T18224] QAT: Device 197 not found [ 1543.332039][T18227] ntfs3(loop3): failed to convert "0000" to iso8859-9 [ 1543.553438][T18227] ntfs3(loop3): failed to convert name for inode 1e. [ 1543.592213][T18227] ntfs3(loop3): ino=1f, mi_enum_attr [ 1543.619127][T18227] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1544.835864][T18265] fuse: Bad value for 'user_id' [ 1544.891083][T18265] fuse: Bad value for 'user_id' [ 1546.688878][T18290] veth0_to_team: entered promiscuous mode [ 1546.785703][T18294] loop6: detected capacity change from 0 to 8 [ 1546.820497][T18290] veth0_to_team: entered allmulticast mode [ 1547.211117][T18298] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1548.306286][T18309] 9pnet_fd: Insufficient options for proto=fd [ 1549.244734][T18321] loop1: detected capacity change from 0 to 64 [ 1549.609158][T18305] loop6: detected capacity change from 0 to 32768 [ 1549.704941][T18305] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1550.302247][T18305] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1550.660429][T18305] XFS (loop6): Starting recovery (logdev: internal) [ 1550.961176][T18305] XFS (loop6): Ending recovery (logdev: internal) [ 1550.997523][T18305] XFS (loop6): Quotacheck needed: Please wait. [ 1551.926312][T18305] XFS (loop6): Quotacheck: Done. [ 1552.442126][T18362] fuse: Bad value for 'user_id' [ 1552.600629][T18362] fuse: Bad value for 'user_id' [ 1552.662391][T18368] loop3: detected capacity change from 0 to 8 [ 1552.722862][ T6436] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1553.139105][T18374] syz1: rxe_newlink: already configured on syz_tun [ 1553.968998][T18377] loop5: detected capacity change from 0 to 4096 [ 1554.026002][T18377] ntfs3: Bad value for 'umask' [ 1554.516965][T18386] loop1: detected capacity change from 0 to 64 [ 1555.509890][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.516358][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.441110][T18407] loop5: detected capacity change from 0 to 512 [ 1556.492804][T18407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1556.523289][T18407] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1556.602916][ T30] audit: type=1800 audit(1761767133.208:272): pid=18407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2807" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1558.845859][T17602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.961260][T18450] loop1: detected capacity change from 0 to 8 [ 1561.395199][T18453] loop3: detected capacity change from 0 to 64 [ 1561.482539][T18456] loop5: detected capacity change from 0 to 512 [ 1561.658382][T18456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.769557][T18456] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.970473][ T30] audit: type=1800 audit(1761767138.568:273): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2819" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1562.876757][T18474] loop3: detected capacity change from 0 to 128 [ 1562.997368][T18474] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1563.198354][T18474] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.321519][T17602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.895865][T18481] blktrace: Concurrent blktraces are not allowed on sg0 [ 1565.456995][T12115] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1566.837666][T18512] loop9: detected capacity change from 0 to 1024 [ 1567.077021][T18512] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1568.329545][ T30] audit: type=1800 audit(1761767144.528:274): pid=18512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2830" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1568.389847][T18531] netlink: 'syz.1.2834': attribute type 10 has an invalid length. [ 1568.414370][T18531] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1568.567148][T18534] loop8: detected capacity change from 0 to 128 [ 1568.809451][T17987] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1568.858975][T18534] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1568.954820][T18534] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1569.068390][T17987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.463184][T18546] blktrace: Concurrent blktraces are not allowed on sg0 [ 1572.414308][T17987] usb 4-1: config 0 has no interfaces? [ 1572.477060][T18523] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1572.792952][T18512] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.828983][T17987] usb 4-1: string descriptor 0 read error: -71 [ 1572.869633][T17987] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1572.878691][T17987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.027627][T18554] loop3: detected capacity change from 0 to 512 [ 1573.040467][T17987] usb 4-1: config 0 descriptor?? [ 1573.048047][T17987] usb 4-1: can't set config #0, error -71 [ 1573.100956][T17987] usb 4-1: USB disconnect, device number 26 [ 1573.108449][T17509] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1573.172032][T18554] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1573.292588][T18554] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2838: bad orphan inode 13 [ 1573.306307][T18556] loop9: detected capacity change from 0 to 256 [ 1573.361207][T18554] ext4_test_bit(bit=12, block=18) = 1 [ 1573.403452][T18556] exfat: Deprecated parameter 'utf8' [ 1573.408762][T18556] exfat: Deprecated parameter 'utf8' [ 1573.429142][T18554] is_bad_inode(inode)=0 [ 1573.449444][T18554] NEXT_ORPHAN(inode)=0 [ 1573.453625][T18554] max_ino=32 [ 1573.457205][T18554] i_nlink=1 [ 1573.457434][T18556] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1573.476805][T18554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1573.583879][T18556] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1574.463144][T18554] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1575.123135][T18554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.2838: bg 0: block 248: padding at end of block bitmap is not set [ 1575.186386][T18554] Quota error (device loop3): write_blk: dquota write failed [ 1575.239692][T18554] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1575.269662][T18572] loop9: detected capacity change from 0 to 8 [ 1575.303600][T18554] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.2838: Failed to acquire dquot type 1 [ 1575.586343][T12115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1576.769554][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 1580.270735][T18604] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2849'. [ 1581.344392][T18619] loop5: detected capacity change from 0 to 256 [ 1581.390819][T18619] exfat: Deprecated parameter 'utf8' [ 1581.416544][T18619] exfat: Deprecated parameter 'utf8' [ 1581.525513][T18619] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1581.584052][T18619] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1582.259887][T18629] loop6: detected capacity change from 0 to 2048 [ 1582.418356][T18640] loop9: detected capacity change from 0 to 256 [ 1583.250449][T18640] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1583.301724][T18629] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1584.150134][T18629] syz.6.2856: attempt to access beyond end of device [ 1584.150134][T18629] loop6: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 1584.165998][T18648] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1584.335119][T18653] syz.6.2856: attempt to access beyond end of device [ 1584.335119][T18653] loop6: rw=0, sector=65534, nr_sectors = 2 limit=2048 [ 1584.384960][T18653] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 1584.429409][T18653] NILFS (loop6): error -5 reading inode: ino=12 [ 1584.781141][ T6009] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1585.250581][ T6009] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1585.271321][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.291049][T18671] x_tables: duplicate underflow at hook 1 [ 1585.501117][ T6009] usb 2-1: Product: syz [ 1585.515513][ T6009] usb 2-1: Manufacturer: syz [ 1586.345972][ T6009] usb 2-1: SerialNumber: syz [ 1586.881026][ T6009] usb 2-1: config 0 descriptor?? [ 1587.035014][T18684] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2869'. [ 1587.107330][ T6009] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1587.119004][T18686] block nbd6: NBD_DISCONNECT [ 1587.142367][T18686] block nbd6: Disconnected due to user request. [ 1587.173731][T18686] block nbd6: shutting down sockets [ 1587.509018][T18694] loop8: detected capacity change from 0 to 256 [ 1587.529692][T18694] exfat: Deprecated parameter 'utf8' [ 1587.535020][T18694] exfat: Deprecated parameter 'utf8' [ 1587.579428][T18694] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1587.656113][T18694] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1587.890772][T17987] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1588.244259][T17987] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1588.280527][T17987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.389051][T17987] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1588.908505][T17987] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1588.916989][T17987] usb 6-1: Manufacturer: syz [ 1588.930611][T17987] usb 6-1: config 0 descriptor?? [ 1589.115133][ T6009] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1589.196608][T17987] rc_core: IR keymap rc-hauppauge not found [ 1589.202853][ T6009] usb 2-1: USB disconnect, device number 13 [ 1589.215633][T17987] Registered IR keymap rc-empty [ 1589.237744][T17987] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1589.286628][T17987] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 1589.770821][ T5900] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1589.970768][ T5986] usb 6-1: USB disconnect, device number 33 [ 1590.129886][ T5900] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1590.139070][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.164437][ T5900] usb 10-1: Product: syz [ 1590.180609][ T5900] usb 10-1: Manufacturer: syz [ 1590.197997][ T5900] usb 10-1: SerialNumber: syz [ 1590.225380][ T5900] usb 10-1: config 0 descriptor?? [ 1592.189542][ T5900] usb 10-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 1592.394003][ T5900] usb 10-1: failed to fetch extended address, random address set [ 1593.031554][ T5900] usb 10-1: USB disconnect, device number 30 [ 1594.483696][T18804] x_tables: duplicate underflow at hook 1 [ 1595.067515][T18810] loop3: detected capacity change from 0 to 512 [ 1595.108088][T18810] EXT4-fs: Ignoring removed mblk_io_submit option [ 1595.655383][T18810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1595.795792][T18810] EXT4-fs (loop3): 1 truncate cleaned up [ 1595.811508][T18810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1596.278980][T18817] loop6: detected capacity change from 0 to 8 [ 1596.613527][T18817] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1596.967191][T18825] loop5: detected capacity change from 0 to 128 [ 1597.012339][T12115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.180265][T18825] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1597.319533][T18825] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1597.459481][ T5900] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1597.688260][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1597.753363][ T5900] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1597.768779][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 14349, setting to 1024 [ 1597.782999][ T5900] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1597.819457][ T30] audit: type=1326 audit(1761767174.418:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1597.840442][ T5900] usb 10-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1597.855738][ T30] audit: type=1326 audit(1761767174.458:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1597.878562][ T30] audit: type=1326 audit(1761767174.458:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1598.411753][ T30] audit: type=1326 audit(1761767174.458:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1598.479528][ T5900] usb 10-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1598.517415][ T5900] usb 10-1: Manufacturer: syz [ 1598.547651][T15562] Bluetooth: hci4: command 0x0406 tx timeout [ 1598.565382][T18825] blktrace: Concurrent blktraces are not allowed on sg0 [ 1598.591113][ T30] audit: type=1326 audit(1761767174.518:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1598.697221][ T5900] usb 10-1: config 0 descriptor?? [ 1598.799821][ T30] audit: type=1326 audit(1761767174.518:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1598.875093][T18832] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1599.001737][ T5900] smsusb:smsusb_probe: board id=9, interface number 0 [ 1600.309605][ T5900] smsusb:siano_media_device_register: media controller created [ 1600.335199][ T30] audit: type=1326 audit(1761767174.518:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1601.291817][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.299124][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.306395][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.313666][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.320930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.328206][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.393620][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.401080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.408320][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.415555][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.422805][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.433539][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.447431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.454689][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.461933][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.469178][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.476417][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.484010][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.491276][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.498518][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.505757][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.512998][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.520241][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.539628][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.546896][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.554158][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.561416][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.568668][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.575913][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.584968][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.592224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.599469][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.606705][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.613944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.621191][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.631584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.639115][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.646373][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.653618][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.660860][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.668101][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.675742][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.683004][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.690242][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.697476][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.704709][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.711944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.725457][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.732705][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.739943][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.747169][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.754397][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.761617][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.782625][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.789846][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.797067][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.804299][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.811512][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.818723][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.826597][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.834170][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.841425][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.849039][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.856295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.863520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.874583][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.881849][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.889095][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.896343][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.903587][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.910830][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1601.999623][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.006855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.014074][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.021294][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.028507][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.035742][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.045261][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.052502][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.059731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.066957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.074190][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.081416][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.095043][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.102273][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.109490][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.116704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.123919][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.131137][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.169540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.176765][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.183994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.191234][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.198449][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.205663][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.213285][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.220534][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.227768][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.234995][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.242240][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.249467][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.267889][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.275190][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.282480][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.289770][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.297113][ T5900] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 1602.306234][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.313492][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.320740][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.327989][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.335243][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.342489][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.355578][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.362833][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.370084][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.377336][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.385006][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.392262][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.399495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.406719][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.413941][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.421182][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.429703][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.436948][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.444187][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.451420][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.458651][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.465884][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.475892][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.483166][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.490425][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.497679][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.504934][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.509512][ T30] audit: type=1326 audit(1761767174.518:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1602.512193][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.569655][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.576899][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.584126][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.596581][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.603825][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.611045][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.618267][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.625501][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.632754][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.639985][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.650739][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.657973][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.665217][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.672473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.679733][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.686994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.694823][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.702052][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.709293][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.716547][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.723801][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.731037][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.738262][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.745490][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.754483][ T5900] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 1602.763145][ T5900] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 1602.771585][ T5900] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 1602.780154][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.787447][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.794957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.802480][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.809752][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.817014][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.824556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.831810][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.839058][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.846301][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.856508][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.863774][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.871023][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.878274][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1602.885852][ T5900] ------------[ cut here ]------------ [ 1602.891312][ T5900] workqueue: work disable count underflowed [ 1602.897296][ T5900] WARNING: CPU: 0 PID: 5900 at kernel/workqueue.c:4355 enable_work+0x2f8/0x340 [ 1602.906260][ T5900] Modules linked in: [ 1602.910479][ T5900] CPU: 0 UID: 0 PID: 5900 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 1602.919860][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1602.929919][ T5900] Workqueue: usb_hub_wq hub_event [ 1602.935017][ T5900] RIP: 0010:enable_work+0x2f8/0x340 [ 1602.940243][ T5900] Code: 89 ee e8 9b b9 38 00 45 84 ed 0f 85 29 fe ff ff e8 ad be 38 00 c6 05 d2 71 e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 97 59 a0 00 e9 aa fe ff ff [ 1602.959868][ T5900] RSP: 0018:ffffc900041c6cc8 EFLAGS: 00010086 [ 1602.965950][ T5900] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001a994000 [ 1602.973931][ T5900] RDX: 0000000000100000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 1602.981910][ T5900] RBP: ffff8880567a3268 R08: 0000000000000001 R09: 0000000000000000 [ 1602.989873][ T5900] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000838d9a [ 1602.997835][ T5900] R13: 0000000000000000 R14: ffff8880567a3000 R15: ffff888079565080 [ 1603.005799][ T5900] FS: 0000000000000000(0000) GS:ffff888124a09000(0000) knlGS:0000000000000000 [ 1603.014724][ T5900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1603.019515][ T30] audit: type=1326 audit(1761767174.528:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa750f8efc9 code=0x7ffc0000 [ 1603.021297][ T5900] CR2: 00002000000a8030 CR3: 0000000042783000 CR4: 0000000000350ef0 [ 1603.021327][ T5900] Call Trace: [ 1603.054814][ T5900] [ 1603.057752][ T5900] ? __pfx_enable_work+0x10/0x10 [ 1603.062723][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.068382][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.074057][ T5900] __cancel_work_sync+0xe7/0x130 [ 1603.079031][ T5900] smsusb_stop_streaming+0xaa/0x210 [ 1603.084265][ T5900] smsusb_term_device+0x8f/0x1e0 [ 1603.089236][ T5900] smsusb_init_device+0xaa0/0xe00 [ 1603.094298][ T5900] ? __pfx_smsusb_init_device+0x10/0x10 [ 1603.099873][ T5900] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1603.105447][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.111091][ T5900] ? usb_clear_halt+0x61/0x160 [ 1603.115892][ T5900] smsusb_probe+0x5d3/0x1090 [ 1603.120510][ T5900] ? __pfx_smsusb_probe+0x10/0x10 [ 1603.125552][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.131196][ T5900] ? mark_held_locks+0x49/0x80 [ 1603.135990][ T5900] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1603.141804][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.147455][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.153102][ T5900] ? __pm_runtime_set_status+0x13c/0xa80 [ 1603.158773][ T5900] usb_probe_interface+0x303/0xa40 [ 1603.163901][ T5900] ? __pfx_usb_probe_interface+0x10/0x10 [ 1603.169557][ T5900] really_probe+0x241/0xa90 [ 1603.174112][ T5900] __driver_probe_device+0x1de/0x440 [ 1603.179427][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.185087][ T5900] driver_probe_device+0x4c/0x1b0 [ 1603.190136][ T5900] __device_attach_driver+0x1df/0x310 [ 1603.195536][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 1603.201448][ T5900] bus_for_each_drv+0x159/0x1e0 [ 1603.206308][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1603.211687][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.217335][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 1603.222543][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.228188][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1603.234012][ T5900] __device_attach+0x1e4/0x4b0 [ 1603.238795][ T5900] ? __pfx___device_attach+0x10/0x10 [ 1603.244101][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.249754][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 1603.254973][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.260643][ T5900] bus_probe_device+0x17f/0x1c0 [ 1603.265513][ T5900] device_add+0x1148/0x1aa0 [ 1603.270052][ T5900] ? __pfx_device_add+0x10/0x10 [ 1603.274946][ T5900] ? mark_held_locks+0x49/0x80 [ 1603.279755][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.285416][ T5900] usb_set_configuration+0x1187/0x1e20 [ 1603.290935][ T5900] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1603.297024][ T5900] usb_generic_driver_probe+0xb1/0x110 [ 1603.302511][ T5900] usb_probe_device+0xef/0x3e0 [ 1603.307281][ T5900] ? __pfx_usb_probe_device+0x10/0x10 [ 1603.312661][ T5900] really_probe+0x241/0xa90 [ 1603.317188][ T5900] __driver_probe_device+0x1de/0x440 [ 1603.322490][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.328148][ T5900] driver_probe_device+0x4c/0x1b0 [ 1603.333195][ T5900] __device_attach_driver+0x1df/0x310 [ 1603.338591][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 1603.344500][ T5900] bus_for_each_drv+0x159/0x1e0 [ 1603.349367][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1603.354757][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.360405][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 1603.365618][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.371267][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1603.377101][ T5900] __device_attach+0x1e4/0x4b0 [ 1603.381895][ T5900] ? __pfx___device_attach+0x10/0x10 [ 1603.387204][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.392855][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 1603.398073][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.403732][ T5900] bus_probe_device+0x17f/0x1c0 [ 1603.408606][ T5900] device_add+0x1148/0x1aa0 [ 1603.413147][ T5900] ? __pfx_device_add+0x10/0x10 [ 1603.418027][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.423673][ T5900] ? add_device_randomness+0xb7/0xf0 [ 1603.428981][ T5900] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1603.434894][ T5900] usb_new_device+0xd07/0x1a60 [ 1603.439696][ T5900] ? do_raw_spin_lock+0x12c/0x2b0 [ 1603.444736][ T5900] ? __pfx_usb_new_device+0x10/0x10 [ 1603.449967][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.455612][ T5900] ? mark_held_locks+0x49/0x80 [ 1603.460413][ T5900] hub_event+0x2f34/0x4fe0 [ 1603.464903][ T5900] ? __pfx_hub_event+0x10/0x10 [ 1603.469693][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.475366][ T5900] ? assoc_array_walk+0x540/0x620 [ 1603.480408][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.486059][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.491717][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.497362][ T5900] ? rcu_is_watching+0x12/0xc0 [ 1603.502166][ T5900] process_one_work+0x9cf/0x1b70 [ 1603.507133][ T5900] ? __pfx_hcd_resume_work+0x10/0x10 [ 1603.512433][ T5900] ? __pfx_process_one_work+0x10/0x10 [ 1603.517819][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.523475][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.529123][ T5900] ? assign_work+0x1a0/0x250 [ 1603.533727][ T5900] worker_thread+0x6c8/0xf10 [ 1603.538351][ T5900] ? __pfx_worker_thread+0x10/0x10 [ 1603.543474][ T5900] kthread+0x3c5/0x780 [ 1603.547552][ T5900] ? __pfx_kthread+0x10/0x10 [ 1603.552159][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.557810][ T5900] ? rcu_is_watching+0x12/0xc0 [ 1603.562594][ T5900] ? __pfx_kthread+0x10/0x10 [ 1603.567195][ T5900] ret_from_fork+0x675/0x7d0 [ 1603.571810][ T5900] ? __pfx_kthread+0x10/0x10 [ 1603.576411][ T5900] ret_from_fork_asm+0x1a/0x30 [ 1603.581223][ T5900] [ 1603.584246][ T5900] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1603.591521][ T5900] CPU: 0 UID: 0 PID: 5900 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 1603.600897][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1603.610952][ T5900] Workqueue: usb_hub_wq hub_event [ 1603.616012][ T5900] Call Trace: [ 1603.619282][ T5900] [ 1603.622211][ T5900] dump_stack_lvl+0x3d/0x1f0 [ 1603.626815][ T5900] vpanic+0x640/0x6f0 [ 1603.630824][ T5900] ? enable_work+0x2f8/0x340 [ 1603.635428][ T5900] panic+0xca/0xd0 [ 1603.639177][ T5900] ? __pfx_panic+0x10/0x10 [ 1603.643639][ T5900] check_panic_on_warn+0xab/0xb0 [ 1603.648610][ T5900] __warn+0xf6/0x3c0 [ 1603.652509][ T5900] ? enable_work+0x2f8/0x340 [ 1603.657119][ T5900] report_bug+0x3c3/0x580 [ 1603.661465][ T5900] ? enable_work+0x2f8/0x340 [ 1603.666069][ T5900] handle_bug+0x184/0x210 [ 1603.670424][ T5900] exc_invalid_op+0x17/0x50 [ 1603.674947][ T5900] asm_exc_invalid_op+0x1a/0x20 [ 1603.679818][ T5900] RIP: 0010:enable_work+0x2f8/0x340 [ 1603.685040][ T5900] Code: 89 ee e8 9b b9 38 00 45 84 ed 0f 85 29 fe ff ff e8 ad be 38 00 c6 05 d2 71 e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 97 59 a0 00 e9 aa fe ff ff [ 1603.704655][ T5900] RSP: 0018:ffffc900041c6cc8 EFLAGS: 00010086 [ 1603.710729][ T5900] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001a994000 [ 1603.718698][ T5900] RDX: 0000000000100000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 1603.726668][ T5900] RBP: ffff8880567a3268 R08: 0000000000000001 R09: 0000000000000000 [ 1603.734644][ T5900] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000838d9a [ 1603.742615][ T5900] R13: 0000000000000000 R14: ffff8880567a3000 R15: ffff888079565080 [ 1603.750602][ T5900] ? __warn_printk+0x1a5/0x350 [ 1603.755398][ T5900] ? enable_work+0x2f7/0x340 [ 1603.760003][ T5900] ? __pfx_enable_work+0x10/0x10 [ 1603.764954][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.770601][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.776265][ T5900] __cancel_work_sync+0xe7/0x130 [ 1603.781224][ T5900] smsusb_stop_streaming+0xaa/0x210 [ 1603.786450][ T5900] smsusb_term_device+0x8f/0x1e0 [ 1603.791405][ T5900] smsusb_init_device+0xaa0/0xe00 [ 1603.796460][ T5900] ? __pfx_smsusb_init_device+0x10/0x10 [ 1603.802032][ T5900] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1603.807603][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.813251][ T5900] ? usb_clear_halt+0x61/0x160 [ 1603.818047][ T5900] smsusb_probe+0x5d3/0x1090 [ 1603.822663][ T5900] ? __pfx_smsusb_probe+0x10/0x10 [ 1603.827705][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.833349][ T5900] ? mark_held_locks+0x49/0x80 [ 1603.838151][ T5900] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1603.843966][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.849620][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.855267][ T5900] ? __pm_runtime_set_status+0x13c/0xa80 [ 1603.860933][ T5900] usb_probe_interface+0x303/0xa40 [ 1603.866062][ T5900] ? __pfx_usb_probe_interface+0x10/0x10 [ 1603.871705][ T5900] really_probe+0x241/0xa90 [ 1603.876232][ T5900] __driver_probe_device+0x1de/0x440 [ 1603.881534][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.887187][ T5900] driver_probe_device+0x4c/0x1b0 [ 1603.892236][ T5900] __device_attach_driver+0x1df/0x310 [ 1603.897632][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 1603.903544][ T5900] bus_for_each_drv+0x159/0x1e0 [ 1603.908408][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1603.913790][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.919441][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 1603.924650][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.930296][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1603.936118][ T5900] __device_attach+0x1e4/0x4b0 [ 1603.940908][ T5900] ? __pfx___device_attach+0x10/0x10 [ 1603.946214][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.951859][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 1603.957072][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.962728][ T5900] bus_probe_device+0x17f/0x1c0 [ 1603.967597][ T5900] device_add+0x1148/0x1aa0 [ 1603.972133][ T5900] ? __pfx_device_add+0x10/0x10 [ 1603.977017][ T5900] ? mark_held_locks+0x49/0x80 [ 1603.981812][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1603.987470][ T5900] usb_set_configuration+0x1187/0x1e20 [ 1603.992988][ T5900] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1603.999079][ T5900] usb_generic_driver_probe+0xb1/0x110 [ 1604.004566][ T5900] usb_probe_device+0xef/0x3e0 [ 1604.009338][ T5900] ? __pfx_usb_probe_device+0x10/0x10 [ 1604.014724][ T5900] really_probe+0x241/0xa90 [ 1604.019252][ T5900] __driver_probe_device+0x1de/0x440 [ 1604.024555][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.030212][ T5900] driver_probe_device+0x4c/0x1b0 [ 1604.035259][ T5900] __device_attach_driver+0x1df/0x310 [ 1604.040653][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 1604.046568][ T5900] bus_for_each_drv+0x159/0x1e0 [ 1604.051429][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1604.056811][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.062455][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 1604.067665][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.073311][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1604.079136][ T5900] __device_attach+0x1e4/0x4b0 [ 1604.083924][ T5900] ? __pfx___device_attach+0x10/0x10 [ 1604.089235][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.094879][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 1604.100096][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.105756][ T5900] bus_probe_device+0x17f/0x1c0 [ 1604.110623][ T5900] device_add+0x1148/0x1aa0 [ 1604.115165][ T5900] ? __pfx_device_add+0x10/0x10 [ 1604.120039][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.125685][ T5900] ? add_device_randomness+0xb7/0xf0 [ 1604.130991][ T5900] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1604.136902][ T5900] usb_new_device+0xd07/0x1a60 [ 1604.141705][ T5900] ? do_raw_spin_lock+0x12c/0x2b0 [ 1604.146741][ T5900] ? __pfx_usb_new_device+0x10/0x10 [ 1604.151967][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.157615][ T5900] ? mark_held_locks+0x49/0x80 [ 1604.162417][ T5900] hub_event+0x2f34/0x4fe0 [ 1604.166904][ T5900] ? __pfx_hub_event+0x10/0x10 [ 1604.171692][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.177338][ T5900] ? assoc_array_walk+0x540/0x620 [ 1604.182380][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.188034][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.193689][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.199340][ T5900] ? rcu_is_watching+0x12/0xc0 [ 1604.204147][ T5900] process_one_work+0x9cf/0x1b70 [ 1604.209113][ T5900] ? __pfx_hcd_resume_work+0x10/0x10 [ 1604.214413][ T5900] ? __pfx_process_one_work+0x10/0x10 [ 1604.219800][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.225456][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.231105][ T5900] ? assign_work+0x1a0/0x250 [ 1604.235715][ T5900] worker_thread+0x6c8/0xf10 [ 1604.240339][ T5900] ? __pfx_worker_thread+0x10/0x10 [ 1604.245476][ T5900] kthread+0x3c5/0x780 [ 1604.249554][ T5900] ? __pfx_kthread+0x10/0x10 [ 1604.254164][ T5900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.259811][ T5900] ? rcu_is_watching+0x12/0xc0 [ 1604.264593][ T5900] ? __pfx_kthread+0x10/0x10 [ 1604.269189][ T5900] ret_from_fork+0x675/0x7d0 [ 1604.273808][ T5900] ? __pfx_kthread+0x10/0x10 [ 1604.278408][ T5900] ret_from_fork_asm+0x1a/0x30 [ 1604.283220][ T5900] [ 1604.286462][ T5900] Kernel Offset: disabled [ 1604.290779][ T5900] Rebooting in 86400 seconds..