last executing test programs: 12m33.256835083s ago: executing program 3 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r4, 0x305, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8004) 12m31.920155042s ago: executing program 3 (id=701): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000a80)=ANY=[], 0x0) 12m28.011818173s ago: executing program 3 (id=706): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 12m22.53384128s ago: executing program 3 (id=718): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c00)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000b40)='./bus\x00', 0x2322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 12m21.510372151s ago: executing program 3 (id=722): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000940)}, 0xc811) getegid() bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)="86", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4f26, 0xfffffffd, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) close(0xffffffffffffffff) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023893) 12m17.560725819s ago: executing program 3 (id=726): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x15, 0x5, 0x0) getsockname$packet(r3, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) syz_open_dev$video4linux(0x0, 0x1, 0x2080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r7}, 0x38) 12m16.713497019s ago: executing program 32 (id=726): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x15, 0x5, 0x0) getsockname$packet(r3, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) syz_open_dev$video4linux(0x0, 0x1, 0x2080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r7}, 0x38) 7m40.484116365s ago: executing program 4 (id=1547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000095000000000000002ed672cdd831bebdc29143bc6bd25c7c515d1108c208c8c0fb94e368614f40c3ebdb6ef11418bc9f1c07f652d8752afe534ef3ab7864f8c649475bafb35bac38a0e91fd3881084690e5ff0549ad216d21c085d1fc58069d82ad851a897dcae8005bdee2562357837d9eb64da0465449b457b496046"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) mq_open(&(0x7f0000000080)='\x00', 0x802, 0x1, 0x0) add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={0x0}) ptrace$setregset(0x4205, r1, 0x204, 0x0) ptrace(0x11, r1) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 7m39.0667956s ago: executing program 4 (id=1553): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='signal_deliver\x00', r1}, 0x18) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x6d285c1d]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x14) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) 7m38.396731487s ago: executing program 4 (id=1555): pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f0000000000)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r5) r6 = inotify_init1(0x800) fcntl$setown(r5, 0x8, 0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 7m36.917004047s ago: executing program 4 (id=1556): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="2006010000009e"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000100)={0x20, 0x10}, 0x0, 0x0}) 7m36.248939482s ago: executing program 4 (id=1562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 7m34.996643724s ago: executing program 4 (id=1568): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 7m18.86680431s ago: executing program 33 (id=1568): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 6m47.25869854s ago: executing program 7 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) r6 = dup(r4) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x6, @none, 0x547}, 0xe) connect$bt_rfcomm(r6, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) openat(r6, 0x0, 0x480640, 0x0) 6m45.189290207s ago: executing program 7 (id=1690): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x9, 0x1, 0x2, 0x9, 0x8, 0x4}, 0x20) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 6m44.449446492s ago: executing program 7 (id=1693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m42.994721616s ago: executing program 7 (id=1699): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 6m41.013294859s ago: executing program 7 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]}) 6m37.698966807s ago: executing program 7 (id=1713): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbf6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 6m21.782820372s ago: executing program 34 (id=1713): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbf6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 3m51.389433566s ago: executing program 6 (id=2367): socket$pptp(0x18, 0x1, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x13, 0x1, 0x200, &(0x7f0000000880)="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"}) 3m50.293471142s ago: executing program 6 (id=2375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf00f}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40106e80, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) 3m50.133196057s ago: executing program 5 (id=2377): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 3m48.98949565s ago: executing program 5 (id=2379): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000001"], 0x408100) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 3m48.923630685s ago: executing program 6 (id=2380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 3m46.25252755s ago: executing program 6 (id=2384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 3m45.49469887s ago: executing program 5 (id=2385): r0 = memfd_create(0x0, 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) bind$bt_hci(r1, &(0x7f00000001c0)={0x27}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 3m43.741429347s ago: executing program 5 (id=2388): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, 0x0, 0x1) lseek(0xffffffffffffffff, 0x2000, 0x0) 3m43.686923645s ago: executing program 2 (id=2389): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {0x20, '\xa7!'}, {}]}, 0x1ea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0) close(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40) r5 = accept(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 3m42.815498649s ago: executing program 5 (id=2393): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, 0x0, 0x0) 3m40.775737038s ago: executing program 2 (id=2395): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3m40.187527553s ago: executing program 5 (id=2397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 3m37.9172591s ago: executing program 6 (id=2400): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 3m33.363271911s ago: executing program 6 (id=2406): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() timer_create(0x0, 0x0, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 3m32.424442194s ago: executing program 2 (id=2408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {0x20, '\xa7!'}, {}]}, 0x1ea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0) close(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 3m30.211224703s ago: executing program 2 (id=2411): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'}) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r1, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r6 = fanotify_init(0x10, 0x181000) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) preadv(r5, &(0x7f0000001600), 0x0, 0x7, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, 0x0, &(0x7f0000000b40)=""/31}, 0x20) 3m28.576340778s ago: executing program 2 (id=2413): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000001"], 0x408100) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 3m26.90652326s ago: executing program 2 (id=2415): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) fchown(r3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbe01) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 3m24.11750425s ago: executing program 35 (id=2397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 3m18.043427954s ago: executing program 36 (id=2406): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() timer_create(0x0, 0x0, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 3m10.918455547s ago: executing program 37 (id=2415): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) fchown(r3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbe01) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 15.68128635s ago: executing program 8 (id=2670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESOCT=r5]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) 10.250946193s ago: executing program 0 (id=2678): socket$kcm(0x29, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r3, &(0x7f00000007c0)=ANY=[], 0x1e0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r6, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 10.089055342s ago: executing program 1 (id=2679): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.291807883s ago: executing program 8 (id=2680): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) r3 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT=r4]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) 7.900010748s ago: executing program 0 (id=2681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {0x20, '\xa7!'}, {}]}, 0x1ea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 7.054162101s ago: executing program 8 (id=2682): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) close_range(r2, 0xffffffffffffffff, 0x0) 6.162275345s ago: executing program 1 (id=2683): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) bind$bt_hci(r1, &(0x7f00000001c0)={0x27}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 6.129849638s ago: executing program 8 (id=2684): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESOCT=r4]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 5.891697227s ago: executing program 1 (id=2685): r0 = memfd_create(0x0, 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) bind$bt_hci(r1, &(0x7f00000001c0)={0x27}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) close_range(r3, 0xffffffffffffffff, 0x0) 5.883553062s ago: executing program 0 (id=2686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000001180)={0x80000000}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"87412fcf3b7656866352bfc3b2a97409f657f12f35013bff5243e9df7287106d02bcb0d638722ca4b8c03c00d8a7008f57b74d0fb9eda8c8d8a733262574a53c242d4bc2315f2a4330212629510faf60e06a809b44e3e956079f8e15309975eff5624b8e45b4290e4fd8619c8cda5e70e7fb7483bcb2d4dd171510932e4433505aa14c048b20f8bcea3979ac05e8a7f8c69335943f945df35be808e545a8701b5be1992667e07680101ae7c1052ba83cc3bd6351e484cc28c90390cc9a670f8e82994662194133d1416df6adf63f7d4dfa6bd4d6ed755b91231e5ad99cd82cde77441875b7f23566f34ec3ef4c58ca1243a22bdb0f3d0c3c0cf3567d3624b00e0822cc27b0c10cd3ebbfe5cee69113acf809ee9cb63e761d1b8b74c19cd23e3e4701f08d76318d0f11a28ad24f46105b6d53b071cc8e51e0b54609f2757158c24bb01751b963681616d9fe8948f2234a5f53ecb3af48f3896e53c92a4a0035c1a22c08dd13808f8d26772e52c418e2860f4d1c51b77ce73bf7ae4a0023218a4e3af6ac7fb00396b4d5d69996e39638c42c51384bca0d141bc64e27ad1cbccc3d45cec59fd5fc46e312696c47b8d1b029c7cbd0194c675d445e93f7abf8bf2d4765f03e57fde167382ece70993a0cfe964e1a6f75b88af69739f654043da63c32c4101f30de250b052f7eb6da1eecf5dd1d6d29b63620af24d62c31c6566c82763b7ab4293441dd14d369f08cf1189a58047952bf8f973c095ffbdfa9b91bbfa8c3c894d85f08fd311ab1eae103318761b47a93a6cae00204635a8cb57b3204c4b8fbb2dfef3c596f8d4dda918110abd6ebc5bf26311c438898a7f814ae9ff9ab8c8f23282906cf57dc2e167bd3be0a2b19945b3dde4e7fe2d01056a1d9d486e543bf2454c4e4219ffc33ae22a824b0e1058706656c59cc6e5c08fcbe0a88d35cf178136aabf450453dec7878bccc1daca7c6690983be524e83a17f9ce02ec0a58c125916cd7575ac1cc02f8485562f1542da73fa09d2be7f4d3e629fde6e5c58389a1ffb95b146e1d1b2a25aede59f02c5f9a55fc53b1867ee3863fb838e0750beb6939097aca0c03ebded37f2ffa945339fcc99ad006aa71863358bf300a71df24adc6b00c2687e7756a8d5e93668ba13989e824dbb992050748b87b9300ffea6ccf04a990046f5522749d80d45444866e3d7c21dfb786563e3ca11b5311eb3f8b7ed70e73ef02e477d76dea6c14bf1b47a2cda66a024eae350efb34d11fd512d0921d16e6c5e90845be2a5e8ea30f438f331f1e316c5d6e60526249300e6fc921dd8c0c8d470e2485b9145b12ed332b0de2bc3b29f7dbf980617c378f28ebfd8b0a37c89124c79c5b2f344b5c3b5d0f3a8641093b4b06d5a67c152a510a56a0bef5a24fea0869455e7d54535163289a970e6e908aacd0c30f85fbf16b923e5d18a997b5b0b1f2bd15a7f1ccc33b8cf1b8fd0e0f8f4f0ff533669e5f71f460f3672f6ca7a1539997689fd6f97f296f53761bf94f5f75aa274cb5ae67b25682cca33c87da759c0c99e064fa973af0d2d6ccf82266a48241d2284eda04590bc80c31b0c0b04fa104cce536fbb29508a222c4a777c072348502a27272ff9656a0fba49538be263d23e9bce31f3e5d573b1cbc0b0ecb27170c2eb10115dd8ecaee8f0ead3202d3c855223c196a7343fd6d2c152430add0c5d088a406f40e4aad95fc2d30655ca81f65aeeaf81eb82821da75334ed82cb09f41c891c53cd193ca8f99017fd28f5b454ada00989697756f2aaf11254c67dca0ee39d51a6dfcd09732401bdda91de59ef0af9a8711c8b3365caab3a941c3aae59a3cc51f7604b8dd945e174a69d556ea00dbf82baef3c263488eaa96c009c399486d7d828dbddf34acf90575c55463cd92b55162647cb1a282e2670928eb9c0c0af020202d2387bffcbe4006019d20b0963da0fbbdf9fefd6ef1f8fb5ba0c6ea129b004df63bcd06d7d6d09b6783e70a1bfa6d2fc1066621f7ea859cca0467c8322b32655eb23f5d3197ebc0a49ecf867c3e934e91ea31c3415ccc7adf01ca6a2e835eed34cd953f2cf89aec22a48cd3ba586001f15012f9c8edaeead6df6ee6cdaaadd62cffd7fd34bb175065cee2a9a79776cc13bb74930e1edc108e03eba8b3bb2c62d1d695d5284c8cad21d9bedad563e2e96570ea03b23032d818d305c188810116bea0e19f33e7a4eb71e2e86281f55c095ad24005dccee4685395206dbfb7480d55f00e191407844cd6ba022ceea6eac1e5ef1107df340764065ff13480924b4d63c00ee00f9b9bfebee99d9ec920a821fcf06f14a1b5bb4e0590dc30a5c9944f5b2ffe6ff0c62165930cf450718b2ad74775553c6a5de2d9eab709912158b00b87836cf8feab171d774fa0745222902d0c99b312240e900e2759211168947d6d52eaf5f9df731d9d2b1ea2cf2713ca5a9fc9c64761f19012bca4d901e65ccae30197b6c3f57d82d7990d0c82d07a9dcd147a470319f0c6261b8cd5eec858a88ca9a28663220ccc0e2361dc40daffd486e625c403013d70bd4b029f8f63797ae6e7b02e800fdf709824b0e27b6073792fcee6c2cc1477368d0832723a2b13ba98daee9cdf9ede4eb6e7aeea7b37c04fee94db6f28c8252cc0b4b36af066b3b148ceb6765357eb01a071fbeef1d41b296d1627066b9ab344ddb259df37cb9e301e26a5cdf362c8f015236c7aed0cadf533431d9336fe9b5cf17f66964ccdff0db89526b9f2256fc3b82e4e749c5672cb14884935efeb65a44ff9035bbb648242bd508449afd0740491ab5819b75f19802b6741d854fbd87e694df208c55a3751c0865cd09e1e328d079693aef4fc437c9bf977c9aeae7b0a4cebf0c54ebe02efec8f53c7889af5b16ab4eb13422d5ba73a76db75d7cffe779b0ffdcc0ad429dd09448b54f10bac299361d7d649e7d38b7c470ab9f77daeba576783a7b0161e59a61f96d407773bc79c4beadc19c1a1dfde445f819aee6afecccad3579e26542321b53ab0877544c25eaa638e405449ad26c9b8ca38838ab31a8387bd7772e521e80df7c63a534f9eb6c0aacc513d17a78ae076bbaac2472153aa43ca3aa454ab5b334126a74e72e833ab718384e3a8c0e3a7a62e89362cd3da082f83052e91c02ed49739357b77546329969214dc0ca44fbdbf98eb558bb20a328788cf80e358db5b55b1c91b1d3e116642527a40850e9935eb894afc010c67be9034d05dbc5ef41f5660c849c588718c8c6517715e3fec863265fb873b03e8c3d60c7bd69ac8fa156cc5455add9ba2b9b2bcf31eae846cd31ac2b6e29bbed6384ae9bc96a2b68d13fddeaf64f08653547416782ab3eb6e206699fe084d51e32911d994626a3e7970dac2b3a7aa79222ea714228dfaeb1947894db1c4e5f21d5149f2f1b9df2084e6e848da180422e7db75f32deaec04f0cec0c3dab199dca6f932e4f774e7a072798d465a79010e08f284bf01fae43340269269eecc7b43ace70661ea38a4f19faa2df9867437dd55c5e711672057fed655eb02c3e8b05516cd08ce5db30c2adae57bb30bb45590d566bd74956d86269bf8ee9ca064780ead780c8f10795e4d93bfefddaebacfb93ab6333c8b5318c0d73d55364c2dfe057184d837d9a9c41b9070cfe2366f9bdcbf30dd9d5b8566c6204bfdb1c11dd936d9a4b288172a706f0ac9b3b8e0e97fa35579e73fe600134eb004dd9c8d1a7f4d625419c2d48b1a906ac1f7ef34f3c9a816de3c53f6f019a4a554f6a282a21f45891ffaa1e85c5af43f949c8a495dfe7953f53793dac5455b679f90efb678d25b9a7b7326193c34922487a2d83b1689261891d55ca69954c5f4d1fb1824c577cdc8dc4a22d5662e15f87ad729df239ec9ee007556c633d5dbbb4874568d11375250dd836e944c523ffcde1c156613877715c1895a0b755a971b41a1167542d5a94b2930e818fa18d169ed1f95db235cabba2f0b8162c93a31e549ee7903cb8ea9b15a39486b1d1347957e768ab1c372513f0816fd03d64e03c95019bb47b221a60f36c9ad2e4eee321175fdc6dcde5bea9d1bf73cd8ac2919a4f652fea4e1f5e761f5aeb78d925f175e066595e642a2f0c9eeb9313432bb0726ad27e3767007a27bfcdaa83a91b903ca122a3c0d503dc1ff3bdcedb096d0c7c74a67536ce50cc4b1aedef43a8d7bd26f657e3044b6ff25b01e91eb50cd17a2b28b2190e088786c5f3a6b79cf10c7de46cf94aecfdf3e99fc7ff07ca0d051375d81c888eeb525ac2b38036700a5646ab2a3814e7e91441f3dc6c0a149804142fecd91f6d6fff02e6058a670cef325dd009897fb9f7650eeabcfd832e30d2d59080c56fe524666f992c090f5ba17cad9ec034374ed4b98d46fa87b9068b31bf99d80714a736218992e37d674a0100128f93503156f9d53070cbcbb6f1aa4758a2b0012ae3b44ed0952a9ab17a626e9ccd994c401a9749b209d95223a0aa6533654a34cb1b3d4581475a22692daf84e4b87e68f6e53124cb6e3598a363d9157e94fb7d3eb59d6871766a1c3e40820f5eb917b03483cec88524ea8deb4f44dcc2bd73d01fb5ab3f45179c9d176666b6d8264aa7a6694aa208f3a8b9e6269d8b57d233d721750ef14b7b9f711e8c90bd480dbfa0c01d6dd3e899162cbde3c55f0dc0a438347b740fcde9aa0ecd9dd8e1265da91a5dd0d502608c045a54d1a23b91aaf0bb0bcb1174429cae5f2bd99011325d3df263621f110550a181767299fe386125069d08614adf9a1f3070fdcbae318c7b995d75e0ae92e5ab781d1fa0aa71c6a9a5b886835469e204da4c4592375df674a95edc197f097386e2b1de0e068df16c80dd7cd281e5c7ac6ed8d472dfdf8a4cb3dfe753635872c9c9f2a7928fc079b9191c72074b84bfdbcf6a8851bd3796f3d8ea0c9a5b124336dde9c80314aaad1e479a83a32c3ea57fd606c4753551a323cc2e83dfdb4ce40330b05a92172842f9c9df0d69c5cac7c1533c8f422dc7f9f5d697f679ea103f386d4d27fa9d3abdb335d78e6e3a1f0287056f65bb82850317883d80eb676acfd2c9c3da6f530c4f10c32865575bc75432bbf646de1f20fea33ba709befa14099bb52938dea4870a79c6814fb47ad4b8d0d8f180c8dfaa629a39ee861da33dbb0729450802e0dd1e669a07cc74e395986f13850c51fe7b7b4f295fafec913e26df87087c1868c8debbe48f83428819357c953e525abba44d25a3ceb23660c8df4f667463063179b792605a1609dcf63bef3114f4a7a41e54caeb6f164737bb508a91c015cfa960e7971dbb9f5a6bf13cdde7584c37a0e143fa5e6132cd553518f7a277b02aa89a9cd7efe86cc86122a7066c5d60de76cfa6aaf0ae10323534ff6065b715a4c1c2c376338c355fea617b5b77aed0375856516de8b9a556f45f0a907255b4417e3ff9d3363ee9c0317f076cea2f2a90477957f6b72d73085f4f700d18e194d136f253d5c5b1b5fa0a76b37aba42baf527b247aa3ae4ef229d14eae58ebbb7dfd69f4f9bcfb56295ea8ce8cad5c71ee9293d8738c36bdccfd56f99f2c4e42848e3a86b365bf470242e2dec850b61988e4ac505d11e46ae9448d9bab6f208d751921dca54c3ac30fc16fae710bf64401238bef451efd53ac49cc2a1b40d50b59e196ac8fa8272f36ab11abf2ad7d7534c2da0d491f6fad41e63de771f8ec66752c4914dc3d7db34b3b21ce286d077e9900933e650b7d63bd021d3ec71f913efef9ff089c0c762b65bb6f50fcfcaed08d2db57b59b613f269072", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.136266705s ago: executing program 1 (id=2687): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.917373109s ago: executing program 0 (id=2688): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000009}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffd}}, './file0\x00'}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.985579117s ago: executing program 8 (id=2689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {0x20, '\xa7!'}, {}]}, 0x1ea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0) close(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) fspick(r0, 0x0, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.637228603s ago: executing program 0 (id=2690): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 2.13777905s ago: executing program 1 (id=2691): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) r3 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT=r4]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) 1.008503537s ago: executing program 8 (id=2692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090106000000000001d76eeb360000000fad413ec40000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_write\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 306.27849ms ago: executing program 0 (id=2693): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 0s ago: executing program 1 (id=2694): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) bind$bt_hci(r1, &(0x7f00000001c0)={0x27}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) kernel console output (not intermixed with test programs): ode: none. [ 814.121835][T13156] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 814.273758][T10435] Bluetooth: hci6: command 0x1003 tx timeout [ 814.286780][ T5864] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 814.463294][T13163] No control pipe specified [ 814.595461][T13159] loop2: detected capacity change from 0 to 4096 [ 814.662174][ T5852] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.743559][T13168] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 816.532522][T11068] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 817.352632][T11068] usb 1-1: Using ep0 maxpacket: 32 [ 817.396901][T11068] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 817.446235][T11068] usb 1-1: config 0 has no interface number 0 [ 817.481039][T11068] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 817.567383][T11068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.612968][T11068] usb 1-1: Product: syz [ 817.632504][T11068] usb 1-1: Manufacturer: syz [ 817.637198][T11068] usb 1-1: SerialNumber: syz [ 817.686110][T11068] usb 1-1: config 0 descriptor?? [ 817.713837][T13218] No control pipe specified [ 817.734121][T11068] smsc95xx v2.0.0 [ 817.766555][T13222] loop6: detected capacity change from 0 to 136 [ 818.109024][T11068] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 818.162515][T11068] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 818.278010][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.284515][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.628804][T13237] loop5: detected capacity change from 0 to 1024 [ 818.864182][ T6330] hfsplus: b-tree write err: -5, ino 4 [ 819.602175][T13255] program syz.1.2037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.811828][T11068] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 819.812235][T11068] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 819.819038][T11068] usb 1-1: USB disconnect, device number 28 [ 820.101801][T13267] No control pipe specified [ 820.806010][T13277] loop0: detected capacity change from 0 to 4096 [ 820.979698][T13287] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 821.854549][T13302] mmap: syz.0.2049 (13302) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 821.940139][T13307] random: crng reseeded on system resumption [ 822.308965][T13319] loop6: detected capacity change from 0 to 16 [ 822.335291][T13319] erofs (device loop6): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 822.416377][T13319] erofs (device loop6): mounted with root inode @ nid 36. [ 822.514560][T11105] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 822.550014][T13319] erofs (device loop6): corrupted dir block 0 @ nid 36 [ 822.672239][T11107] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 822.697911][T11105] usb 1-1: Using ep0 maxpacket: 16 [ 822.716233][T11105] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 822.739919][T11105] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 822.794338][T11105] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 822.907797][T11105] usb 1-1: config 1 has no interface number 1 [ 822.922139][T11107] usb 2-1: Using ep0 maxpacket: 16 [ 822.954436][T13338] loop6: detected capacity change from 0 to 128 [ 822.983978][T11107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.994794][T11105] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 823.712537][T11107] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 823.764659][T11105] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 823.954667][T11107] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 823.994571][T11105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.006545][T13338] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 824.012182][T11105] usb 1-1: Product: syz [ 824.023799][T11105] usb 1-1: Manufacturer: syz [ 824.028497][T11105] usb 1-1: SerialNumber: syz [ 824.042790][T11107] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 824.060820][T11107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.069152][T11107] usb 2-1: Product: syz [ 824.073494][T11107] usb 2-1: Manufacturer: syz [ 824.078204][T11107] usb 2-1: SerialNumber: syz [ 824.100585][T13338] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 824.299954][T11105] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 824.342453][T11105] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 824.380490][T11105] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 824.453641][ T8599] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.710194][T11105] usb 1-1: USB disconnect, device number 29 [ 824.733689][T11107] usb 2-1: USB disconnect, device number 46 [ 824.912673][ T6929] udevd[6929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.919159][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 825.316861][T13359] tmpfs: Bad value for 'mpol' [ 825.700399][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 826.033887][T13370] loop2: detected capacity change from 0 to 2048 [ 826.177951][T13374] random: crng reseeded on system resumption [ 826.728028][T13370] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 826.973920][T13370] UDF-fs: Scanning with blocksize 512 failed [ 827.148884][T13370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 827.232874][T12582] team0: left allmulticast mode [ 827.268343][ T30] audit: type=1800 audit(1752699393.719:274): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2069" name="file2" dev="loop2" ino=839 res=0 errno=0 [ 827.270744][T12582] team_slave_0: left allmulticast mode [ 827.289078][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.511903][T12582] team_slave_1: left allmulticast mode [ 827.549226][T12582] team0: left promiscuous mode [ 827.604449][T12582] team_slave_0: left promiscuous mode [ 827.692895][T12582] team_slave_1: left promiscuous mode [ 827.734487][T13387] loop6: detected capacity change from 0 to 512 [ 827.771968][T12582] bridge0: port 3(team0) entered disabled state [ 827.808867][T13387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 827.961555][T12582] bridge_slave_1: left allmulticast mode [ 827.970681][T13387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.009869][T13387] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 828.082122][T12582] bridge_slave_1: left promiscuous mode [ 828.103485][T12582] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.123130][ T30] audit: type=1800 audit(1752699394.569:275): pid=13387 uid=60929 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2074" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 828.253522][T12582] bridge_slave_0: left allmulticast mode [ 828.276632][T12582] bridge_slave_0: left promiscuous mode [ 828.315134][T12582] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.368576][ T8599] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.813871][T11072] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 829.021683][T11072] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.033798][T11072] usb 6-1: config 0 interface 0 has no altsetting 0 [ 829.048651][T11072] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 829.063680][T13411] loop0: detected capacity change from 0 to 4096 [ 829.084848][T11072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.093059][T11073] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 829.163335][T11072] usb 6-1: Product: syz [ 829.167587][T11072] usb 6-1: Manufacturer: syz [ 829.226823][T11072] usb 6-1: SerialNumber: syz [ 829.253207][T11073] usb 7-1: Using ep0 maxpacket: 16 [ 829.276475][T13414] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 829.567161][T11072] usb 6-1: config 0 descriptor?? [ 829.576382][T11072] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 829.585432][T11073] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.600831][T11072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 829.610353][T11073] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 829.621654][T11073] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 829.632613][T11072] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 829.641283][T11072] usb 6-1: media controller created [ 829.682396][T11073] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 829.793969][T11073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.832176][T11073] usb 7-1: Product: syz [ 829.852155][T11073] usb 7-1: Manufacturer: syz [ 829.867119][T11073] usb 7-1: SerialNumber: syz [ 829.874343][T11072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 830.192414][T11072] DVB: Unable to find symbol tda10046_attach() [ 830.222721][T11073] usb 7-1: USB disconnect, device number 34 [ 830.242212][T11072] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 830.292729][T11072] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 830.646555][ T6929] udevd[6929]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.645612][T11072] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 831.704272][T11072] usb 6-1: USB disconnect, device number 32 [ 832.064616][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2085'. [ 832.876791][T12582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.895171][T12582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.906695][T12582] bond0 (unregistering): Released all slaves [ 832.998636][T13370] lo speed is unknown, defaulting to 1000 [ 833.090467][T13370] lo speed is unknown, defaulting to 1000 [ 833.102818][T11069] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 833.332134][T11069] usb 9-1: Using ep0 maxpacket: 16 [ 833.417969][T11069] usb 9-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 833.442089][T11069] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.479880][T11069] usb 9-1: Product: syz [ 833.547574][T11069] usb 9-1: Manufacturer: syz [ 833.557692][T11069] usb 9-1: SerialNumber: syz [ 833.594372][T11069] usb 9-1: config 0 descriptor?? [ 833.667943][T11069] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 833.704556][T13450] @: renamed from vlan0 (while UP) [ 833.915044][T11069] gp8psk: usb in 128 operation failed. [ 833.953909][T11069] gp8psk: usb in 137 operation failed. [ 833.959474][T11069] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 834.052580][T11069] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 834.061934][T11069] usb 9-1: media controller created [ 834.104192][T13456] loop1: detected capacity change from 0 to 4096 [ 834.190018][T13466] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 834.243900][T11069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 834.481099][T11069] gp8psk_fe: Frontend revision 1 attached [ 834.510341][T11069] usb 9-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 834.762328][T11069] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 834.806493][T13472] loop0: detected capacity change from 0 to 256 [ 835.060646][T11069] gp8psk: usb in 138 operation failed. [ 835.086227][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2099'. [ 835.150164][T11069] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 835.245570][T11069] gp8psk: found Genpix USB device pID = 201 (hex) [ 835.535565][T11069] usb 9-1: USB disconnect, device number 4 [ 835.621217][T13488] netlink: 'syz.8.2104': attribute type 27 has an invalid length. [ 835.728061][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2103'. [ 835.929537][T13484] loop1: detected capacity change from 0 to 8192 [ 836.433968][T11069] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 836.552179][T11073] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 836.963048][T11073] usb 6-1: Using ep0 maxpacket: 8 [ 837.000889][T11073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 837.038674][T11073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.054661][T11073] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 837.064614][T11073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 837.076090][T11073] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 837.086426][T11073] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 837.102531][T11073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.140113][T11073] usb 6-1: config 0 descriptor?? [ 837.153114][T13497] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 837.598391][T13519] loop1: detected capacity change from 0 to 16 [ 837.613220][T13519] erofs (device loop1): mounted with root inode @ nid 36. [ 837.633163][ T5864] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 837.879107][T13522] loop0: detected capacity change from 0 to 512 [ 837.919806][T13522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 837.968281][T11073] usb 6-1: USB disconnect, device number 33 [ 838.050521][T13522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.232158][T12582] hsr_slave_0: left promiscuous mode [ 838.358015][T12582] hsr_slave_1: left promiscuous mode [ 838.370574][T12582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.505756][T12582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.683582][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.864982][T13535] loop2: detected capacity change from 0 to 7 [ 838.901914][T13535] Dev loop2: unable to read RDB block 7 [ 838.953041][T13535] loop2: unable to read partition table [ 838.972405][T13535] loop2: partition table beyond EOD, truncated [ 838.997000][T13535] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 839.218084][T13542] loop2: detected capacity change from 0 to 128 [ 839.828404][T13552] loop1: detected capacity change from 0 to 256 [ 840.342158][T13552] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 840.363453][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 840.372451][T13552] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 840.574822][T13552] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 841.059061][T13565] loop2: detected capacity change from 0 to 8 [ 841.201557][T13565] SQUASHFS error: zlib decompression failed, data probably corrupt [ 841.252335][T13565] SQUASHFS error: Failed to read block 0x4e8: -5 [ 841.262277][ T30] audit: type=1800 audit(1752699663.709:276): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2127" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 841.513194][T13567] loop1: detected capacity change from 0 to 4096 [ 841.607298][T13571] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 843.614510][T13600] overlayfs: failed to verify upper (369/file1, ino=1945, err=-116) [ 843.664273][T13600] overlayfs: failed to verify index dir 'upper' xattr [ 843.682355][T13600] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 844.068954][T12582] team0 (unregistering): Port device team_slave_1 removed [ 844.290196][T12582] team0 (unregistering): Port device team_slave_0 removed [ 844.298662][T13616] siw: device registration error -23 [ 844.457245][T11105] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 844.660851][T11105] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 844.671620][T11105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.680236][T11105] usb 2-1: Product: syz [ 844.685713][T11105] usb 2-1: Manufacturer: syz [ 844.690434][T11105] usb 2-1: SerialNumber: syz [ 844.700622][T11105] usb 2-1: config 0 descriptor?? [ 844.932565][T11105] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 845.057203][ T6012] smc: removing ib device syz0 [ 845.176918][T13568] pim6reg: entered allmulticast mode [ 845.196587][T13575] pim6reg: left allmulticast mode [ 846.385835][T11105] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 846.426776][T11105] usb 2-1: USB disconnect, device number 47 [ 846.595876][T13646] loop0: detected capacity change from 0 to 8 [ 847.209421][T13644] team_slave_0 (unregistering): left promiscuous mode [ 847.241760][T13644] team_slave_0 (unregistering): left allmulticast mode [ 847.289059][T13644] team0: Port device team_slave_0 removed [ 847.388704][T13659] loop0: detected capacity change from 0 to 1024 [ 847.461799][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2161'. [ 848.051839][T13659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.092800][T13659] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.195504][T13669] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 848.757562][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.990428][T13674] pim6reg: entered allmulticast mode [ 849.042355][T13686] pim6reg: left allmulticast mode [ 849.046672][T13691] random: crng reseeded on system resumption [ 849.410749][T13698] netlink: 'syz.8.2170': attribute type 3 has an invalid length. [ 849.542598][T13703] loop2: detected capacity change from 0 to 128 [ 849.651985][T13703] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 849.705704][T13703] FAT-fs (loop2): Filesystem has been set read-only [ 850.932244][T11105] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 852.024821][T11105] usb 1-1: Using ep0 maxpacket: 16 [ 852.320026][T11105] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.337180][T11105] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 852.348159][T11105] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 852.357871][T11105] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 852.376043][T11105] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 852.474017][T11105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.502174][T11105] usb 1-1: Product: syz [ 852.526688][T11105] usb 1-1: Manufacturer: syz [ 852.533328][T13744] loop5: detected capacity change from 0 to 1024 [ 852.538442][T13741] loop2: detected capacity change from 0 to 1024 [ 852.554488][T11105] usb 1-1: SerialNumber: syz [ 852.582683][T13741] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 852.651480][T13741] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 852.701246][T13741] JBD2: no valid journal superblock found [ 852.727833][T13741] EXT4-fs (loop2): Could not load journal inode [ 852.750258][T13744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.806282][T13744] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.069709][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.162315][T11098] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 853.244487][T13760] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 853.251076][T13760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 853.296783][T13760] vhci_hcd vhci_hcd.0: Device attached [ 853.318087][T11105] usb 1-1: USB disconnect, device number 30 [ 853.332583][T13766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 853.350142][T11098] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 853.396940][T11098] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.444452][T13760] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 853.451028][T13760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 853.482900][T11103] vhci_hcd: vhci_device speed not set [ 853.493329][T11098] usb 7-1: config 0 descriptor?? [ 853.493401][T13766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 853.597779][T13760] vhci_hcd vhci_hcd.0: Device attached [ 853.602418][T11103] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 853.649024][T13763] vhci_hcd: connection reset by peer [ 853.655339][T13769] vhci_hcd: connection closed [ 853.682264][ T36] vhci_hcd: stop threads [ 853.716036][ T36] vhci_hcd: release socket [ 853.721028][ T36] vhci_hcd: disconnect device [ 853.734690][ T36] vhci_hcd: stop threads [ 853.739159][ T36] vhci_hcd: release socket [ 853.743712][ T36] vhci_hcd: disconnect device [ 853.749524][T13775] syz_tun: entered allmulticast mode [ 853.806885][T13774] syz_tun: left allmulticast mode [ 854.146286][ T6929] udevd[6929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.415214][T13783] loop5: detected capacity change from 0 to 512 [ 854.494396][T13783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 854.668373][T13783] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 854.720330][T13783] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 854.741995][T11098] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 854.742809][T13787] loop2: detected capacity change from 0 to 256 [ 854.762479][T13783] EXT4-fs (loop5): orphan cleanup on readonly fs [ 854.769037][T13783] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 854.802256][T11098] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 854.836195][T11098] asix 7-1:0.0: probe with driver asix failed with error -71 [ 854.837263][T13783] EXT4-fs warning (device loop5): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 854.877351][T13779] pim6reg: entered allmulticast mode [ 854.930712][T13783] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 855.123736][T13790] pim6reg: left allmulticast mode [ 855.165389][T13783] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.2193: bg 0: block 40: padding at end of block bitmap is not set [ 856.095529][T11098] usb 7-1: USB disconnect, device number 35 [ 856.126111][T13783] EXT4-fs (loop5): Remounting filesystem read-only [ 856.259133][T13783] EXT4-fs (loop5): 1 truncate cleaned up [ 856.306718][T13783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 856.647915][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.116917][T13818] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2203'. [ 857.292149][T11098] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 857.454925][T13831] loop5: detected capacity change from 0 to 764 [ 857.496237][T11098] usb 7-1: Using ep0 maxpacket: 16 [ 857.520604][T11098] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 857.544394][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 857.568453][T11098] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 857.605568][T13831] rock: directory entry would overflow storage [ 857.642903][T13831] rock: sig=0x4654, size=5, remaining=4 [ 857.648677][T11098] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.724476][T11098] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 857.759861][T11098] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.814832][T11098] usb 7-1: Product: syz [ 857.819070][T11098] usb 7-1: Manufacturer: syz [ 857.836855][T11098] usb 7-1: SerialNumber: syz [ 858.319453][T11098] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 858.402996][T11094] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 858.624635][T11094] usb 9-1: Using ep0 maxpacket: 32 [ 858.711839][T11094] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.743560][T11094] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.762843][T11103] vhci_hcd: vhci_device speed not set [ 858.826705][T11094] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 858.881645][T11094] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.888185][T13856] loop5: detected capacity change from 0 to 512 [ 858.934527][T11094] usb 9-1: config 0 descriptor?? [ 858.946352][T11094] hub 9-1:0.0: USB hub found [ 859.089084][T13856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.129576][T11098] usb 7-1: 2:1: cannot get freq at ep 0x82 [ 859.212191][T11094] hub 9-1:0.0: 1 port detected [ 859.254025][T13856] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.375883][T11098] usb 7-1: USB disconnect, device number 36 [ 859.680892][T13870] pim6reg: entered allmulticast mode [ 859.689536][T13870] pim6reg: left allmulticast mode [ 859.752612][T13856] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 859.756963][T11094] usb 9-1: USB disconnect, device number 5 [ 859.856641][T13856] overlayfs: failed index dir cleanup (-512) [ 859.874806][T13856] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 860.300762][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.750677][T13877] loop6: detected capacity change from 0 to 4096 [ 860.803439][T13877] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 861.179688][T13887] loop7: detected capacity change from 0 to 16384 [ 861.225269][T13889] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 861.752233][T11094] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 861.956293][T11094] usb 6-1: Using ep0 maxpacket: 32 [ 861.978332][T11094] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.036866][T11094] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 862.095152][T11094] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 862.142979][T11094] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 862.160455][T13897] loop6: detected capacity change from 0 to 512 [ 862.187999][T11094] usb 6-1: Product: syz [ 862.268950][T11094] usb 6-1: config 0 descriptor?? [ 862.361334][T13897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.454335][T13897] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.811492][ T8599] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.845470][T13917] loop0: detected capacity change from 0 to 128 [ 863.885495][T13917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 864.092148][T11068] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 865.356830][T11068] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 865.372114][T11068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.383885][T11068] usb 2-1: Product: syz [ 865.388088][T11068] usb 2-1: Manufacturer: syz [ 865.395751][T11068] usb 2-1: SerialNumber: syz [ 865.527831][T11068] usb 2-1: config 0 descriptor?? [ 865.538032][T11068] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 866.189530][T11068] gspca_sunplus: reg_r err -32 [ 866.222527][T11068] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 866.549751][T11094] usb 6-1: USB disconnect, device number 34 [ 866.873763][T13960] loop5: detected capacity change from 0 to 256 [ 866.922342][T13960] exfat: Deprecated parameter 'namecase' [ 866.990838][T13960] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 867.003475][T11098] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 867.347967][T11068] usb 2-1: USB disconnect, device number 48 [ 868.352089][T11098] usb 1-1: Using ep0 maxpacket: 16 [ 868.366506][T11098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.383691][T11098] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 868.398084][T11098] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 868.603701][T11098] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 869.082415][T11098] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 869.315032][T11098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.384086][T11098] usb 1-1: Product: syz [ 869.442214][T11098] usb 1-1: Manufacturer: syz [ 869.446858][T11098] usb 1-1: SerialNumber: syz [ 869.502773][T13988] tipc: Started in network mode [ 869.507675][T13988] tipc: Node identity 4, cluster identity 4711 [ 869.569459][T13988] tipc: Node number set to 4 [ 869.893202][T11098] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 869.924123][T11098] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 870.144491][T11098] usb 1-1: USB disconnect, device number 31 [ 870.151211][T14009] loop0: detected capacity change from 0 to 64 [ 870.167402][T14008] loop2: detected capacity change from 0 to 512 [ 870.244003][T14009] hfs: unable to locate alternate MDB [ 870.372120][T14009] hfs: continuing without an alternate MDB [ 870.447414][T14009] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 870.542203][T14008] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2254: casefold flag without casefold feature [ 870.644384][T14008] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2254: couldn't read orphan inode 15 (err -117) [ 870.650013][T14020] loop8: detected capacity change from 0 to 8 [ 870.751310][T14008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.162161][T11094] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 871.172236][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.650745][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.752172][T11098] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 871.782125][T11094] usb 7-1: Using ep0 maxpacket: 32 [ 871.789747][T11094] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.800135][T11094] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.866519][T11094] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 871.903493][T11094] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 871.928522][T11098] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 871.948322][T11098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.958466][T11094] usb 7-1: Product: syz [ 871.991870][T11094] usb 7-1: config 0 descriptor?? [ 871.999661][T11098] usb 6-1: Product: syz [ 872.018982][T11098] usb 6-1: Manufacturer: syz [ 872.039253][T11098] usb 6-1: SerialNumber: syz [ 872.064984][T11098] usb 6-1: config 0 descriptor?? [ 872.106459][T11098] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 872.391760][T14045] loop8: detected capacity change from 0 to 2048 [ 872.553774][T14045] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.569498][T14051] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2264'. [ 872.793038][T11098] gspca_sunplus: reg_r err -32 [ 872.801346][T11098] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 873.001504][T12250] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.173805][T14068] loop8: detected capacity change from 0 to 164 [ 873.222117][T11068] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 873.382290][T11068] usb 1-1: Using ep0 maxpacket: 16 [ 873.406069][T11068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.434669][T11068] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 873.469335][T11068] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 873.513723][T11068] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.542176][T14076] loop8: detected capacity change from 0 to 1024 [ 873.556775][T11068] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.567249][T11068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.606126][T11068] usb 1-1: Product: syz [ 873.617727][T11068] usb 1-1: Manufacturer: syz [ 873.628973][T11068] usb 1-1: SerialNumber: syz [ 873.859944][ T6012] hfsplus: b-tree write err: -5, ino 4 [ 873.871189][T11068] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 873.922589][T11068] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 874.035637][T11069] usb 7-1: USB disconnect, device number 37 [ 874.068120][T11094] usb 6-1: USB disconnect, device number 35 [ 874.112568][T11098] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 874.134739][T11068] usb 1-1: USB disconnect, device number 32 [ 874.183158][T14085] loop2: detected capacity change from 0 to 16 [ 874.212477][T14087] loop8: detected capacity change from 0 to 128 [ 874.224743][T14085] erofs (device loop2): mounted with root inode @ nid 36. [ 874.284704][ T30] audit: type=1800 audit(1752699696.739:277): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2273" name="file2" dev="loop8" ino=1048639 res=0 errno=0 [ 874.322671][T11098] usb 2-1: Using ep0 maxpacket: 16 [ 874.331845][T14087] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 874.362869][T14087] FAT-fs (loop8): Filesystem has been set read-only [ 874.372617][T11098] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 874.387781][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.422264][T11098] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 874.424651][T14087] syz.8.2273: attempt to access beyond end of device [ 874.424651][T14087] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 874.451840][T14091] loop6: detected capacity change from 0 to 2048 [ 874.520413][T11098] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 874.582761][T11098] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.600988][T11096] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 874.660795][T14087] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 874.688811][T11098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.726716][T11098] usb 2-1: Product: syz [ 874.743122][T14087] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 874.751332][T11096] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 874.763911][T11098] usb 2-1: Manufacturer: syz [ 874.768549][T11098] usb 2-1: SerialNumber: syz [ 874.780146][T11096] usb 3-1: USB disconnect, device number 54 [ 874.832551][T14087] syz.8.2273: attempt to access beyond end of device [ 874.832551][T14087] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 875.004490][T14087] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 875.036046][T14087] syz.8.2273: attempt to access beyond end of device [ 875.036046][T14087] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 875.081044][T14095] syz.8.2273: attempt to access beyond end of device [ 875.081044][T14095] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 875.148279][T14087] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 875.182258][T11105] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 875.208053][T14087] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 875.227841][T14095] Buffer I/O error on dev loop8, logical block 2065, async page read [ 875.275928][T11098] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 875.292162][T11096] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 875.317999][T14095] syz.8.2273: attempt to access beyond end of device [ 875.317999][T14095] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 875.361036][T11105] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 875.378313][T11105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.389035][T11105] usb 1-1: Product: syz [ 875.407283][T11105] usb 1-1: Manufacturer: syz [ 875.408737][T14095] Buffer I/O error on dev loop8, logical block 2066, async page read [ 875.412003][T11105] usb 1-1: SerialNumber: syz [ 875.442249][T14095] syz.8.2273: attempt to access beyond end of device [ 875.442249][T14095] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 875.447233][T11105] usb 1-1: config 0 descriptor?? [ 875.475978][T14095] Buffer I/O error on dev loop8, logical block 2067, async page read [ 875.494617][T14095] syz.8.2273: attempt to access beyond end of device [ 875.494617][T14095] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 875.513732][T11096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 875.532339][T14095] Buffer I/O error on dev loop8, logical block 2068, async page read [ 875.542406][T11096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.562560][T14095] syz.8.2273: attempt to access beyond end of device [ 875.562560][T14095] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 875.582127][T11096] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 875.590851][T14095] Buffer I/O error on dev loop8, logical block 2069, async page read [ 875.619507][T11096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.622225][T14095] syz.8.2273: attempt to access beyond end of device [ 875.622225][T14095] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 875.672354][T14095] Buffer I/O error on dev loop8, logical block 2070, async page read [ 875.680598][T14095] syz.8.2273: attempt to access beyond end of device [ 875.680598][T14095] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 875.695966][T11096] usb 6-1: config 0 descriptor?? [ 875.729084][T14095] Buffer I/O error on dev loop8, logical block 2071, async page read [ 875.741251][T11105] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 875.775564][T14095] Buffer I/O error on dev loop8, logical block 2072, async page read [ 876.105023][T11098] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 876.148634][T11096] hid-generic 0003:04F3:0754.0023: failed to start in urb: -90 [ 876.252807][T11096] hid-generic 0003:04F3:0754.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.5-1/input0 [ 876.355303][T11105] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 876.380989][T11096] usb 6-1: USB disconnect, device number 36 [ 876.387346][T11098] usb 2-1: USB disconnect, device number 49 [ 876.516880][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.677327][T14138] fido_id[14138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 876.972297][T11068] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 877.933491][T11068] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 877.984453][T11068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.017564][T11070] usb 1-1: USB disconnect, device number 33 [ 878.046254][T11068] usb 7-1: Product: syz [ 878.080981][T11068] usb 7-1: Manufacturer: syz [ 878.102306][T11068] usb 7-1: SerialNumber: syz [ 878.142793][T14162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2292'. [ 878.166811][T11068] usb 7-1: config 0 descriptor?? [ 878.203848][T14162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2292'. [ 878.226015][T11068] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 878.482219][T11069] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 878.551292][T11070] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 878.666052][T14178] loop5: detected capacity change from 0 to 164 [ 878.672809][T11069] usb 3-1: Using ep0 maxpacket: 32 [ 878.708758][T11069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 878.762369][T11070] usb 1-1: Using ep0 maxpacket: 16 [ 878.806299][T11070] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 878.822901][T11068] gspca_sunplus: reg_r err -32 [ 878.828888][T11069] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 878.866768][T11068] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 878.903092][T11069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.919738][T11070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.006645][T11069] usb 3-1: config 0 descriptor?? [ 879.168406][T11070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 48, changing to 9 [ 879.183195][T11070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 8447, setting to 1024 [ 879.196186][T11070] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.211185][T11069] hub 3-1:0.0: USB hub found [ 879.253402][T11070] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 879.276622][T11070] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 879.316369][T11070] usb 1-1: Manufacturer: syz [ 879.351833][T11070] usb 1-1: config 0 descriptor?? [ 879.401236][T11069] hub 3-1:0.0: 1 port detected [ 879.610210][T11069] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 879.632080][T11069] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 879.683730][T11069] usbhid 3-1:0.0: can't add hid device: -71 [ 879.695072][T11069] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 879.720137][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.726746][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.770857][T11069] usb 3-1: USB disconnect, device number 55 [ 879.853219][T11070] rc_core: IR keymap rc-hauppauge not found [ 879.859393][T11070] Registered IR keymap rc-empty [ 879.883103][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 879.915161][T11075] usb 7-1: USB disconnect, device number 38 [ 879.927183][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 879.974896][T11070] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 880.010374][T11070] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 880.060660][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.093344][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.127157][T14209] loop6: detected capacity change from 0 to 512 [ 880.143755][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.170864][T14209] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 880.172412][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.222420][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.284015][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.342568][T14209] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 880.352268][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.401394][T14209] FAT-fs (loop6): Filesystem has been set read-only [ 880.409465][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.445467][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.483681][T11070] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 880.548488][T11070] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 880.609004][T11070] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 880.680290][T11070] usb 1-1: USB disconnect, device number 34 [ 880.732192][T11069] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 881.244096][T11094] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 881.432562][T11094] usb 7-1: Using ep0 maxpacket: 16 [ 881.472722][T11094] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.528336][T11094] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 881.545662][T11069] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 881.558615][T11069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.566850][T11069] usb 3-1: Product: syz [ 881.571556][T11069] usb 3-1: Manufacturer: syz [ 881.576645][T11069] usb 3-1: SerialNumber: syz [ 881.600784][T11069] usb 3-1: config 0 descriptor?? [ 881.774727][T11094] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 881.785556][T11094] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 881.799450][T11094] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 881.831143][T11094] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.838736][T11069] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 881.842084][T11094] usb 7-1: Product: syz [ 881.851646][T11094] usb 7-1: Manufacturer: syz [ 881.875017][T14243] loop8: detected capacity change from 0 to 64 [ 881.902123][T11094] usb 7-1: SerialNumber: syz [ 881.989465][T14245] loop1: detected capacity change from 0 to 256 [ 882.043736][T14243] hfs: request for non-existent node 56 in B*Tree [ 882.123933][T14243] hfs: request for non-existent node 56 in B*Tree [ 882.135907][T14245] FAT-fs (loop1): Directory bread(block 64) failed [ 882.162587][T14243] hfs: request for non-existent node 57 in B*Tree [ 882.170320][T14243] hfs: request for non-existent node 57 in B*Tree [ 882.184599][T11094] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 882.188468][T14245] FAT-fs (loop1): Directory bread(block 65) failed [ 882.222206][T11094] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 882.233462][T14245] FAT-fs (loop1): Directory bread(block 66) failed [ 882.282684][T14245] FAT-fs (loop1): Directory bread(block 67) failed [ 882.341737][T14245] FAT-fs (loop1): Directory bread(block 68) failed [ 882.392833][T14245] FAT-fs (loop1): Directory bread(block 69) failed [ 882.420418][T11094] usb 7-1: USB disconnect, device number 39 [ 882.427174][T14245] FAT-fs (loop1): Directory bread(block 70) failed [ 882.463593][T11069] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 882.492135][T14245] FAT-fs (loop1): Directory bread(block 71) failed [ 882.518854][T14245] FAT-fs (loop1): Directory bread(block 72) failed [ 882.553537][T14245] FAT-fs (loop1): Directory bread(block 73) failed [ 882.574916][T13532] udevd[13532]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.272950][T14278] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 884.280502][T14278] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 884.332643][T11094] usb 3-1: USB disconnect, device number 56 [ 884.553141][ T30] audit: type=1326 audit(1752699707.009:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14280 comm="syz.5.2329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb29798e929 code=0x0 [ 884.776636][T14290] loop8: detected capacity change from 0 to 1024 [ 885.552301][T14302] loop0: detected capacity change from 0 to 16 [ 885.582972][T14302] erofs (device loop0): mounted with root inode @ nid 36. [ 887.532445][T11070] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 888.408312][T14330] loop8: detected capacity change from 0 to 512 [ 888.474481][T11070] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 888.505830][T11070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.548835][T11070] usb 6-1: Product: syz [ 888.559800][T14330] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.560826][T11070] usb 6-1: Manufacturer: syz [ 888.601795][T11070] usb 6-1: SerialNumber: syz [ 888.621806][T11070] usb 6-1: config 0 descriptor?? [ 888.672525][T14330] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.825432][T14330] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 888.848400][T11070] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 888.892318][T14330] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 888.932980][T14330] EXT4-fs error (device loop8): ext4_acquire_dquot:6931: comm syz.8.2342: Failed to acquire dquot type 1 [ 889.152857][T12250] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.518603][T11070] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 889.778147][T14363] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2352'. [ 889.982618][T11070] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 890.172144][T11070] usb 2-1: Using ep0 maxpacket: 32 [ 890.202665][T11070] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 890.211780][T11070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.283329][T11070] usb 2-1: config 0 descriptor?? [ 890.515734][T11070] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 890.543691][T11070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 890.554028][T11070] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 890.561720][T11070] usb 2-1: media controller created [ 890.591987][T11070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 890.737563][T11070] az6027: usb out operation failed. (-71) [ 890.745787][T11069] usb 6-1: USB disconnect, device number 37 [ 890.795469][T11070] az6027: usb out operation failed. (-71) [ 890.801248][T11070] stb0899_attach: Driver disabled by Kconfig [ 890.872179][T11070] az6027: no front-end attached [ 890.872179][T11070] [ 890.880832][T14380] loop6: detected capacity change from 0 to 4096 [ 890.917764][T11070] az6027: usb out operation failed. (-71) [ 890.930990][T11070] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 890.979727][T11070] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 891.011595][T14396] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 891.082611][T11075] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 891.105597][T11070] dvb-usb: schedule remote query interval to 400 msecs. [ 891.382090][T11075] usb 1-1: Using ep0 maxpacket: 32 [ 891.407873][T11070] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 891.418425][T11075] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.555001][T11075] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 891.572536][T11070] usb 2-1: USB disconnect, device number 50 [ 891.589354][T11075] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 891.600548][T11075] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 891.639131][T11075] usb 1-1: Product: syz [ 891.673268][T11075] usb 1-1: config 0 descriptor?? [ 891.791287][T14402] loop1: detected capacity change from 0 to 8 [ 892.060596][T11070] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 892.529244][T14413] loop8: detected capacity change from 0 to 256 [ 892.534621][T14411] loop1: detected capacity change from 0 to 24 [ 892.603341][T14411] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 892.674252][T14411] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 893.378850][T14421] loop8: detected capacity change from 0 to 8 [ 893.398208][T14421] Dev loop8: unable to read RDB block 8 [ 893.398277][T14421] loop8: unable to read partition table [ 893.398570][T14421] loop8: partition table beyond EOD, truncated [ 893.398610][T14421] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 893.540061][T11094] usb 1-1: USB disconnect, device number 35 [ 893.776438][T14429] loop1: detected capacity change from 0 to 512 [ 893.938985][T14429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.022419][T11105] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 894.071242][T14429] EXT4-fs error (device loop1): ext4_generic_delete_entry:2667: inode #2: block 12: comm syz.1.2371: bad entry in directory: inode out of bounds - offset=60, inode=63, rec_len=16, size=2048 fake=0 [ 894.162182][T14429] EXT4-fs error (device loop1) in ext4_delete_entry:2739: Corrupt filesystem [ 894.241844][T11105] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 894.281776][T11105] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.309102][T14447] loop2: detected capacity change from 0 to 16 [ 894.321439][T11105] usb 9-1: Product: syz [ 894.330814][T14443] loop6: detected capacity change from 0 to 4096 [ 894.338522][T14447] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 894.342242][T11105] usb 9-1: Manufacturer: syz [ 894.392990][T11105] usb 9-1: SerialNumber: syz [ 894.402448][T11075] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 894.411637][T11105] usb 9-1: config 0 descriptor?? [ 894.442769][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.483957][T14450] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 894.576792][T11075] usb 1-1: Using ep0 maxpacket: 32 [ 894.727112][T11075] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 894.736631][T11075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.748287][T11075] usb 1-1: config 0 descriptor?? [ 894.806821][T11105] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 894.975806][T11075] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 895.003090][T11075] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 895.013888][T11075] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 895.021095][T11075] usb 1-1: media controller created [ 895.053010][T11075] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 895.177990][T11075] az6027: usb out operation failed. (-71) [ 895.228418][T11075] az6027: usb out operation failed. (-71) [ 895.304540][T11075] stb0899_attach: Driver disabled by Kconfig [ 895.316129][T11075] az6027: no front-end attached [ 895.316129][T11075] [ 895.362217][T11075] az6027: usb out operation failed. (-71) [ 895.367971][T11075] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 895.416672][T11105] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 895.461664][T11075] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 895.781075][T11075] dvb-usb: schedule remote query interval to 400 msecs. [ 896.765120][T11075] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 897.854322][T11075] usb 1-1: USB disconnect, device number 36 [ 898.858486][T11098] usb 9-1: USB disconnect, device number 6 [ 899.047922][T11075] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 899.075754][T14479] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 899.142448][T14486] random: crng reseeded on system resumption [ 899.474392][T14479] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 904.009522][T14519] loop8: detected capacity change from 0 to 256 [ 904.156144][T14519] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 904.948722][T14524] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.2395'. [ 905.020796][T14519] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 905.977887][T14519] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 907.802631][T14534] syzkaller0: entered promiscuous mode [ 907.847775][T14534] syzkaller0: entered allmulticast mode [ 908.001954][T14545] random: crng reseeded on system resumption [ 909.224672][T14550] can0: slcan on ttyS3. [ 909.328244][T14555] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2403'. [ 910.693970][T14551] can0 (unregistered): slcan off ttyS3. [ 926.490666][ T5864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 926.501603][ T5864] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 926.514635][ T5864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 926.523823][ T5864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 926.531507][ T5864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 926.595094][T10435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 926.605761][T10435] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 926.613269][T10435] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 926.624948][T10435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 926.633145][T10435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 928.482990][T10435] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 928.493195][T10435] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 928.502712][T10435] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 928.512887][T10435] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 928.529519][T10435] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 928.672833][T11098] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 928.864168][T10435] Bluetooth: hci6: command tx timeout [ 929.743112][T14665] slcan: can't register candev [ 929.748324][T14665] Falling back ldisc for ttyS3. [ 929.822123][T11098] usb 1-1: Using ep0 maxpacket: 16 [ 930.032677][T11098] usb 1-1: device descriptor read/all, error -71 [ 930.592256][T10435] Bluetooth: hci7: command tx timeout [ 930.912566][T10435] Bluetooth: hci6: command tx timeout [ 930.937260][ T10] kworker/0:1 (10) used greatest stack depth: 16696 bytes left [ 933.063342][T10435] Bluetooth: hci7: command tx timeout [ 933.069137][T10435] Bluetooth: hci6: command tx timeout [ 933.940353][T14702] random: crng reseeded on system resumption [ 934.810821][T10435] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 934.820176][T10435] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 934.828575][T10435] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 934.836769][T10435] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 934.844543][T10435] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 935.152987][ T5864] Bluetooth: hci7: command tx timeout [ 935.158913][T10435] Bluetooth: hci6: command tx timeout [ 937.709202][T10435] Bluetooth: hci8: command tx timeout [ 937.717088][ T5864] Bluetooth: hci7: command tx timeout [ 937.775289][T14715] slcan: can't register candev [ 937.780544][T14715] Falling back ldisc for ttyS3. [ 938.498526][T14585] pim6reg: entered allmulticast mode [ 938.505666][T14590] pim6reg: left allmulticast mode [ 939.796273][ T5864] Bluetooth: hci8: command tx timeout [ 940.250593][T14647] lo speed is unknown, defaulting to 1000 [ 940.930485][T14703] lo speed is unknown, defaulting to 1000 [ 941.209116][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.272447][T14660] lo speed is unknown, defaulting to 1000 [ 941.357197][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.887872][ T5864] Bluetooth: hci8: command tx timeout [ 943.958931][ T5864] Bluetooth: hci8: command tx timeout [ 947.601279][T14647] chnl_net:caif_netlink_parms(): no params data found [ 947.638620][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2452'. [ 948.000909][T14703] chnl_net:caif_netlink_parms(): no params data found [ 948.648367][T11094] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 948.817695][T11094] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 948.834803][T11094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.846718][T11094] usb 2-1: Product: syz [ 948.850912][T11094] usb 2-1: Manufacturer: syz [ 948.858542][T11094] usb 2-1: SerialNumber: syz [ 948.871878][T11094] usb 2-1: config 0 descriptor?? [ 949.127320][T11094] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 949.447574][T14647] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.462471][T14647] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.483111][T14647] bridge_slave_0: entered allmulticast mode [ 949.491674][T14647] bridge_slave_0: entered promiscuous mode [ 949.562532][T11098] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 949.584941][T14647] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.593109][T14647] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.600517][T14647] bridge_slave_1: entered allmulticast mode [ 949.609465][T14647] bridge_slave_1: entered promiscuous mode [ 949.622894][T14703] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.630134][T14703] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.638619][T14703] bridge_slave_0: entered allmulticast mode [ 949.649910][T14703] bridge_slave_0: entered promiscuous mode [ 949.663239][T14703] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.670552][T14703] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.678416][T14703] bridge_slave_1: entered allmulticast mode [ 949.687181][T14703] bridge_slave_1: entered promiscuous mode [ 949.702233][T11098] usb 1-1: device descriptor read/64, error -71 [ 949.729716][T14660] chnl_net:caif_netlink_parms(): no params data found [ 949.956731][T14647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.972630][T11098] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 950.019334][T14703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.069146][T14647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.122564][T11098] usb 1-1: device descriptor read/64, error -71 [ 950.136996][T14703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.151426][T11094] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 950.232609][T11098] usb usb1-port1: attempt power cycle [ 950.935859][T11098] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 950.983006][T11098] usb 1-1: device descriptor read/8, error -71 [ 951.274285][T14535] team0: left allmulticast mode [ 951.280553][T14535] team_slave_1: left allmulticast mode [ 951.311301][T14535] team0: left promiscuous mode [ 951.318759][T14535] team_slave_1: left promiscuous mode [ 951.319724][T11096] usb 2-1: USB disconnect, device number 51 [ 951.331272][T14535] bridge0: port 3(team0) entered disabled state [ 951.338540][T11098] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 951.368267][T14535] bridge_slave_1: left allmulticast mode [ 951.368324][T14535] bridge_slave_1: left promiscuous mode [ 951.368565][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.387855][T14535] bridge_slave_0: left allmulticast mode [ 951.387885][T14535] bridge_slave_0: left promiscuous mode [ 951.388095][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.402750][T11098] usb 1-1: device descriptor read/8, error -71 [ 951.526372][T11098] usb usb1-port1: unable to enumerate USB device [ 952.391018][T14647] team0: Port device team_slave_0 added [ 952.428163][T14647] team0: Port device team_slave_1 added [ 952.737664][T14854] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2462'. [ 953.696717][T14703] team0: Port device team_slave_0 added [ 953.761924][T14660] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.769362][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.776829][T14660] bridge_slave_0: entered allmulticast mode [ 953.785799][T14660] bridge_slave_0: entered promiscuous mode [ 953.795429][T14660] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.802877][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.820412][T14660] bridge_slave_1: entered allmulticast mode [ 953.834378][T14660] bridge_slave_1: entered promiscuous mode [ 953.907721][T14660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.931897][T14660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.046612][T14647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.068621][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.882690][T14647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.101163][T14703] team0: Port device team_slave_1 added [ 955.205138][T14660] team0: Port device team_slave_0 added [ 955.269581][T14647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.318299][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.780092][T14647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.082882][T14703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.095059][T14703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.124563][T14703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.169012][T14660] team0: Port device team_slave_1 added [ 956.418070][T14703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.425752][T14703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.451999][T14703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.903717][T14660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.923628][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.401681][T14660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.620763][T14703] hsr_slave_0: entered promiscuous mode [ 958.657997][T14703] hsr_slave_1: entered promiscuous mode [ 958.678003][T14703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.697347][T14703] Cannot create hsr debugfs directory [ 958.778475][T14535] hsr_slave_0: left promiscuous mode [ 958.818886][T14535] hsr_slave_1: left promiscuous mode [ 958.841406][T14535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.873527][T14535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.082084][T11096] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 960.436250][T11096] usb 1-1: device descriptor read/64, error -71 [ 960.697503][T11096] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 960.869046][T11096] usb 1-1: device descriptor read/64, error -71 [ 960.880211][T14913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 960.937902][T14913] loop1: detected capacity change from 0 to 2048 [ 960.986938][T11096] usb usb1-port1: attempt power cycle [ 961.019724][T14535] team0 (unregistering): Port device team_slave_1 removed [ 961.482245][T11096] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 962.155813][T11096] usb 1-1: device descriptor read/8, error -71 [ 962.402857][T11096] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 962.433052][T11096] usb 1-1: device descriptor read/8, error -71 [ 962.752785][T11096] usb usb1-port1: unable to enumerate USB device [ 963.663690][T14660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.691039][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.749382][T14660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.805357][T14647] hsr_slave_0: entered promiscuous mode [ 963.822555][T14647] hsr_slave_1: entered promiscuous mode [ 963.828944][T14647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.852156][T14647] Cannot create hsr debugfs directory [ 964.764692][T14660] hsr_slave_0: entered promiscuous mode [ 964.807746][T14660] hsr_slave_1: entered promiscuous mode [ 964.834556][T14660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.877611][T14660] Cannot create hsr debugfs directory [ 967.984601][T14535] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.574269][T14966] random: crng reseeded on system resumption [ 968.912205][T14647] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 973.007592][T14535] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.050799][T14647] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 973.376472][T14647] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 973.421038][T14535] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.443965][T14647] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 974.257962][T14535] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.786788][T15002] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.2493'. [ 975.586572][T15005] random: crng reseeded on system resumption [ 975.875308][T15011] random: crng reseeded on system resumption [ 978.798966][T15033] random: crng reseeded on system resumption [ 978.962429][T11094] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 979.102314][T11094] usb 9-1: device descriptor read/64, error -71 [ 979.362684][T11094] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 979.512457][T11094] usb 9-1: device descriptor read/64, error -71 [ 979.678983][T11094] usb usb9-port1: attempt power cycle [ 979.899001][T15048] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2501'. [ 980.100888][T11094] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 980.378583][T11094] usb 9-1: device descriptor read/8, error -71 [ 981.125084][T11094] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 981.195307][T11094] usb 9-1: device descriptor read/8, error -71 [ 981.312819][T11094] usb usb9-port1: unable to enumerate USB device [ 981.386112][T14647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.181189][T14535] team0: left allmulticast mode [ 983.211912][T14535] team_slave_0: left allmulticast mode [ 983.252404][T14535] team_slave_1: left allmulticast mode [ 983.258016][T14535] team0: left promiscuous mode [ 983.281440][T14535] team_slave_0: left promiscuous mode [ 983.305942][T14535] team_slave_1: left promiscuous mode [ 983.311801][T14535] bridge0: port 3(team0) entered disabled state [ 983.404071][T14535] bridge_slave_1: left allmulticast mode [ 983.409813][T14535] bridge_slave_1: left promiscuous mode [ 983.435438][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.497764][T15060] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2505'. [ 984.449513][T14535] bridge_slave_0: left allmulticast mode [ 984.482294][T14535] bridge_slave_0: left promiscuous mode [ 984.488147][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.993372][T14651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 986.004527][T14651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 986.025727][T14651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 986.033839][T14651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 986.833237][T14651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 988.245197][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 988.264496][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 988.279086][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 988.299163][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 988.307172][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 988.338629][T14535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.375359][T14535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.396856][T14535] bond0 (unregistering): Released all slaves [ 988.540911][T14535] tipc: Left network mode [ 988.636495][T15083] lo speed is unknown, defaulting to 1000 [ 988.704812][T15072] lo speed is unknown, defaulting to 1000 [ 989.245544][ T5864] Bluetooth: hci3: command tx timeout [ 989.784395][T15093] can0: slcan on ttyS3. [ 990.062377][T15093] can0 (unregistered): slcan off ttyS3. [ 990.178125][T15094] can0: slcan on ttyS3. [ 990.420152][ T5864] Bluetooth: hci4: command tx timeout [ 990.653722][T15088] can0 (unregistered): slcan off ttyS3. [ 991.077638][T14535] hsr_slave_0: left promiscuous mode [ 991.084072][T14535] hsr_slave_1: left promiscuous mode [ 991.090383][T14535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.100847][T14535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.111365][T14535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.120233][T14535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.127752][T11098] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 991.150129][T14535] veth1_macvtap: left promiscuous mode [ 991.155739][T14535] veth0_macvtap: left promiscuous mode [ 991.161357][T14535] veth1_vlan: left promiscuous mode [ 991.166788][T14535] veth0_vlan: left promiscuous mode [ 991.262380][T11098] usb 1-1: device descriptor read/64, error -71 [ 991.313297][ T5864] Bluetooth: hci3: command tx timeout [ 991.502165][T11098] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 991.775665][T11098] usb 1-1: device descriptor read/64, error -71 [ 991.897224][T11098] usb usb1-port1: attempt power cycle [ 992.270679][T11098] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 992.283695][T14535] team0 (unregistering): Port device team_slave_1 removed [ 992.304477][T11098] usb 1-1: device descriptor read/8, error -71 [ 992.432524][ T5864] Bluetooth: hci4: command tx timeout [ 992.508312][T14535] team0 (unregistering): Port device team_slave_0 removed [ 992.536182][T15107] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.2515'. [ 992.572086][T11098] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 992.745724][T11098] usb 1-1: device descriptor read/8, error -71 [ 992.935194][T11098] usb usb1-port1: unable to enumerate USB device [ 993.536361][ T5864] Bluetooth: hci3: command tx timeout [ 994.534664][ T5864] Bluetooth: hci4: command tx timeout [ 995.560675][ T5864] Bluetooth: hci3: command tx timeout [ 995.669944][T15119] loop0: detected capacity change from 0 to 2048 [ 996.313239][T14651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 996.346428][T14651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 996.374196][T14651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 996.390299][T14651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 996.435552][T14651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 996.592373][ T5864] Bluetooth: hci4: command tx timeout [ 997.298919][T15125] lo speed is unknown, defaulting to 1000 [ 998.264553][T15083] chnl_net:caif_netlink_parms(): no params data found [ 998.433219][T15072] chnl_net:caif_netlink_parms(): no params data found [ 998.532869][ T5864] Bluetooth: hci5: command tx timeout [ 999.764673][T15083] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.782286][T15083] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.811249][T15083] bridge_slave_0: entered allmulticast mode [ 999.862130][T15083] bridge_slave_0: entered promiscuous mode [ 1000.001637][T15072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.009066][T15072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.016821][T15072] bridge_slave_0: entered allmulticast mode [ 1000.026028][T15072] bridge_slave_0: entered promiscuous mode [ 1000.639686][ T5864] Bluetooth: hci5: command tx timeout [ 1000.884261][T15083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.891479][T15083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.912491][T15083] bridge_slave_1: entered allmulticast mode [ 1000.921025][T15083] bridge_slave_1: entered promiscuous mode [ 1000.985246][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.013339][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.028265][T15072] bridge_slave_1: entered allmulticast mode [ 1001.036780][T15072] bridge_slave_1: entered promiscuous mode [ 1002.016859][T15072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.080916][T15083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.252362][T11072] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1002.361860][T15083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.389407][T15072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.436690][T11072] usb 1-1: Using ep0 maxpacket: 32 [ 1002.598514][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.605701][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.682517][ T5864] Bluetooth: hci5: command tx timeout [ 1002.932152][T11072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.146241][T11072] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1003.157093][T11072] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1003.166254][T11072] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1003.174321][T11072] usb 1-1: Product: syz [ 1003.202942][T11072] usb 1-1: config 0 descriptor?? [ 1003.299373][T15083] team0: Port device team_slave_0 added [ 1003.325310][T15083] team0: Port device team_slave_1 added [ 1003.938886][T15072] team0: Port device team_slave_0 added [ 1004.107891][T11098] usb 1-1: USB disconnect, device number 51 [ 1004.981145][ T5864] Bluetooth: hci5: command tx timeout [ 1006.263028][T15072] team0: Port device team_slave_1 added [ 1006.415176][T15125] chnl_net:caif_netlink_parms(): no params data found [ 1006.684835][T15083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.702096][T15083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.958830][T15083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.985526][T15083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.002313][T15083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.028953][T15083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.226593][T15072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.239027][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.320349][T15072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.368973][T15072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.376213][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.402386][T15072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.751003][T15218] random: crng reseeded on system resumption [ 1011.063427][T15230] slcan: can't register candev [ 1011.068522][T15230] Falling back ldisc for ttyS3. [ 1011.133984][T15083] hsr_slave_0: entered promiscuous mode [ 1011.150994][T15083] hsr_slave_1: entered promiscuous mode [ 1011.188439][T15083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.206367][T15083] Cannot create hsr debugfs directory [ 1011.234155][T15072] hsr_slave_0: entered promiscuous mode [ 1011.247294][T15072] hsr_slave_1: entered promiscuous mode [ 1011.277066][T15072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.299474][T15072] Cannot create hsr debugfs directory [ 1011.387351][T15125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.447295][T15125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.489826][T15125] bridge_slave_0: entered allmulticast mode [ 1011.544952][T15125] bridge_slave_0: entered promiscuous mode [ 1011.820412][T15125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.919138][T15125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.950533][T11072] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1011.984364][T15125] bridge_slave_1: entered allmulticast mode [ 1012.002716][T15125] bridge_slave_1: entered promiscuous mode [ 1012.159856][T11072] usb 9-1: Using ep0 maxpacket: 32 [ 1012.200136][T11072] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1012.212392][T11072] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.225407][T11072] usb 9-1: config 0 descriptor?? [ 1012.445618][T11072] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1012.464354][T11072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1012.489025][T11072] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1012.504731][T11072] usb 9-1: media controller created [ 1012.611197][T11072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.763694][T11072] az6027: usb out operation failed. (-71) [ 1012.775940][T11072] az6027: usb out operation failed. (-71) [ 1012.781831][T11072] stb0899_attach: Driver disabled by Kconfig [ 1012.851502][T11072] az6027: no front-end attached [ 1012.851502][T11072] [ 1012.874814][T11072] az6027: usb out operation failed. (-71) [ 1012.883654][T15125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.899394][T11072] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1012.937480][T11072] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input30 [ 1012.974296][T11072] dvb-usb: schedule remote query interval to 400 msecs. [ 1012.982612][T11098] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1013.010485][T11072] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1013.064976][T11072] usb 9-1: USB disconnect, device number 11 [ 1013.152118][T11098] usb 1-1: Using ep0 maxpacket: 32 [ 1013.161454][T15125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.198265][T11098] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.220865][T11098] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1013.245564][T11072] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1013.293537][T11098] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1013.322427][T11098] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1013.352303][T11098] usb 1-1: Product: syz [ 1013.381005][T11098] usb 1-1: config 0 descriptor?? [ 1013.833326][T11072] usb 1-1: USB disconnect, device number 52 [ 1014.927983][T15125] team0: Port device team_slave_0 added [ 1015.515698][T15125] team0: Port device team_slave_1 added [ 1017.242666][T15125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.342569][T15125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.370275][T15125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.806363][T15125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.941293][T15125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.310469][T15125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.346790][T15265] loop8: detected capacity change from 0 to 512 [ 1018.467444][T15268] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2551'. [ 1018.629542][T15265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1018.681360][T15265] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.273230][T15125] hsr_slave_0: entered promiscuous mode [ 1020.301187][T15125] hsr_slave_1: entered promiscuous mode [ 1020.317771][T15277] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.2550: iget: bad i_size value: 2533274857506816 [ 1020.344368][T15125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1020.392237][T15125] Cannot create hsr debugfs directory [ 1020.454576][T15280] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.2550: iget: bad i_size value: 2533274857506816 [ 1020.536026][T15083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1021.181697][T15083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1021.211018][T14535] bridge_slave_1: left allmulticast mode [ 1021.222226][T14535] bridge_slave_1: left promiscuous mode [ 1021.228651][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.239291][T14535] bridge_slave_0: left allmulticast mode [ 1021.248218][T14535] bridge_slave_0: left promiscuous mode [ 1021.269114][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.299044][T14535] bridge_slave_1: left allmulticast mode [ 1021.305249][T14535] bridge_slave_1: left promiscuous mode [ 1021.311028][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.341279][T14535] bridge_slave_0: left allmulticast mode [ 1021.360981][T14535] bridge_slave_0: left promiscuous mode [ 1021.384984][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.412550][T11105] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1021.434831][T14535] bridge_slave_1: left allmulticast mode [ 1021.440566][T14535] bridge_slave_1: left promiscuous mode [ 1021.462317][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.506477][T14535] bridge_slave_0: left allmulticast mode [ 1021.512632][T14535] bridge_slave_0: left promiscuous mode [ 1021.519123][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.602862][T11105] usb 1-1: Using ep0 maxpacket: 32 [ 1021.615585][T11105] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1021.648979][T11105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.656103][T12250] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.663755][T11105] usb 1-1: config 0 descriptor?? [ 1021.957995][T11105] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1022.246810][T11105] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1022.351033][T11105] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1022.371395][T11105] usb 1-1: media controller created [ 1022.377392][T14535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.402435][T14535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.424599][T14535] bond0 (unregistering): Released all slaves [ 1022.436488][T11105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1022.498637][T11105] az6027: usb out operation failed. (-71) [ 1022.524497][T11105] az6027: usb out operation failed. (-71) [ 1022.530247][T11105] stb0899_attach: Driver disabled by Kconfig [ 1022.536483][T11105] az6027: no front-end attached [ 1022.536483][T11105] [ 1022.546876][T11105] az6027: usb out operation failed. (-71) [ 1022.552677][T11105] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1022.576738][T11105] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 1022.593790][T11105] dvb-usb: schedule remote query interval to 400 msecs. [ 1022.600892][T11105] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1022.649800][T11105] usb 1-1: USB disconnect, device number 53 [ 1022.721343][T14535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.736168][T11105] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1022.767069][T14535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.783807][T14535] bond0 (unregistering): Released all slaves [ 1024.310752][T14535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.351372][T14535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.366344][T14535] bond0 (unregistering): Released all slaves [ 1024.692210][T11072] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1024.823359][T15083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1024.920395][T15083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1024.944010][T11072] usb 9-1: config 8 has an invalid interface number: 223 but max is 0 [ 1024.962146][T11072] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.992147][T11072] usb 9-1: config 8 has no interface number 0 [ 1025.002964][T11072] usb 9-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1025.013899][T11072] usb 9-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1025.230863][T11072] usb 9-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1025.260575][T11072] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.278510][T11072] usb 9-1: Product: syz [ 1025.288775][T11072] usb 9-1: Manufacturer: syz [ 1025.317582][T11072] usb 9-1: SerialNumber: syz [ 1026.612269][T11072] usb 9-1: USB disconnect, device number 12 [ 1026.990108][T14535] hsr_slave_0: left promiscuous mode [ 1027.012298][T14535] hsr_slave_1: left promiscuous mode [ 1027.028491][T14535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.052798][T14535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.110376][T14535] hsr_slave_0: left promiscuous mode [ 1027.119885][T14535] hsr_slave_1: left promiscuous mode [ 1027.128621][T14535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.143173][T14535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.181559][T14535] hsr_slave_0: left promiscuous mode [ 1027.222393][T14535] hsr_slave_1: left promiscuous mode [ 1027.232966][T14535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.258123][T14535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.869156][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2561'. [ 1028.185174][T15325] random: crng reseeded on system resumption [ 1028.757367][T14535] team0 (unregistering): Port device team_slave_1 removed [ 1028.944807][T14535] team0 (unregistering): Port device team_slave_0 removed [ 1032.387794][T14535] team0 (unregistering): Port device team_slave_1 removed [ 1032.473929][T14535] team0 (unregistering): Port device team_slave_0 removed [ 1032.698902][T15343] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.2568'. [ 1034.393393][T15346] loop1: detected capacity change from 0 to 2048 [ 1034.563176][T14535] team0 (unregistering): Port device team_slave_1 removed [ 1034.691865][T14535] team0 (unregistering): Port device team_slave_0 removed [ 1036.114336][T15358] random: crng reseeded on system resumption [ 1037.852167][T15072] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1038.134680][T15072] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1038.282436][T15072] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1038.478362][T15072] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1039.456644][T15083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.821122][T15083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.605138][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.612430][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.773487][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.780723][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.580259][T15083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1043.094391][T15125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1043.172369][T15125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1043.279398][T15125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1043.439616][T15125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1044.649486][T15083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.873368][T14651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1044.885840][T14651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1044.911723][T14651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1044.921905][T14651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1044.936657][T14651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.110630][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 1046.187816][T15125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.322157][T14651] Bluetooth: hci3: command tx timeout [ 1047.363595][T15420] slcan: can't register candev [ 1047.369024][T15420] Falling back ldisc for ttyS3. [ 1047.450356][T15083] veth0_vlan: entered promiscuous mode [ 1047.492588][T15083] veth1_vlan: entered promiscuous mode [ 1048.173057][T15426] can0: slcan on ttyS3. [ 1048.276515][T15426] can0 (unregistered): slcan off ttyS3. [ 1048.821566][T15427] can0: slcan on ttyS3. [ 1048.836969][T15125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.998714][T15434] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2586'. [ 1049.400290][T14651] Bluetooth: hci3: command tx timeout [ 1049.783956][T15407] lo speed is unknown, defaulting to 1000 [ 1050.522175][T15425] can0 (unregistered): slcan off ttyS3. [ 1050.577048][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.584254][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.604820][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.611970][ T6331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.714231][T15439] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.2587'. [ 1051.499360][T14651] Bluetooth: hci3: command tx timeout [ 1051.730202][T10435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1051.785633][T10435] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1051.831429][T10435] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1051.943572][T10435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1051.953128][T10435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1052.321104][T15125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1052.717728][T15440] lo speed is unknown, defaulting to 1000 [ 1053.552726][T10435] Bluetooth: hci3: command tx timeout [ 1053.848856][ T36] bridge_slave_1: left allmulticast mode [ 1053.885463][ T36] bridge_slave_1: left promiscuous mode [ 1053.927344][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.960568][T15464] random: crng reseeded on system resumption [ 1054.044610][T10435] Bluetooth: hci6: command tx timeout [ 1054.076988][ T36] bridge_slave_0: left allmulticast mode [ 1054.085616][ T36] bridge_slave_0: left promiscuous mode [ 1054.232705][T15467] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.2593'. [ 1054.403841][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.071703][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2595'. [ 1056.114566][T10435] Bluetooth: hci6: command tx timeout [ 1057.540088][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.615033][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.694652][ T36] bond0 (unregistering): Released all slaves [ 1058.107235][T11070] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1058.194750][T10435] Bluetooth: hci6: command tx timeout [ 1058.222482][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1058.234296][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1058.254417][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1058.265463][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1058.276413][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1058.292450][T11070] usb 2-1: Using ep0 maxpacket: 32 [ 1058.337897][T11070] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.382738][T11070] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1058.418560][T11070] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1058.462243][T11070] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1058.496369][T11070] usb 2-1: Product: syz [ 1058.537314][T11070] usb 2-1: config 0 descriptor?? [ 1058.675874][T15498] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.2599'. [ 1060.060144][T11070] usb 2-1: USB disconnect, device number 52 [ 1060.092233][ T36] hsr_slave_0: left promiscuous mode [ 1060.183270][ T36] hsr_slave_1: left promiscuous mode [ 1060.189898][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.235296][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.272496][T15494] Bluetooth: hci6: command tx timeout [ 1060.358661][T15494] Bluetooth: hci4: command tx timeout [ 1061.064898][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1061.296284][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1061.432462][T11075] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1061.624344][T11075] usb 2-1: device descriptor read/64, error -71 [ 1061.875550][T11075] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1062.045873][T11075] usb 2-1: device descriptor read/64, error -71 [ 1062.361433][T11075] usb usb2-port1: attempt power cycle [ 1062.562260][T15494] Bluetooth: hci4: command tx timeout [ 1063.407001][T15407] chnl_net:caif_netlink_parms(): no params data found [ 1063.490959][T15489] lo speed is unknown, defaulting to 1000 [ 1063.492320][T11075] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1063.533650][T11075] usb 2-1: device descriptor read/8, error -71 [ 1064.093610][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.100124][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.822201][T15494] Bluetooth: hci4: command tx timeout [ 1064.895078][T11075] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1064.932736][T11075] usb 2-1: device descriptor read/8, error -71 [ 1064.943077][T15521] slcan: can't register candev [ 1064.948528][T15521] Falling back ldisc for ttyS3. [ 1065.087490][T11075] usb usb2-port1: unable to enumerate USB device [ 1066.832245][T15494] Bluetooth: hci4: command tx timeout [ 1067.532354][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 1067.595560][T15407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.637341][T15407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.665009][T15407] bridge_slave_0: entered allmulticast mode [ 1067.687858][T15407] bridge_slave_0: entered promiscuous mode [ 1067.768286][T15407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.795187][T15407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.820479][T15407] bridge_slave_1: entered allmulticast mode [ 1067.842502][T15407] bridge_slave_1: entered promiscuous mode [ 1068.316802][T15440] chnl_net:caif_netlink_parms(): no params data found [ 1068.405928][T15407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.578759][T15407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.927125][T11070] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1071.162178][T11070] usb 9-1: Using ep0 maxpacket: 32 [ 1071.187417][T11070] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1071.244541][T11070] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.255790][T15407] team0: Port device team_slave_0 added [ 1071.274529][T15407] team0: Port device team_slave_1 added [ 1071.532986][T11070] usb 9-1: config 0 descriptor?? [ 1072.388299][T11070] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1072.437744][T11070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1072.449436][T15594] slcan: can't register candev [ 1072.457377][T15594] Falling back ldisc for ttyS3. [ 1072.594693][T11070] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1072.616571][T11070] usb 9-1: media controller created [ 1072.686404][T11070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1072.799229][T11070] az6027: usb out operation failed. (-71) [ 1072.832281][T11070] az6027: usb out operation failed. (-71) [ 1072.849696][T11070] stb0899_attach: Driver disabled by Kconfig [ 1072.909140][T11070] az6027: no front-end attached [ 1072.909140][T11070] [ 1072.962642][T11070] az6027: usb out operation failed. (-71) [ 1072.990159][T11070] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1073.024212][T15407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.051708][T15407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.053103][T11070] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input32 [ 1073.159875][T15407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.263448][T11070] dvb-usb: schedule remote query interval to 400 msecs. [ 1073.302486][T11070] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1073.362363][T11070] usb 9-1: USB disconnect, device number 13 [ 1073.412544][T15440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.452443][T11103] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1073.659078][T15440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.675075][T15440] bridge_slave_0: entered allmulticast mode [ 1073.684661][T15440] bridge_slave_0: entered promiscuous mode [ 1074.593014][T11103] usb 2-1: device descriptor read/64, error -71 [ 1074.599989][T11070] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1074.764640][T15407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.777372][T15407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.812808][T15407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.902186][T11103] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1074.952712][T15440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.966441][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.981866][T15440] bridge_slave_1: entered allmulticast mode [ 1075.000962][T15440] bridge_slave_1: entered promiscuous mode [ 1075.102346][T11103] usb 2-1: device descriptor read/64, error -71 [ 1075.136132][T15623] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.2620'. [ 1076.155713][T15489] chnl_net:caif_netlink_parms(): no params data found [ 1076.346295][T11103] usb usb2-port1: attempt power cycle [ 1077.201661][T15440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.305870][T15440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.383322][T15407] hsr_slave_0: entered promiscuous mode [ 1077.407682][T15407] hsr_slave_1: entered promiscuous mode [ 1077.424101][T15407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.432678][T15407] Cannot create hsr debugfs directory [ 1078.315582][T15653] random: crng reseeded on system resumption [ 1079.391707][T15440] team0: Port device team_slave_0 added [ 1079.409541][T15440] team0: Port device team_slave_1 added [ 1081.086736][T15489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.106878][T15489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.131863][T15489] bridge_slave_0: entered allmulticast mode [ 1081.165576][T15489] bridge_slave_0: entered promiscuous mode [ 1081.198649][T15489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.226647][T15489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.267224][T15489] bridge_slave_1: entered allmulticast mode [ 1081.303177][T15489] bridge_slave_1: entered promiscuous mode [ 1081.985240][T15679] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2631'. [ 1082.647078][T15440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.674858][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.730473][T15440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.766582][T15440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.794723][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.871335][T15440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.912552][T11070] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1082.940899][T15489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.006831][T15489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.047665][T11070] usb 9-1: device descriptor read/64, error -71 [ 1083.314138][T11070] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1083.452224][T11070] usb 9-1: device descriptor read/64, error -71 [ 1083.572863][T11070] usb usb9-port1: attempt power cycle [ 1083.922118][T11070] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1083.940357][T11103] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1084.105619][T11103] usb 2-1: Using ep0 maxpacket: 16 [ 1084.128181][T11103] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.135901][T11070] usb 9-1: device descriptor read/8, error -71 [ 1084.212746][T11103] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1084.251103][T11103] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1084.281605][T11103] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1084.309294][T11103] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1084.318899][T11103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.327080][T11103] usb 2-1: Product: syz [ 1084.331402][T11103] usb 2-1: Manufacturer: syz [ 1084.336484][T11103] usb 2-1: SerialNumber: syz [ 1084.402732][T11070] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1084.443044][T11070] usb 9-1: device descriptor read/8, error -71 [ 1084.562891][T11070] usb usb9-port1: unable to enumerate USB device [ 1084.588719][T15489] team0: Port device team_slave_0 added [ 1084.685087][T15440] hsr_slave_0: entered promiscuous mode [ 1084.701812][T15440] hsr_slave_1: entered promiscuous mode [ 1084.710034][T15440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1084.729064][T15440] Cannot create hsr debugfs directory [ 1084.765630][T15489] team0: Port device team_slave_1 added [ 1085.144544][T15489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.162095][T15489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.230169][T15489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.346964][T15489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.360474][T15489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.855340][T15489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.944082][T15739] random: crng reseeded on system resumption [ 1086.784267][T11105] usb 2-1: USB disconnect, device number 60 [ 1087.299567][T15489] hsr_slave_0: entered promiscuous mode [ 1088.123005][T15748] slcan: can't register candev [ 1088.128028][T15748] Falling back ldisc for ttyS3. [ 1088.267246][T15489] hsr_slave_1: entered promiscuous mode [ 1088.326816][T15489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1088.347362][T15489] Cannot create hsr debugfs directory [ 1088.410555][ T6014] bridge_slave_1: left allmulticast mode [ 1088.410592][ T6014] bridge_slave_1: left promiscuous mode [ 1088.410829][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.463109][ T6014] bridge_slave_0: left allmulticast mode [ 1088.463156][ T6014] bridge_slave_0: left promiscuous mode [ 1088.463487][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.552269][ T6014] bridge_slave_1: left allmulticast mode [ 1088.552300][ T6014] bridge_slave_1: left promiscuous mode [ 1088.552479][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.630655][ T6014] bridge_slave_0: left allmulticast mode [ 1088.630691][ T6014] bridge_slave_0: left promiscuous mode [ 1088.630911][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.165095][T15770] loop0: detected capacity change from 0 to 512 [ 1090.428075][T15770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.488530][T15770] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.851794][T15783] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.2645: iget: bad i_size value: 2533274857506816 [ 1091.006818][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.030316][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.083816][ T6014] bond0 (unregistering): Released all slaves [ 1092.250915][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.281359][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.326310][ T6014] bond0 (unregistering): Released all slaves [ 1092.447420][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.575437][T11070] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1092.992194][T11070] usb 2-1: device descriptor read/64, error -71 [ 1093.829909][T15812] slcan: can't register candev [ 1093.835092][T15812] Falling back ldisc for ttyS3. [ 1094.019654][T15816] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.2649'. [ 1095.170458][T11070] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1095.258018][T15818] random: crng reseeded on system resumption [ 1095.353346][ T6014] hsr_slave_0: left promiscuous mode [ 1095.460735][ T6014] hsr_slave_1: left promiscuous mode [ 1095.473104][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.544471][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.610700][ T6014] hsr_slave_0: left promiscuous mode [ 1095.682209][ T6014] hsr_slave_1: left promiscuous mode [ 1095.733920][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.762585][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.115757][ T6014] veth1_vlan: left promiscuous mode [ 1096.127134][ T6014] veth0_vlan: left promiscuous mode [ 1096.701871][T15837] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2654'. [ 1098.140588][T15846] random: crng reseeded on system resumption [ 1099.617443][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1099.825386][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1100.992490][T15860] random: crng reseeded on system resumption [ 1101.440364][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1101.485740][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1101.682272][T11072] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1101.812126][T11072] usb 1-1: device descriptor read/64, error -71 [ 1102.062156][T11072] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1102.112902][T15407] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1102.232168][T15407] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1102.239500][T11072] usb 1-1: device descriptor read/64, error -71 [ 1102.267521][T15407] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1102.372708][T11072] usb usb1-port1: attempt power cycle [ 1102.379740][T15872] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.2661'. [ 1102.422509][T15870] random: crng reseeded on system resumption [ 1102.688181][T15407] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1102.752115][T11072] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1103.208903][T11072] usb 1-1: device descriptor read/8, error -71 [ 1103.462685][T11072] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1103.602805][T15407] kthread_run failed with err -4 [ 1103.778621][T11072] usb 1-1: device descriptor read/8, error -71 [ 1104.015298][T11072] usb usb1-port1: unable to enumerate USB device [ 1105.948955][T14651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1105.958670][T14651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1105.967449][T14651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1105.975965][T14651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1105.985655][T14651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1107.045514][T15907] can0: slcan on ttyS3. [ 1107.243595][T15902] lo speed is unknown, defaulting to 1000 [ 1107.398499][T15907] can0 (unregistered): slcan off ttyS3. [ 1108.150268][T15494] Bluetooth: hci5: command tx timeout [ 1110.128978][T15943] random: crng reseeded on system resumption [ 1110.192510][T14651] Bluetooth: hci5: command tx timeout [ 1110.568943][T15494] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1110.594046][T15494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1110.616857][T15494] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1110.626756][T15494] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1110.638077][T15494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1112.276768][T14651] Bluetooth: hci5: command tx timeout [ 1112.432495][T15902] chnl_net:caif_netlink_parms(): no params data found [ 1112.675615][T14651] Bluetooth: hci3: command tx timeout [ 1112.849726][T15949] lo speed is unknown, defaulting to 1000 [ 1113.829173][T15974] slcan: can't register candev [ 1113.834239][T15974] Falling back ldisc for ttyS3. [ 1114.355981][T14651] Bluetooth: hci5: command tx timeout [ 1114.752330][T14651] Bluetooth: hci3: command 0x041b tx timeout [ 1114.797467][T15986] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.2679'. [ 1116.842601][T14651] Bluetooth: hci3: command 0x041b tx timeout [ 1117.422511][T16008] random: crng reseeded on system resumption [ 1117.846421][T15494] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1117.864490][T15494] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1117.877716][T15494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1117.886514][T15494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1117.895058][T15494] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1118.174718][T15902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.182136][T15902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.189368][T15902] bridge_slave_0: entered allmulticast mode [ 1118.214226][T15902] bridge_slave_0: entered promiscuous mode [ 1118.227752][T16017] random: crng reseeded on system resumption [ 1118.315396][T15902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.322812][T15902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.330029][T15902] bridge_slave_1: entered allmulticast mode [ 1118.371638][T15902] bridge_slave_1: entered promiscuous mode [ 1118.670252][T16023] random: crng reseeded on system resumption [ 1119.075467][T15494] Bluetooth: hci3: command 0x041b tx timeout [ 1119.952200][T14651] Bluetooth: hci6: command tx timeout [ 1120.180597][T16012] lo speed is unknown, defaulting to 1000 [ 1120.379440][T16033] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.2687'. [ 1121.214425][T14651] Bluetooth: hci3: command 0x041b tx timeout [ 1121.439744][T15902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.032142][T14651] Bluetooth: hci6: command 0x041b tx timeout [ 1122.953025][T16050] slcan: can't register candev [ 1122.958112][T16050] Falling back ldisc for ttyS3. [ 1123.926795][T15902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.112297][T14651] Bluetooth: hci6: command 0x041b tx timeout [ 1124.187337][T11072] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1124.302566][T16067] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1124.390058][T16066] page: refcount:2 mapcount:0 mapping:ffff888024107b78 index:0x2 pfn:0x9c156 [ 1124.399060][T16066] memcg:ffff88802b241a00 [ 1124.403384][T16066] aops:def_blk_aops ino:fa00000 [ 1124.408317][T16066] flags: 0xfff680000000bd(locked|waiters|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 1124.419573][T16066] raw: 00fff680000000bd ffffea00027055c8 ffff88801cafac20 ffff888024107b78 [ 1124.428335][T16066] raw: 0000000000000002 0000000000000000 00000002ffffffff ffff88802b241a00 [ 1124.437117][T16066] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 1124.445757][T16066] page_owner tracks the page as allocated [ 1124.451574][T16066] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 16066, tgid 16065 (syz.0.2693), ts 1124322297463, free_ts 1121325860868 [ 1124.472730][T16066] post_alloc_hook+0x1c0/0x230 [ 1124.477583][T16066] get_page_from_freelist+0x1321/0x3890 [ 1124.483379][T16066] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1124.489354][T16066] alloc_pages_mpol+0x1fb/0x550 [ 1124.494332][T16066] folio_alloc_noprof+0x20/0x2d0 [ 1124.499356][T16066] filemap_alloc_folio_noprof+0x3a1/0x470 [ 1124.505212][T16066] page_cache_ra_order+0x4c0/0xd00 [ 1124.510399][T16066] filemap_fault+0x1465/0x26c0 [ 1124.515400][T16066] __do_fault+0x10d/0x490 [ 1124.519864][T16066] __handle_mm_fault+0x3c2a/0x5490 [ 1124.525075][T16066] handle_mm_fault+0x589/0xd10 [ 1124.529915][T16066] do_user_addr_fault+0x7a6/0x1370 [ 1124.535143][T16066] exc_page_fault+0x5c/0xb0 [ 1124.539719][T16066] asm_exc_page_fault+0x26/0x30 [ 1124.544991][T16066] page last free pid 15489 tgid 15489 stack trace: [ 1124.551576][T16066] __free_frozen_pages+0x7fe/0x1180 [ 1124.556895][T16066] __folio_put+0x329/0x450 [ 1124.561371][T16066] device_release+0xa4/0x240 [ 1124.566083][T16066] kobject_put+0x1e7/0x5a0 [ 1124.570567][T16066] netdev_run_todo+0x7e9/0x1320 [ 1124.575524][T16066] tun_chr_close+0xea/0x230 [ 1124.580112][T16066] __fput+0x402/0xb70 [ 1124.584166][T16066] task_work_run+0x150/0x240 [ 1124.588816][T16066] do_exit+0x86c/0x2bd0 [ 1124.593074][T16066] do_group_exit+0xd3/0x2a0 [ 1124.597650][T16066] get_signal+0x2673/0x26d0 [ 1124.602226][T16066] arch_do_signal_or_restart+0x8f/0x7d0 [ 1124.607855][T16066] exit_to_user_mode_loop+0x84/0x110 [ 1124.613244][T16066] do_syscall_64+0x3f6/0x4c0 [ 1124.617914][T16066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.624077][T16066] ------------[ cut here ]------------ [ 1124.629590][T16066] kernel BUG at mm/filemap.c:3442! [ 1124.634790][T16066] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1124.641210][T16066] CPU: 0 UID: 0 PID: 16066 Comm: syz.0.2693 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1124.653281][T16066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1124.663340][T16066] RIP: 0010:filemap_fault+0x1847/0x26c0 [ 1124.668901][T16066] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 b3 36 2e 00 e9 79 f3 ff ff e8 79 52 c8 ff 48 c7 c6 e0 20 b9 8b 48 89 df e8 3a a0 10 00 90 <0f> 0b e8 62 52 c8 ff 48 c7 c6 e0 16 b9 8b 48 89 df e8 23 a0 10 00 [ 1124.688604][T16066] RSP: 0018:ffffc900047175b8 EFLAGS: 00010246 [ 1124.694676][T16066] RAX: 0000000000080000 RBX: ffffea0002705580 RCX: ffffc9000b739000 [ 1124.702670][T16066] RDX: 0000000000080000 RSI: ffffffff81f39f66 RDI: ffff888028acde44 [ 1124.710641][T16066] RBP: ffffc900047177e8 R08: 0000000000000001 R09: 0000000000000000 [ 1124.718646][T16066] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888024107b78 [ 1124.726621][T16066] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1124.734594][T16066] FS: 00007f97cfc216c0(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000 [ 1124.743528][T16066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1124.750115][T16066] CR2: 0000200000001a2b CR3: 000000005c7ed000 CR4: 0000000000350ef0 [ 1124.758087][T16066] Call Trace: [ 1124.761364][T16066] [ 1124.764308][T16066] ? __pfx_filemap_fault+0x10/0x10 [ 1124.769471][T16066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1124.775119][T16066] __do_fault+0x10d/0x490 [ 1124.779461][T16066] __handle_mm_fault+0x3c2a/0x5490 [ 1124.784584][T16066] ? __pfx___handle_mm_fault+0x10/0x10 [ 1124.790044][T16066] ? __pfx_mt_find+0x10/0x10 [ 1124.794667][T16066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1124.800318][T16066] ? find_vma+0xbf/0x140 [ 1124.804578][T16066] ? __pfx_find_vma+0x10/0x10 [ 1124.809274][T16066] handle_mm_fault+0x589/0xd10 [ 1124.814050][T16066] ? __pkru_allows_pkey+0x51/0xb0 [ 1124.819097][T16066] do_user_addr_fault+0x7a6/0x1370 [ 1124.824251][T16066] ? __lock_acquire+0xb8a/0x1c90 [ 1124.829232][T16066] ? rcu_is_watching+0x12/0xc0 [ 1124.834026][T16066] exc_page_fault+0x5c/0xb0 [ 1124.838548][T16066] asm_exc_page_fault+0x26/0x30 [ 1124.843403][T16066] RIP: 0010:_copy_from_user+0x93/0xd0 [ 1124.848796][T16066] Code: 02 e2 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 79 ee 47 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 95 fd [ 1124.868412][T16066] RSP: 0018:ffffc90004717a80 EFLAGS: 00050246 [ 1124.874482][T16066] RAX: 0000000000000001 RBX: 0000200000001a2b RCX: 0000000000000001 [ 1124.882452][T16066] RDX: ffffed10054580ee RSI: 0000200000001a2b RDI: ffff88802a2c076b [ 1124.890424][T16066] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10054580ed [ 1124.898397][T16066] R10: ffff88802a2c076b R11: 0000000000000001 R12: 0000000000000000 [ 1124.906371][T16066] R13: ffff88802a2c076b R14: dffffc0000000000 R15: 0000200000001a2b [ 1124.914357][T16066] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1124.920005][T16066] snd_rawmidi_write+0x26e/0xc10 [ 1124.924961][T16066] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1124.930454][T16066] ? __pfx_default_wake_function+0x10/0x10 [ 1124.936291][T16066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1124.941945][T16066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1124.947594][T16066] ? security_file_permission+0x71/0x210 [ 1124.953246][T16066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1124.958894][T16066] ? rw_verify_area+0xcf/0x680 [ 1124.963668][T16066] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1124.969139][T16066] vfs_writev+0x5df/0xde0 [ 1124.973482][T16066] ? __pfx_vfs_writev+0x10/0x10 [ 1124.978344][T16066] ? kmem_cache_free+0x2d1/0x4d0 [ 1124.983291][T16066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1124.989004][T16066] ? __fget_files+0x20e/0x3c0 [ 1124.993702][T16066] ? do_writev+0x28c/0x340 [ 1124.998124][T16066] do_writev+0x28c/0x340 [ 1125.002373][T16066] ? __pfx_do_writev+0x10/0x10 [ 1125.007140][T16066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1125.012785][T16066] do_syscall_64+0xcd/0x4c0 [ 1125.017312][T16066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.023245][T16066] RIP: 0033:0x7f97ced8e929 [ 1125.027690][T16066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.047369][T16066] RSP: 002b:00007f97cfc21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1125.055800][T16066] RAX: ffffffffffffffda RBX: 00007f97cefb5fa0 RCX: 00007f97ced8e929 [ 1125.063786][T16066] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 1125.071767][T16066] RBP: 00007f97cee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1125.079742][T16066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.087713][T16066] R13: 0000000000000000 R14: 00007f97cefb5fa0 R15: 00007ffd853ad678 [ 1125.095701][T16066] [ 1125.098714][T16066] Modules linked in: [ 1125.105450][T16066] ---[ end trace 0000000000000000 ]--- [ 1125.110946][T16066] RIP: 0010:filemap_fault+0x1847/0x26c0 [ 1125.116579][T16066] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 b3 36 2e 00 e9 79 f3 ff ff e8 79 52 c8 ff 48 c7 c6 e0 20 b9 8b 48 89 df e8 3a a0 10 00 90 <0f> 0b e8 62 52 c8 ff 48 c7 c6 e0 16 b9 8b 48 89 df e8 23 a0 10 00 [ 1125.136326][T16066] RSP: 0018:ffffc900047175b8 EFLAGS: 00010246 [ 1125.142447][T16066] RAX: 0000000000080000 RBX: ffffea0002705580 RCX: ffffc9000b739000 [ 1125.150468][T16066] RDX: 0000000000080000 RSI: ffffffff81f39f66 RDI: ffff888028acde44 [ 1125.158756][T16066] RBP: ffffc900047177e8 R08: 0000000000000001 R09: 0000000000000000 [ 1125.166887][T16066] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888024107b78 [ 1125.174933][T16066] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1125.182969][T16066] FS: 00007f97cfc216c0(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000 [ 1125.191961][T16066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1125.198616][T16066] CR2: 0000200000001a2b CR3: 000000005c7ed000 CR4: 0000000000350ef0 [ 1125.206661][T16066] Kernel panic - not syncing: Fatal exception [ 1125.212972][T16066] Kernel Offset: disabled [ 1125.217311][T16066] Rebooting in 86400 seconds..