last executing test programs: 11m10.634980943s ago: executing program 32 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r5, 0x2007ffb) sendfile(r4, r5, 0x0, 0x1000000201005) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffff9, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1c00000, 0x0, 0x0, 0x200000000, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4000, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 10m38.291178673s ago: executing program 5 (id=470): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x810000, &(0x7f0000000040)={[{@auto_da_alloc}]}, 0x3, 0x4d4, &(0x7f0000000340)="$eJzs3E9sFNUfAPDvbLu0wI8fFREFUYpobExsofw9eMFo4kETIx702LSVIAUM7UEIkZIYPBoS78aj8ebBq3oznky84sGDiSEhhgvgxTGzO9Nu90+7C22Xup9PMu17M2/mvTfz3uzbebsbQM8azv4kEf+LiJsRsb0aXZpguPrv3p0rk/fvXJmM+TQ99VdSSXc3i+eK/bbmkZFSROnTpO6AVbOXLp+dmJmZvpjHx+bOfTQ2e+nyy2fOTZyePj19fvzEiSOHDx0/Nn6080o1yS+r1909n1zYu/uN92+8NdlfrB/M/9fWo6X+zooxvMy2Fzo71CNvW004aTxPV9e1MLRtMG/W5Ur/3x59nTZyYMNK0zQdaL15Pq13rWENsGEl0e0SAN1RvNBn73+LZZ2GHo+E2yerb4Cyet/Ll+qW/ijlacp1729X03BEvDf/95fZEss9h/h9jQoAAPScH04WI8H68V8pdtWk+38+hzIUEY9FxI6IeDwidkbEExGVtE9GxFP1GSQR6TL576yLN45/Srcepn4rycZ/r+RzW0vHf8XoL4b68ti2iGLAPH0wPycjUR744MzM9KFl8vjxtV8/b7WtdvyXLVn+xVgwL8et/roHdFMTcxMPXOE6t69F7Omvr3/Sn124YiYgiYjdEbGng+MO1YTPvPT13oVIeWm6letfkTaZ0ut4Pq6Z9KuIF6vXfz6WXP/FHJPW85P/HBs/OjYYM9MHx7JWkLWK2FSfx8+/XH+7Vf4r1v+7P+p3ef3496cevuK57PpvqWn/UczfLtZ/KIlIFuZrZzvP4/pvn1WOO3ygcduDtv9NybuVcHGyP56Ym7t4KGJT8mbj+vHFfYt4kT6r/8iB5v1/R34WsuXpiMga8TMR8WxE7MvLvj8inouIJlVb8NOrz3/Yalub7X/NZPWfanr/W3L9F+fr2wwUO2dr+s7uv3m/xc2jvet/pBIaydc0v/8lS24R7Zb04c4eAAAAbAylqHz2vzS6EC6VRkerz4B2xpbSzIXZuX0RcX6q+h2BoSiXiidd1efB5aR4/jlUEx+vix/Onxt/0be5Eh+dvDAz1e3KQ4/bWunzSUP/z/zZ1+3SAWvOV36gd63U/3fdWKeCAOvO6z/0rpr+P98iybxPysB/k9d/6F3N+v/V+Kbhg+wr7QNsLKm+DD1N/4fe1R/vLIRLXS0JsN46ev3fvnblANZVp9/r7yyQDjTfNBhNfjFgcG2KsblJXl0JZCOrVTxgOSLaS7z5QbIofk2h9S88lDo74EA0buqL5fZKOvgdhyKQnZUVE5/eteqNP80/K7/azebbxX5abvNyr1KgK7cjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVfdvAAAA//8XK9av") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x120) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) flistxattr(r0, 0x0, 0x0) 10m37.630015052s ago: executing program 5 (id=567): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r4, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m36.742557794s ago: executing program 5 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1b, 0xa01, 0x2, 0x0, {0x4}}, 0x14}}, 0x0) 10m35.590874041s ago: executing program 33 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1b, 0xa01, 0x2, 0x0, {0x4}}, 0x14}}, 0x0) 10m26.876485322s ago: executing program 0 (id=601): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40041) splice(r2, 0x0, r4, 0x0, 0x4, 0xb) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffc840", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 10m25.889366276s ago: executing program 0 (id=604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) 10m24.86788869s ago: executing program 0 (id=605): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10m24.203213899s ago: executing program 0 (id=606): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000340)={[{@uni_xlateno}, {@shortname_winnt}, {@shortname_lower}, {@shortname_win95}, {@fat=@usefree}, {@numtail}, {@fat=@nfs}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@uni_xlate}, {@shortname_win95}]}, 0x0, 0x286, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 10m23.046582835s ago: executing program 0 (id=609): r0 = inotify_init() r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r2, 0xfbff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000440)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x1) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x85000fad) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) shutdown(r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r12], 0x378}}, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002a80)={0x2020}, 0x2020) 10m13.310521104s ago: executing program 0 (id=629): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000005c0)='./file0/file0\x00', 0x808, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008680)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x651, 0xfffffffe, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r2, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x97c6, {0x4, 0x2, 0x4, 0x28580000000, 0x5, 0x7, {0x5, 0x8000000000000000, 0xfffffffffffffff9, 0x7, 0x8, 0x3, 0x0, 0x0, 0x8, 0x1000, 0x72, 0x0, r2, 0x9, 0x4c2d}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m12.813698521s ago: executing program 34 (id=629): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000005c0)='./file0/file0\x00', 0x808, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008680)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x651, 0xfffffffe, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r2, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x97c6, {0x4, 0x2, 0x4, 0x28580000000, 0x5, 0x7, {0x5, 0x8000000000000000, 0xfffffffffffffff9, 0x7, 0x8, 0x3, 0x0, 0x0, 0x8, 0x1000, 0x72, 0x0, r2, 0x9, 0x4c2d}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m43.060959213s ago: executing program 2 (id=713): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioperm(0x284, 0x7f, 0xe3) setrlimit(0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) 9m41.513897055s ago: executing program 2 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c0f000000c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576648eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af095a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0714b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb6ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b40867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d0400000000000000a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f710100ab8d0b545c334014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b57fe072d3218983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422aa428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af27579050000000000000015784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 9m41.302769738s ago: executing program 2 (id=716): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x0, 0x0, 0x0}) 9m41.277959438s ago: executing program 2 (id=717): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0xff, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x6, 0x800001}}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 9m38.746677734s ago: executing program 2 (id=723): syz_open_dev$loop(0x0, 0x80000001, 0x4040) clock_gettime(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRES8=0x0], 0xff, 0xc2d, &(0x7f0000001cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) 9m38.073981654s ago: executing program 2 (id=724): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x36eac000) r0 = userfaultfd(0x80001) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = open(&(0x7f0000000280)='./file0\x00', 0x8e00, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) copy_file_range(r5, &(0x7f0000000540)=0x6, r5, 0x0, 0x87e, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 9m37.688280239s ago: executing program 35 (id=724): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x36eac000) r0 = userfaultfd(0x80001) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = open(&(0x7f0000000280)='./file0\x00', 0x8e00, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) copy_file_range(r5, &(0x7f0000000540)=0x6, r5, 0x0, 0x87e, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 9m23.228057784s ago: executing program 7 (id=759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) 9m20.255290367s ago: executing program 7 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000303"], 0x14}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) 9m20.134708069s ago: executing program 7 (id=766): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 9m20.05475794s ago: executing program 7 (id=767): prctl$PR_SET_NAME(0xf, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xad, 0x66}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x4000001, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf8, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0xd}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 9m18.682320459s ago: executing program 7 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x116) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x101) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000000c0)="4b0003000000", 0x6) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000cc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000d00)='./file0\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents64(r6, &(0x7f00000001c0)=""/148, 0x94) getdents(r6, 0x0, 0x0) r7 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x80012, r7, 0x80000000) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000280)={0x101, 0x6}) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 9m17.693539993s ago: executing program 7 (id=770): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x42000000) 9m2.41190022s ago: executing program 36 (id=770): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x42000000) 9m0.960449191s ago: executing program 3 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x16, 0x0, 0x0) ptrace(0x4206, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x15) listxattr(0x0, 0x0, 0x0) 8m58.391725387s ago: executing program 3 (id=814): r0 = socket$inet6(0xa, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) syz_mount_image$vfat(&(0x7f0000002480), &(0x7f0000002300)='./file0\x00', 0x1010040, &(0x7f0000002340)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt\x00\b\x00\x00\x00\x00\x00\x00uni_xlate=1,showexec,flush,shortname=win95,nonumtail=0,rodir,utf8=0,shortname=mixed,umask=00000000006,\x00'/153, @ANYRES32], 0x1, 0x26e, &(0x7f0000002580)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECM8yQha4sNkVpaqGFgi7a7orfQb+CLt0KLsStX0AEqYIb66oLIRJv/yQ1ubZqGrHPs+nLue+Pc056uZcuenLpx+WlhZW1xd3dnSgWc5GvRjX2clGOkRiN1FYAAF+TvVYrXrVSw14LAHA2vP8B4PzJev/ntg7H/j37lQEAg/JJf/+PDGRJAMCA/X/h4t+ztdrcf0lSjFjeXq+v19Of6fXZxbgazWjEVJTiTUTrUFr/+Vdtbippe16O4vLmSJrfXK+PduenoxTl3vnpJBX1du4gPxYT+/knE9GImSjFd73zMz3z38Svv3TMX4lSPL4cK9GMhWhn03whIjamk+SPf2rH8oV3fQAAAAAAAAAAAAAAAAAAAAAAMAiV5FC5+/yb9PyeSqXf9TTfeT7QeNb5QK3NY+fr5OOH/HD3DgAAAAAAAAAAAAAAAAAAAF+Ktes3luabzcZqVnHt0Z0HO4U08MHm7CK3P+/pUtuZPeMn28Wx4tufn93qdakQhdN+Ph9XjEVE50iyP+X9nwY46ecqHu5c+f63tcnf+/VEvnPkZnurXT19bqT8oD7wl6WIvj3F7Bsylz3F3YOi+vq9noNbqbE6Puxf3OTt6vy9jacvTprKeGi0RgfxKAIAAAAAAAAAAAAAAAAAgHPv6J9+h70SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABieo+//P21RiK6RYt/mrWHvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3gYAAP//32mUuw==") sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d0d, 0x0) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mincore(&(0x7f00007e8000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[], 0x310) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") 8m57.114441525s ago: executing program 3 (id=819): sendmsg$inet(0xffffffffffffffff, 0x0, 0x860) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0x0, 0x1a0}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000a80)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x48, 0xc, 0x6, 0x101, 0x430, 0x0, "8fa14f18f743c4d2d47a8668ad2c999dfd571800ec2fbd801555cbacff975bdb7f43a14411a84fbca2eac84ded41bd7f15dc013edbe91e15c4ee7b8123df8530245e77426217ef94"}}, 0x160) 8m55.040558695s ago: executing program 3 (id=825): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@delalloc}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@data_err_ignore}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=""/16, 0x10) 8m54.077921258s ago: executing program 3 (id=827): creat(0x0, 0x6) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_delete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m52.242457455s ago: executing program 3 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f00000013c0)=""/208, 0xd0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in6=@private2, 0x4d6, 0x3c}, 0x2, @in6=@private0, 0x0, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8m52.017408007s ago: executing program 37 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f00000013c0)=""/208, 0xd0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in6=@private2, 0x4d6, 0x3c}, 0x2, @in6=@private0, 0x0, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 16.576954375s ago: executing program 4 (id=2301): socket$nl_route(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13.840696764s ago: executing program 4 (id=2304): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000340)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x840, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = dup3(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000001380)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3}], 0xc}) socket$inet6(0xa, 0x3, 0x9) 13.664711927s ago: executing program 9 (id=2306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0xfffffffffffffc91) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x76, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 13.646446097s ago: executing program 6 (id=2307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='source\xcf\x87\x86\x1bY\x0f\xde\xd6\xcd\xc0\x01\xd3\x19>K\x04\xfe\x86YG\xa5\x0f\xed\xa0\x9f\x1e\x14R\x9e\x04\xfa\xed\xd0TG&\x88\xeaz\x9aD\xf8Tt\x8c\x00{\x1fm\xfe\x9c\xf6_h\x9e\xfc\'', &(0x7f00000001c0)='sou\x01ce', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @remote}, 0x4a, {}, 'veth1_to_bridge\x00'}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r6, 0x400000) finit_module(r6, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) 13.46279779s ago: executing program 1 (id=2309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000300)={0xfffffffd, 0x0, 0x99, 0x1, 0x0, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 12.7226493s ago: executing program 4 (id=2310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = fsopen(&(0x7f00000002c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYBLOB="6a67b735adbdb825559b4f6ed5f45c3526367680a7ce61ec78af95", @ANYRESOCT, @ANYRESDEC=0x0]) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r6, 0x0, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) 12.500988613s ago: executing program 9 (id=2311): r0 = socket(0x840000000002, 0x3, 0xff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, &(0x7f0000000580)) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x60, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x60}}, 0x240400c0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x3, @remote}, r7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r7, 0x0, 0x1, 0x4}}, 0x20) 11.654091376s ago: executing program 1 (id=2312): sendmsg$inet(0xffffffffffffffff, 0x0, 0x860) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0x0, 0x1a0}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000a80)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x36, 0xc, 0x6, 0x101, 0x430, 0x0, "8fa14f18f743c4d2d47a8668ad2c999dfd571800ec2fbd801555cbacff975bdb7f43a14411a84fbca2eac84ded41bd7f15dc013edbe9"}}, 0x14e) 11.32566898s ago: executing program 8 (id=2313): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(r5, 0x8904, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r7}, 0x18) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000040)='\xb1H\xd7\xda\xe8y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) 10.395489463s ago: executing program 9 (id=2314): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r6}, 0x18) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000040)='\xb1H\xd7\xda\xe8y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) 10.338571544s ago: executing program 6 (id=2315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pread64(r5, &(0x7f0000000380)=""/87, 0x57, 0x80000000000) 9.014545503s ago: executing program 1 (id=2316): socket$nl_route(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.998256621s ago: executing program 6 (id=2317): add_key$keyring(0xfffffffffffffffc, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x4000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) 6.987636211s ago: executing program 8 (id=2318): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 6.960473442s ago: executing program 4 (id=2319): syz_emit_ethernet(0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff08004500006400000000002f9078000000000000000000004e2300509078210e00014db0fee11e78eac93a3e0eecc42664af160faba8fbf203fbc8a66e3070473cbd6143d6cc5adaf884c13347f8ea316997fb7aba8ed170ffd3c5e2d43464"], 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='5\x00', 0x2) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xd811, 0x10100, 0x0, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xfd2c, 0x800, 0x0, 0x396}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) connect$qrtr(r0, &(0x7f0000000040), 0xc) getpeername$qrtr(r0, 0x0, &(0x7f0000000280)) 6.738076675s ago: executing program 1 (id=2320): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd4d24", 0xe}}, 0xee) close(r4) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r9, 0xc018620b, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r10 = accept4$unix(r1, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmsg(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1}, 0x40000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000900000000000000000000000061194c00000000009500000000000000c1c822df91a60380483f9f98552d3aad1b69b1c4589ff353a29cdb18ce3ac25d7a9b8928c8f575188a545c84908cc2051b30971c4e95e647e3be262c119dc14a1a1f04c427e500be92b8b46840183b4a6e6e4c2c452af76a6e7ddba430a5bbb01abc3cbcac88fb0a06a0e587c4ffd38c2a89b3f4c88d5875ebe1eb334b90800afc9e292adaf818a6bf906d5550f41dcc8c794c47211dafdf531bd0e5a9969cda68b8cdf9fe33eb52d25b5d1321668285dceadbe9cf235b"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6.563971127s ago: executing program 9 (id=2321): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000340)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x840, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = dup3(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000001380)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3}], 0xc}) socket$inet6(0xa, 0x3, 0x9) 6.514588608s ago: executing program 8 (id=2322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000300)={0xfffffffd, 0x0, 0x99, 0x1, 0x0, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 4.28077284s ago: executing program 6 (id=2323): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 4.27023099s ago: executing program 9 (id=2324): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.183919095s ago: executing program 8 (id=2325): r0 = socket(0x840000000002, 0x3, 0xff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, &(0x7f0000000580)) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x60, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x60}}, 0x240400c0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x3, @remote}, r7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r7, 0x0, 0x1, 0x4}}, 0x20) 3.102661376s ago: executing program 4 (id=2326): sendmsg$inet(0xffffffffffffffff, 0x0, 0x860) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0x0, 0x1a0}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000a80)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x36, 0xc, 0x6, 0x101, 0x430, 0x0, "8fa14f18f743c4d2d47a8668ad2c999dfd571800ec2fbd801555cbacff975bdb7f43a14411a84fbca2eac84ded41bd7f15dc013edbe9"}}, 0x14e) 3.082002997s ago: executing program 6 (id=2327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pread64(r6, &(0x7f0000000380)=""/87, 0x57, 0x80000000000) 3.080716857s ago: executing program 1 (id=2328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004001000e27f100001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) dup(0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x22, 0x0, 0x0) 3.054668587s ago: executing program 9 (id=2329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = fsopen(&(0x7f00000002c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYBLOB="6a67b735adbdb825559b4f6ed5f45c3526367680a7ce61ec78af95", @ANYRESOCT, @ANYRESDEC=0x0]) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r6, 0x0, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) 138.061309ms ago: executing program 6 (id=2330): r0 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0xfffff5e6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x40000400, 0x1, 0x1000001, 0x3c}, &(0x7f0000000180)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1002) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x40) r7 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) fcntl$dupfd(r7, 0x0, r7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="05000000010000", 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmmsg$inet(r0, &(0x7f0000000400), 0x0, 0x4000840) 124.391439ms ago: executing program 8 (id=2331): socket$nl_route(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 104.207459ms ago: executing program 4 (id=2332): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r6}, 0x18) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000040)='\xb1H\xd7\xda\xe8y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) 30.66702ms ago: executing program 8 (id=2333): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 0s ago: executing program 1 (id=2334): add_key$keyring(0xfffffffffffffffc, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x4000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) kernel console output (not intermixed with test programs): 480.861844][ T8445] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 480.869918][ T8445] RBP: 00007fc235512ab1 R08: 0000000000000000 R09: 0000000000000000 [ 480.877904][ T8445] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 480.886321][ T8445] R13: 0000000000000000 R14: 00007fc2356b7fa0 R15: 00007ffc240179b8 [ 480.894312][ T8445] [ 482.979859][ T8472] loop9: detected capacity change from 0 to 32768 [ 483.067448][ T8472] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1023 (8472) [ 483.156084][ T8472] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 483.192850][ T8472] BTRFS info (device loop9): using free space tree [ 483.199639][ T8472] BTRFS info (device loop9): has skinny extents [ 483.688104][ T8448] hid (null): report_id 44392 is invalid [ 483.706708][ T8448] hid-generic 000C:0006:0101.0016: unknown main item tag 0x4 [ 483.714486][ T8448] hid-generic 000C:0006:0101.0016: report_id 44392 is invalid [ 483.800689][ T8448] hid-generic 000C:0006:0101.0016: item 0 2 1 8 parsing failed [ 483.899304][ T8472] BTRFS info (device loop9): enabling ssd optimizations [ 484.003779][ T8448] hid-generic: probe of 000C:0006:0101.0016 failed with error -22 [ 484.231826][ T8476] loop8: detected capacity change from 0 to 32768 [ 484.322890][ T8476] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.1025 (8476) [ 484.371016][ T4351] BTRFS info (device loop9): space_info 5 has 139264 free, is not full [ 484.380247][ T4351] BTRFS info (device loop9): space_info total=3276800, used=53248, pinned=0, reserved=16384, may_use=3067904, readonly=0 zone_unusable=0 [ 484.395031][ T4351] BTRFS info (device loop9): global_block_rsv: size 851968 reserved 851968 [ 484.405404][ T4351] BTRFS info (device loop9): trans_block_rsv: size 0 reserved 0 [ 484.413340][ T4351] BTRFS info (device loop9): chunk_block_rsv: size 0 reserved 0 [ 484.421216][ T4351] BTRFS info (device loop9): delayed_block_rsv: size 0 reserved 0 [ 484.429106][ T4351] BTRFS info (device loop9): delayed_refs_rsv: size 524288 reserved 389120 [ 484.480351][ T8476] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 484.519679][ T8476] BTRFS info (device loop8): enabling auto defrag [ 484.548578][ T8476] BTRFS info (device loop8): use no compression [ 484.570258][ T8511] device syzkaller0 entered promiscuous mode [ 484.585682][ T8476] BTRFS info (device loop8): force clearing of disk cache [ 484.619135][ T8476] BTRFS info (device loop8): max_inline at 4096 [ 484.642640][ T8476] BTRFS info (device loop8): using free space tree [ 484.665753][ T8513] BTRFS info (device loop9): balance: start -s [ 484.667880][ T8476] BTRFS info (device loop8): has skinny extents [ 484.681833][ T8513] BTRFS info (device loop9): left=0, need=98304, flags=2 [ 484.691747][ T8513] BTRFS info (device loop9): space_info 2 has 0 free, is not full [ 484.702134][ T8513] BTRFS info (device loop9): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 484.716149][ T8513] BTRFS info (device loop9): global_block_rsv: size 851968 reserved 851968 [ 484.725490][ T8513] BTRFS info (device loop9): trans_block_rsv: size 0 reserved 0 [ 484.733204][ T8513] BTRFS info (device loop9): chunk_block_rsv: size 0 reserved 0 [ 484.740874][ T8513] BTRFS info (device loop9): delayed_block_rsv: size 32768 reserved 32768 [ 484.749489][ T8513] BTRFS info (device loop9): delayed_refs_rsv: size 589824 reserved 589824 [ 484.821724][ T8513] BTRFS info (device loop9): relocating block group 1048576 flags system [ 484.836952][ T4225] BTRFS info (device loop9): space_info 5 has 151552 free, is not full [ 484.845413][ T4225] BTRFS info (device loop9): space_info total=11534336, used=61440, pinned=0, reserved=2633728, may_use=8687616, readonly=0 zone_unusable=0 [ 484.860025][ T4225] BTRFS info (device loop9): global_block_rsv: size 851968 reserved 851968 [ 484.868762][ T4225] BTRFS info (device loop9): trans_block_rsv: size 0 reserved 0 [ 484.876574][ T4225] BTRFS info (device loop9): chunk_block_rsv: size 0 reserved 0 [ 484.884438][ T4225] BTRFS info (device loop9): delayed_block_rsv: size 0 reserved 0 [ 484.892302][ T4225] BTRFS info (device loop9): delayed_refs_rsv: size 851968 reserved 716800 [ 485.035626][ T4225] BTRFS info (device loop9): left=0, need=98304, flags=5 [ 485.058110][ T4225] BTRFS info (device loop9): space_info 2 has 0 free, is not full [ 485.067242][ T4225] BTRFS info (device loop9): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 485.080896][ T4225] BTRFS info (device loop9): global_block_rsv: size 851968 reserved 851968 [ 485.090469][ T4225] BTRFS info (device loop9): trans_block_rsv: size 0 reserved 0 [ 485.098298][ T4225] BTRFS info (device loop9): chunk_block_rsv: size 0 reserved 0 [ 485.105992][ T4225] BTRFS info (device loop9): delayed_block_rsv: size 0 reserved 0 [ 485.114529][ T4225] BTRFS info (device loop9): delayed_refs_rsv: size 196608 reserved 196608 [ 485.150777][ T8476] BTRFS info (device loop8): enabling ssd optimizations [ 485.167113][ T8476] BTRFS info (device loop8): clearing free space tree [ 485.205737][ T8476] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 485.257904][ T8476] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 485.310380][ T8476] BTRFS info (device loop8): creating free space tree [ 485.322996][ T8476] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 485.342062][ T8476] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 485.354417][ T8513] BTRFS info (device loop9): balance: canceled [ 485.358514][ T8539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 486.868064][ T8551] netlink: 'syz.6.1037': attribute type 10 has an invalid length. [ 487.050276][ T8557] loop9: detected capacity change from 0 to 2048 [ 487.785490][ T8557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.049803][ T8569] rdma_rxe: already configured on syz_tun [ 490.312264][ T5921] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 490.722501][ T5921] usb 10-1: unable to get BOS descriptor or descriptor too short [ 490.772458][ T5921] usb 10-1: not running at top speed; connect to a high speed hub [ 490.868550][ T5921] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.897714][ T5921] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 491.382266][ T7968] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 491.588783][ T5921] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 491.600029][ T5921] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.608525][ T5921] usb 10-1: Product: syz [ 491.612951][ T5921] usb 10-1: Manufacturer: syz [ 491.618092][ T5921] usb 10-1: SerialNumber: syz [ 491.745011][ T8610] loop8: detected capacity change from 0 to 4096 [ 491.812342][ T7968] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 491.842076][ T7968] usb 5-1: config 0 interface 0 has no altsetting 0 [ 491.934596][ T8610] NILFS (loop8): invalid segment: Checksum error in segment payload [ 491.953094][ T8610] NILFS (loop8): trying rollback from an earlier position [ 491.953275][ T5921] usb 10-1: USB disconnect, device number 3 [ 492.031637][ T8610] NILFS (loop8): recovery complete [ 492.037640][ T7968] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 492.053389][ T7968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.066523][ T7968] usb 5-1: Product: syz [ 492.070746][ T7968] usb 5-1: Manufacturer: syz [ 492.079720][ T7968] usb 5-1: SerialNumber: syz [ 492.090170][ T7968] usb 5-1: config 0 descriptor?? [ 492.156420][ T7968] usb 5-1: selecting invalid altsetting 0 [ 492.211198][ T8615] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 493.104926][ T7968] usb 5-1: USB disconnect, device number 3 [ 493.185591][ T7966] Bluetooth: hci3: command 0x0406 tx timeout [ 493.207378][ T8612] loop1: detected capacity change from 0 to 32768 [ 493.257175][ T8612] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1055 (8612) [ 493.326314][ T8612] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 493.341561][ T8612] BTRFS info (device loop1): setting nodatacow, compression disabled [ 493.350753][ T8612] BTRFS info (device loop1): turning on flush-on-commit [ 493.364467][ T8612] BTRFS info (device loop1): using free space tree [ 493.371696][ T8612] BTRFS info (device loop1): has skinny extents [ 493.402084][ T5921] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 493.504381][ T8612] BTRFS info (device loop1): enabling ssd optimizations [ 493.593538][ T8646] loop9: detected capacity change from 0 to 8 [ 493.722692][ T8646] SQUASHFS error: xz decompression failed, data probably corrupt [ 493.742032][ T8646] SQUASHFS error: Failed to read block 0xa8: -5 [ 493.765884][ T8646] SQUASHFS error: xz decompression failed, data probably corrupt [ 493.774713][ T8646] SQUASHFS error: Failed to read block 0xa8: -5 [ 493.783587][ T26] audit: type=1800 audit(1746829533.967:242): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1057" name="file0" dev="loop9" ino=3 res=0 errno=0 [ 493.932447][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 493.973255][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 494.023862][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 494.093209][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 494.292880][ T5921] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 494.313165][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.338147][ T5921] usb 7-1: Product: syz [ 494.359670][ T5921] usb 7-1: Manufacturer: syz [ 494.380162][ T5921] usb 7-1: SerialNumber: syz [ 494.483117][ T5921] usb 7-1: config 0 descriptor?? [ 494.764931][ T5921] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 494.969213][ T7966] usb 7-1: USB disconnect, device number 6 [ 497.600993][ T8681] input: syz0 as /devices/virtual/input/input24 [ 500.198405][ T8693] netlink: 'syz.6.1070': attribute type 10 has an invalid length. [ 500.252216][ T8693] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1070'. [ 501.337016][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.347844][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.795917][ T8711] lo speed is unknown, defaulting to 1000 [ 502.008472][ T8722] loop6: detected capacity change from 0 to 8 [ 502.067971][ T8722] SQUASHFS error: xz decompression failed, data probably corrupt [ 502.076206][ T8722] SQUASHFS error: Failed to read block 0xa8: -5 [ 502.083462][ T8722] SQUASHFS error: xz decompression failed, data probably corrupt [ 502.092016][ T8722] SQUASHFS error: Failed to read block 0xa8: -5 [ 502.122113][ T26] audit: type=1800 audit(1746829542.277:243): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1076" name="file0" dev="loop6" ino=3 res=0 errno=0 [ 502.564465][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 502.587438][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.597291][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.206122][ T8739] netlink: 'syz.1.1083': attribute type 10 has an invalid length. [ 503.262096][ T8739] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1083'. [ 504.506051][ T8684] Bluetooth: hci0: command 0x0401 tx timeout [ 506.666229][ T8774] input: syz0 as /devices/virtual/input/input25 [ 506.713013][ T8773] input: syz0 as /devices/virtual/input/input26 [ 506.871599][ T8776] netlink: 'syz.8.1093': attribute type 1 has an invalid length. [ 506.927040][ T8776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.111117][ T8778] bond1: (slave veth0_to_bond): making interface the new active one [ 507.144683][ T8778] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 507.192441][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 507.236601][ T8776] device veth1 entered promiscuous mode [ 507.268203][ T8776] device veth1 left promiscuous mode [ 507.302768][ T8776] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 507.372762][ T8782] netlink: 'syz.6.1095': attribute type 10 has an invalid length. [ 507.416918][ T8782] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1095'. [ 508.605197][ T8786] netlink: 'syz.6.1097': attribute type 12 has an invalid length. [ 510.340855][ T8804] ubi31: attaching mtd0 [ 510.360656][ T8804] ubi31: scanning is finished [ 510.365478][ T8804] ubi31: empty MTD device detected [ 510.585619][ T8804] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 512.059355][ T8833] loop4: detected capacity change from 0 to 256 [ 512.132811][ T8833] exfat: Unknown parameter '184467440737095516150xffffffffffffffff˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙' [ 512.822394][ T8837] loop6: detected capacity change from 0 to 2048 [ 513.051743][ T8837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.253627][ T8851] input: syz0 as /devices/virtual/input/input27 [ 515.117397][ T8857] ubi31: attaching mtd0 [ 515.124286][ T8857] ubi31: scanning is finished [ 515.166439][ T8857] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 515.174234][ T8857] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 515.181554][ T8857] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 515.188871][ T8857] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 515.196631][ T8857] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 515.203696][ T8857] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 515.212237][ T8857] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4105794342 [ 515.223211][ T8857] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 515.246810][ T8861] ubi31: background thread "ubi_bgt31d" started, PID 8861 [ 515.448995][ T8865] loop9: detected capacity change from 0 to 512 [ 515.527951][ T8865] EXT4-fs (loop9): Test dummy encryption mode enabled [ 515.557426][ T8865] EXT4-fs (loop9): Mount option "dioread_nolock" incompatible with ext3 [ 517.045908][ T8889] loop9: detected capacity change from 0 to 2048 [ 517.101514][ T8889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.314111][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1132'. [ 521.192005][ T7965] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 521.562181][ T7965] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.580432][ T7965] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 521.617315][ T7965] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.657196][ T7965] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 521.696653][ T7965] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 521.855553][ T7965] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.875619][ T7965] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.905998][ T7965] usb 10-1: Product: syz [ 521.910329][ T7965] usb 10-1: Manufacturer: syz [ 521.978041][ T7965] cdc_wdm 10-1:1.0: skipping garbage [ 521.991963][ T7965] cdc_wdm 10-1:1.0: skipping garbage [ 522.012096][ T7965] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 522.038939][ T7965] cdc_wdm 10-1:1.0: Unknown control protocol [ 522.746748][ T7965] Bluetooth: hci0: command 0x2021 tx timeout [ 524.173970][ T5921] usb 10-1: USB disconnect, device number 4 [ 525.028951][ T8985] loop4: detected capacity change from 0 to 2048 [ 525.254622][ T8985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.491601][ T9012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 529.000081][ T7974] Bluetooth: hci5: command 0x0406 tx timeout [ 536.675737][ T9120] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.819745][ T9120] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 536.886203][ T9120] bridge_slave_0: default FDB implementation only supports local addresses [ 537.484971][ T9129] loop4: detected capacity change from 0 to 8192 [ 537.559136][ T9129] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 539.222144][ T7974] Bluetooth: hci2: command 0x0406 tx timeout [ 540.215951][ T9146] netlink: 'syz.4.1205': attribute type 10 has an invalid length. [ 540.242058][ T9146] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1205'. [ 540.775370][ T9157] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.899546][ T9157] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 540.949283][ T9157] bridge_slave_0: default FDB implementation only supports local addresses [ 542.515844][ T9186] input: syz0 as /devices/virtual/input/input28 [ 544.510749][ T9205] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.529074][ T9205] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.542455][ T9205] bridge_slave_0: default FDB implementation only supports local addresses [ 545.360546][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1227'. [ 546.538066][ T9240] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.603649][ T9240] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 546.642083][ T9240] bridge_slave_0: default FDB implementation only supports local addresses [ 546.733115][ T9246] input: syz0 as /devices/virtual/input/input29 [ 549.187490][ T9270] loop9: detected capacity change from 0 to 8 [ 549.346748][ T9270] SQUASHFS error: xz decompression failed, data probably corrupt [ 549.354925][ T9270] SQUASHFS error: Failed to read block 0xa8: -5 [ 549.375077][ T9270] SQUASHFS error: xz decompression failed, data probably corrupt [ 549.383252][ T9270] SQUASHFS error: Failed to read block 0xa8: -5 [ 549.391962][ T26] audit: type=1800 audit(1746829589.567:244): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1241" name="file0" dev="loop9" ino=3 res=0 errno=0 [ 549.766070][ T9278] loop4: detected capacity change from 0 to 32768 [ 549.834828][ T9278] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 549.843430][ T9278] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 549.856390][ T9278] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 549.866370][ T4209] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 549.879940][ T4209] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 550.165236][ T4209] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 285ms [ 550.179272][ T4209] gfs2: fsid=syz:syz.0: jid=0: Done [ 550.190482][ T9278] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 551.080897][ T9278] gfs2: fsid=syz:syz.0: found 1 quota changes [ 551.120325][ T9278] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 551.130734][ T9278] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 551.156527][ T9278] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 551.171454][ T9278] CPU: 0 PID: 9278 Comm: syz.4.1244 Not tainted 5.15.182-syzkaller #0 [ 551.179645][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 551.189816][ T9278] Call Trace: [ 551.193130][ T9278] [ 551.196085][ T9278] dump_stack_lvl+0x168/0x230 [ 551.200803][ T9278] ? show_regs_print_info+0x20/0x20 [ 551.207010][ T9278] ? load_image+0x3b0/0x3b0 [ 551.211833][ T9278] ? __lock_acquire+0x7c60/0x7c60 [ 551.217003][ T9278] ? do_raw_spin_unlock+0x11d/0x230 [ 551.222376][ T9278] gfs2_assert_warn_i+0x18f/0x2c0 [ 551.227749][ T9278] gfs2_quota_cleanup+0x4b4/0x6a0 [ 551.232826][ T9278] gfs2_make_fs_ro+0x491/0x5d0 [ 551.237622][ T9278] ? gfs2_dinode_out+0xb00/0xb00 [ 551.243028][ T9278] ? _raw_spin_unlock+0x24/0x40 [ 551.248030][ T9278] ? gfs2_glock_nq+0xcb0/0x1550 [ 551.252973][ T9278] gfs2_reconfigure+0x7fc/0xcd0 [ 551.257890][ T9278] ? gfs2_get_tree+0x1e0/0x1e0 [ 551.263008][ T9278] ? do_raw_spin_unlock+0x11d/0x230 [ 551.268256][ T9278] ? gfs2_freeze_lock+0x52/0xc0 [ 551.273139][ T9278] ? sb_prepare_remount_readonly+0x511/0x540 [ 551.279151][ T9278] ? reconfigure_super+0x641/0x880 [ 551.284395][ T9278] reconfigure_super+0x219/0x880 [ 551.289394][ T9278] path_mount+0xd3e/0x1020 [ 551.293889][ T9278] ? user_path_at_empty+0x13e/0x190 [ 551.299128][ T9278] __se_sys_mount+0x2d6/0x3c0 [ 551.303941][ T9278] ? __x64_sys_mount+0xc0/0xc0 [ 551.308825][ T9278] ? lockdep_hardirqs_on+0x94/0x140 [ 551.314050][ T9278] ? __x64_sys_mount+0x1c/0xc0 [ 551.318846][ T9278] do_syscall_64+0x4c/0xa0 [ 551.323310][ T9278] ? clear_bhb_loop+0x15/0x70 [ 551.328005][ T9278] ? clear_bhb_loop+0x15/0x70 [ 551.332707][ T9278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 551.338630][ T9278] RIP: 0033:0x7fa3526f3969 [ 551.343153][ T9278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.362870][ T9278] RSP: 002b:00007fa35055b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 551.371317][ T9278] RAX: ffffffffffffffda RBX: 00007fa35291afa0 RCX: 00007fa3526f3969 [ 551.379312][ T9278] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 551.387394][ T9278] RBP: 00007fa352775ab1 R08: 0000000000000000 R09: 0000000000000000 [ 551.395385][ T9278] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 551.403394][ T9278] R13: 0000000000000000 R14: 00007fa35291afa0 R15: 00007ffe4a3930c8 [ 551.411466][ T9278] [ 553.334150][ T1091] block nbd9: Attempted send on invalid socket [ 553.343080][ T1091] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 553.362644][ T9291] XFS (nbd9): SB validate failed with error -5. [ 553.799961][ T9304] rdma_rxe: rxe_register_device failed with error -23 [ 553.846796][ T9304] rdma_rxe: failed to add syz_tun [ 554.620959][ T9322] input: syz0 as /devices/virtual/input/input30 [ 555.042662][ T9328] binder: 9325:9328 ioctl 4018620d 0 returned -22 [ 558.964754][ T9344] loop6: detected capacity change from 0 to 8 [ 559.041142][ T9344] SQUASHFS error: xz decompression failed, data probably corrupt [ 559.049333][ T9344] SQUASHFS error: Failed to read block 0xa8: -5 [ 559.056629][ T9344] SQUASHFS error: xz decompression failed, data probably corrupt [ 559.064506][ T9344] SQUASHFS error: Failed to read block 0xa8: -5 [ 559.282594][ T26] audit: type=1800 audit(1746829599.247:245): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1259" name="file0" dev="loop6" ino=3 res=0 errno=0 [ 559.777969][ T9351] loop6: detected capacity change from 0 to 32768 [ 559.830303][ T9351] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 559.838563][ T9351] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 559.858655][ T9351] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 559.873033][ T8684] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 559.879849][ T8684] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 559.996534][ T8684] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 560.022323][ T8684] gfs2: fsid=syz:syz.0: jid=0: Done [ 560.033456][ T9351] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 560.500851][ T9351] gfs2: fsid=syz:syz.0: found 1 quota changes [ 560.538341][ T9351] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 560.548193][ T9351] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 560.598349][ T9351] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 560.612628][ T9351] CPU: 0 PID: 9351 Comm: syz.6.1261 Not tainted 5.15.182-syzkaller #0 [ 560.620815][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 560.630893][ T9351] Call Trace: [ 560.634199][ T9351] [ 560.637151][ T9351] dump_stack_lvl+0x168/0x230 [ 560.641858][ T9351] ? show_regs_print_info+0x20/0x20 [ 560.647079][ T9351] ? load_image+0x3b0/0x3b0 [ 560.651596][ T9351] ? __lock_acquire+0x7c60/0x7c60 [ 560.656633][ T9351] ? do_raw_spin_unlock+0x11d/0x230 [ 560.661843][ T9351] gfs2_assert_warn_i+0x18f/0x2c0 [ 560.666892][ T9351] gfs2_quota_cleanup+0x4b4/0x6a0 [ 560.672369][ T9351] gfs2_make_fs_ro+0x491/0x5d0 [ 560.677149][ T9351] ? gfs2_dinode_out+0xb00/0xb00 [ 560.682101][ T9351] ? _raw_spin_unlock+0x24/0x40 [ 560.686957][ T9351] ? gfs2_glock_nq+0xcb0/0x1550 [ 560.691829][ T9351] gfs2_reconfigure+0x7fc/0xcd0 [ 560.696696][ T9351] ? gfs2_get_tree+0x1e0/0x1e0 [ 560.701461][ T9351] ? do_raw_spin_unlock+0x11d/0x230 [ 560.706666][ T9351] ? gfs2_freeze_lock+0x52/0xc0 [ 560.711524][ T9351] ? sb_prepare_remount_readonly+0x511/0x540 [ 560.717513][ T9351] ? reconfigure_super+0x641/0x880 [ 560.722637][ T9351] reconfigure_super+0x219/0x880 [ 560.727587][ T9351] path_mount+0xd3e/0x1020 [ 560.732013][ T9351] ? user_path_at_empty+0x13e/0x190 [ 560.737242][ T9351] __se_sys_mount+0x2d6/0x3c0 [ 560.741936][ T9351] ? __x64_sys_mount+0xc0/0xc0 [ 560.746722][ T9351] ? lockdep_hardirqs_on+0x94/0x140 [ 560.751935][ T9351] ? __x64_sys_mount+0x1c/0xc0 [ 560.756808][ T9351] do_syscall_64+0x4c/0xa0 [ 560.761257][ T9351] ? clear_bhb_loop+0x15/0x70 [ 560.765957][ T9351] ? clear_bhb_loop+0x15/0x70 [ 560.770752][ T9351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 560.776657][ T9351] RIP: 0033:0x7f7d46b31969 [ 560.781079][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.800797][ T9351] RSP: 002b:00007f7d44999038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 560.809226][ T9351] RAX: ffffffffffffffda RBX: 00007f7d46d58fa0 RCX: 00007f7d46b31969 [ 560.817199][ T9351] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 560.825172][ T9351] RBP: 00007f7d46bb3ab1 R08: 0000000000000000 R09: 0000000000000000 [ 560.833232][ T9351] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 560.841207][ T9351] R13: 0000000000000000 R14: 00007f7d46d58fa0 R15: 00007fff5de6ea68 [ 560.849197][ T9351] [ 560.931972][ T8684] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 561.386472][ T8684] usb 5-1: Using ep0 maxpacket: 8 [ 561.542220][ T8684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.556933][ T8684] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.599828][ T9375] netlink: 'syz.6.1268': attribute type 10 has an invalid length. [ 561.615290][ T9375] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1268'. [ 561.857483][ T8684] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 561.903732][ T8684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.875007][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.894896][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.248485][ T9385] loop1: detected capacity change from 0 to 8 [ 564.284233][ T8684] usb 5-1: Product: syz [ 564.288464][ T8684] usb 5-1: Manufacturer: syz [ 564.293148][ T8684] usb 5-1: SerialNumber: syz [ 564.320713][ T9385] SQUASHFS error: xz decompression failed, data probably corrupt [ 564.328647][ T9385] SQUASHFS error: Failed to read block 0xa8: -5 [ 564.336992][ T9385] SQUASHFS error: xz decompression failed, data probably corrupt [ 564.344877][ T9385] SQUASHFS error: Failed to read block 0xa8: -5 [ 564.351430][ T26] audit: type=1800 audit(1746829604.527:246): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1271" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 564.386374][ T8684] usb 5-1: can't set config #1, error -71 [ 564.393771][ T8684] usb 5-1: USB disconnect, device number 4 [ 566.382647][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1277'. [ 566.417331][ T9415] netlink: 'syz.1.1279': attribute type 10 has an invalid length. [ 566.441511][ T9415] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1279'. [ 569.123139][ T9437] loop4: detected capacity change from 0 to 8 [ 569.197415][ T9437] SQUASHFS error: xz decompression failed, data probably corrupt [ 569.205287][ T9437] SQUASHFS error: Failed to read block 0xa8: -5 [ 569.212064][ T9437] SQUASHFS error: xz decompression failed, data probably corrupt [ 569.219867][ T9437] SQUASHFS error: Failed to read block 0xa8: -5 [ 569.226732][ T26] audit: type=1800 audit(1746829609.407:247): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1285" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 569.586914][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1286'. [ 570.352799][ T9452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.641707][ T9452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.835545][ T9452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.172456][ T9452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.482709][ T9458] input: syz0 as /devices/virtual/input/input31 [ 571.577031][ T9452] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.614586][ T9452] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.658454][ T9452] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.680436][ T9452] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.849449][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 573.368422][ T9487] loop4: detected capacity change from 0 to 128 [ 573.494320][ T9487] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 573.505229][ T9487] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 573.565727][ T26] audit: type=1800 audit(1746829613.747:248): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1301" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 573.614737][ T9487] fscrypt: loop4: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 573.829438][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 574.262267][ T9499] lo speed is unknown, defaulting to 1000 [ 575.421287][ T21] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 575.715895][ T21] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 575.726342][ T21] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 575.745328][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.792423][ T9492] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 576.103160][ T8684] usb 2-1: USB disconnect, device number 7 [ 576.133132][ T9533] loop6: detected capacity change from 0 to 128 [ 576.205039][ T9533] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 576.272665][ T9533] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 576.357431][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 576.390048][ T26] audit: type=1800 audit(1746829616.567:249): pid=9533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1316" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 576.440937][ T9533] fscrypt: loop6: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 577.188888][ T9549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1317'. [ 580.742941][ T9573] PKCS8: Unsupported PKCS#8 version [ 584.254454][ T9600] loop6: detected capacity change from 0 to 8 [ 584.307014][ T9600] SQUASHFS error: xz decompression failed, data probably corrupt [ 584.315190][ T9600] SQUASHFS error: Failed to read block 0xa8: -5 [ 584.321970][ T9600] SQUASHFS error: xz decompression failed, data probably corrupt [ 584.329753][ T9600] SQUASHFS error: Failed to read block 0xa8: -5 [ 584.337001][ T26] audit: type=1800 audit(1746829624.517:250): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1336" name="file0" dev="loop6" ino=3 res=0 errno=0 [ 585.864452][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 588.387116][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 588.531948][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 588.635733][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.026346][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.066900][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.080389][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.097559][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.117208][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.142198][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.166539][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.195146][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.215337][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.258580][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.288978][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.319391][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.342995][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.364486][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.392898][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.424829][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.441959][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.470211][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.622000][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.629813][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.638096][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 589.646232][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.370811][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.379822][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.387674][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.395566][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.403542][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.411388][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.419301][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.452808][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.460601][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.478875][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.497688][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.508828][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.517028][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.525395][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.533792][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.541685][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.550020][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.558924][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: unknown main item tag 0x0 [ 590.584279][ T7965] hid-generic 0000:007F:FFFFFFFE.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 590.745453][ T9643] loop1: detected capacity change from 0 to 32768 [ 590.798836][ T9643] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 590.807149][ T9643] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 590.819136][ T9643] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 590.828163][ T5921] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 590.838419][ T5921] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 591.120155][ T5921] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 281ms [ 591.128477][ T5921] gfs2: fsid=syz:syz.0: jid=0: Done [ 591.138703][ T9643] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 591.168872][ T9657] loop6: detected capacity change from 0 to 8 [ 592.064381][ T9657] SQUASHFS error: xz decompression failed, data probably corrupt [ 592.072395][ T9657] SQUASHFS error: Failed to read block 0xa8: -5 [ 592.079109][ T9657] SQUASHFS error: xz decompression failed, data probably corrupt [ 592.087021][ T9657] SQUASHFS error: Failed to read block 0xa8: -5 [ 592.093793][ T26] audit: type=1800 audit(1746829632.277:251): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1351" name="file0" dev="loop6" ino=3 res=0 errno=0 [ 592.303738][ T9643] gfs2: fsid=syz:syz.0: found 1 quota changes [ 592.333014][ T9643] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 592.342746][ T9643] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 592.422789][ T9643] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 592.437331][ T9643] CPU: 1 PID: 9643 Comm: syz.1.1348 Not tainted 5.15.182-syzkaller #0 [ 592.445608][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 592.455772][ T9643] Call Trace: [ 592.459142][ T9643] [ 592.462070][ T9643] dump_stack_lvl+0x168/0x230 [ 592.466763][ T9643] ? show_regs_print_info+0x20/0x20 [ 592.471967][ T9643] ? load_image+0x3b0/0x3b0 [ 592.476472][ T9643] ? __lock_acquire+0x7c60/0x7c60 [ 592.481494][ T9643] ? do_raw_spin_unlock+0x11d/0x230 [ 592.486701][ T9643] gfs2_assert_warn_i+0x18f/0x2c0 [ 592.491729][ T9643] gfs2_quota_cleanup+0x4b4/0x6a0 [ 592.496770][ T9643] gfs2_make_fs_ro+0x491/0x5d0 [ 592.501581][ T9643] ? gfs2_dinode_out+0xb00/0xb00 [ 592.506517][ T9643] ? _raw_spin_unlock+0x24/0x40 [ 592.511363][ T9643] ? gfs2_glock_nq+0xcb0/0x1550 [ 592.516244][ T9643] gfs2_reconfigure+0x7fc/0xcd0 [ 592.521101][ T9643] ? gfs2_get_tree+0x1e0/0x1e0 [ 592.525944][ T9643] ? do_raw_spin_unlock+0x11d/0x230 [ 592.531148][ T9643] ? gfs2_freeze_lock+0x52/0xc0 [ 592.536009][ T9643] ? sb_prepare_remount_readonly+0x511/0x540 [ 592.542077][ T9643] ? reconfigure_super+0x641/0x880 [ 592.547339][ T9643] reconfigure_super+0x219/0x880 [ 592.552288][ T9643] path_mount+0xd3e/0x1020 [ 592.556707][ T9643] ? user_path_at_empty+0x13e/0x190 [ 592.561909][ T9643] __se_sys_mount+0x2d6/0x3c0 [ 592.566602][ T9643] ? __x64_sys_mount+0xc0/0xc0 [ 592.571383][ T9643] ? lockdep_hardirqs_on+0x94/0x140 [ 592.576585][ T9643] ? __x64_sys_mount+0x1c/0xc0 [ 592.581344][ T9643] do_syscall_64+0x4c/0xa0 [ 592.585755][ T9643] ? clear_bhb_loop+0x15/0x70 [ 592.590529][ T9643] ? clear_bhb_loop+0x15/0x70 [ 592.595315][ T9643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.601221][ T9643] RIP: 0033:0x7fc235490969 [ 592.605643][ T9643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.625352][ T9643] RSP: 002b:00007fc2332f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 592.633775][ T9643] RAX: ffffffffffffffda RBX: 00007fc2356b7fa0 RCX: 00007fc235490969 [ 592.641765][ T9643] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 592.649754][ T9643] RBP: 00007fc235512ab1 R08: 0000000000000000 R09: 0000000000000000 [ 592.657752][ T9643] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 592.665734][ T9643] R13: 0000000000000000 R14: 00007fc2356b7fa0 R15: 00007ffc240179b8 [ 592.673874][ T9643] [ 594.626873][ T9677] 9pnet_virtio: no channels available for device syz [ 600.301244][ T9709] netlink: 'syz.6.1366': attribute type 10 has an invalid length. [ 600.321941][ T9709] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1366'. [ 606.139251][ T9783] binder: 9781:9783 unknown command 1074553619 [ 606.184019][ T9783] binder: 9781:9783 ioctl c0306201 200000000540 returned -22 [ 607.302166][ T9788] sctp: failed to load transform for md5: -2 [ 607.633027][ T9803] input: syz1 as /devices/virtual/input/input32 [ 609.161990][ T9817] tmpfs: Unknown parameter 'usrquota' [ 609.897425][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1403'. [ 609.933615][ T8684] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 610.159847][ T9839] loop1: detected capacity change from 0 to 2048 [ 610.222354][ T9839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.263035][ T8684] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 611.199646][ T9845] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1407'. [ 611.408980][ T8684] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.418184][ T8684] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.429517][ T8684] usb 9-1: config 0 interface 0 has no altsetting 0 [ 611.842153][ T8684] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.852957][ T8684] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.864274][ T8684] usb 9-1: config 0 interface 0 has no altsetting 0 [ 611.962021][ T8684] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.975357][ T8684] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 612.015354][ T8684] usb 9-1: config 0 interface 0 has no altsetting 0 [ 612.932036][ T8684] usb 9-1: unable to read config index 3 descriptor/start: -71 [ 612.939682][ T8684] usb 9-1: can't read configurations, error -71 [ 613.204583][ T4209] hid (null): report_id 44392 is invalid [ 613.244018][ T4209] hid-generic 000C:0006:0101.0018: unknown main item tag 0x4 [ 613.305913][ T4209] hid-generic 000C:0006:0101.0018: report_id 44392 is invalid [ 613.484612][ T4209] hid-generic 000C:0006:0101.0018: item 0 2 1 8 parsing failed [ 613.604271][ T4209] hid-generic: probe of 000C:0006:0101.0018 failed with error -22 [ 616.456464][ T9896] loop1: detected capacity change from 0 to 2048 [ 616.528610][ T9896] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.233422][ T9904] lo speed is unknown, defaulting to 1000 [ 618.080255][ T7974] hid (null): report_id 44392 is invalid [ 618.721135][ T7974] hid-generic 000C:0006:0101.0019: unknown main item tag 0x4 [ 618.729068][ T7974] hid-generic 000C:0006:0101.0019: report_id 44392 is invalid [ 618.736977][ T7974] hid-generic 000C:0006:0101.0019: item 0 2 1 8 parsing failed [ 618.751980][ T7974] hid-generic: probe of 000C:0006:0101.0019 failed with error -22 [ 619.371794][ T9928] netlink: 'syz.1.1431': attribute type 10 has an invalid length. [ 620.815154][ T9928] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 622.142200][ T9950] loop8: detected capacity change from 0 to 2048 [ 622.760240][ T4639] hid (null): report_id 44392 is invalid [ 622.784542][ T4639] hid-generic 000C:0006:0101.001A: unknown main item tag 0x4 [ 622.792812][ T4639] hid-generic 000C:0006:0101.001A: report_id 44392 is invalid [ 622.806193][ T4639] hid-generic 000C:0006:0101.001A: item 0 2 1 8 parsing failed [ 622.975082][ T9957] device pim6reg1 entered promiscuous mode [ 622.984300][ T4639] hid-generic: probe of 000C:0006:0101.001A failed with error -22 [ 623.002544][ T9962] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1440'. [ 623.034734][ T9950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.100605][ T9962] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1440'. [ 623.111195][ T9962] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1440'. [ 624.865250][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.871578][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.300903][T10009] device pim6reg1 entered promiscuous mode [ 627.388743][ T5921] hid (null): report_id 44392 is invalid [ 627.413966][ T5921] hid-generic 000C:0006:0101.001B: unknown main item tag 0x4 [ 627.441361][ T5921] hid-generic 000C:0006:0101.001B: report_id 44392 is invalid [ 627.468594][ T5921] hid-generic 000C:0006:0101.001B: item 0 2 1 8 parsing failed [ 627.497938][ T5921] hid-generic: probe of 000C:0006:0101.001B failed with error -22 [ 628.147658][T10016] loop6: detected capacity change from 0 to 2048 [ 628.199357][T10016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.783578][T10042] device pim6reg1 entered promiscuous mode [ 629.807473][ T4639] hid (null): report_id 44392 is invalid [ 630.124135][ T4639] hid-generic 000C:0006:0101.001C: unknown main item tag 0x4 [ 630.413237][ T4639] hid-generic 000C:0006:0101.001C: report_id 44392 is invalid [ 630.430245][ T4639] hid-generic 000C:0006:0101.001C: item 0 2 1 8 parsing failed [ 630.454437][ T4639] hid-generic: probe of 000C:0006:0101.001C failed with error -22 [ 630.685878][T10047] input: syz1 as /devices/virtual/input/input34 [ 634.060746][T10074] device pim6reg1 entered promiscuous mode [ 638.750536][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1488'. [ 638.980696][T10120] device pim6reg1 entered promiscuous mode [ 639.417440][T10135] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 639.424889][T10135] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 639.427904][T10139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.446141][T10135] vhci_hcd vhci_hcd.0: Device attached [ 639.463367][T10139] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 639.470011][T10139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 639.478977][T10139] vhci_hcd vhci_hcd.0: Device attached [ 639.543721][T10135] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(11) [ 639.550382][T10135] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 639.558041][T10135] vhci_hcd vhci_hcd.0: Device attached [ 639.588976][T10135] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.598549][T10135] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.620889][T10139] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 639.627649][T10139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 639.639986][T10139] vhci_hcd vhci_hcd.0: Device attached [ 639.651956][T10140] vhci_hcd: connection closed [ 639.652141][T10136] vhci_hcd: connection closed [ 639.687699][ T4440] vhci_hcd: stop threads [ 639.707220][ T7974] vhci_hcd: vhci_device speed not set [ 639.714024][ T4440] vhci_hcd: release socket [ 639.752070][ T4440] vhci_hcd: disconnect device [ 639.777375][T10142] vhci_hcd: connection closed [ 639.814168][ T7974] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 639.871489][T10145] vhci_hcd: connection closed [ 639.876289][ T4440] vhci_hcd: stop threads [ 639.981394][ T4440] vhci_hcd: release socket [ 640.026979][ T4440] vhci_hcd: disconnect device [ 640.332753][ T4440] vhci_hcd: stop threads [ 640.434304][T10152] loop4: detected capacity change from 0 to 32768 [ 640.498749][ T4440] vhci_hcd: release socket [ 640.519030][T10152] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 640.527447][T10152] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 640.537971][T10152] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 640.553538][ T4209] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 640.571228][ T4440] vhci_hcd: disconnect device [ 640.622374][ T4440] vhci_hcd: stop threads [ 640.626906][ T4440] vhci_hcd: release socket [ 640.647773][ T4440] vhci_hcd: disconnect device [ 640.742256][ T4209] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 641.878612][ T4209] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1136ms [ 642.022447][ T4209] gfs2: fsid=syz:syz.0: jid=0: Done [ 642.042001][T10152] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 642.873439][T10178] device pim6reg1 entered promiscuous mode [ 642.905602][T10152] gfs2: fsid=syz:syz.0: found 1 quota changes [ 643.317707][T10180] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 643.377684][T10152] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 643.387611][T10152] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 643.414215][T10180] CPU: 0 PID: 10180 Comm: syz.4.1498 Not tainted 5.15.182-syzkaller #0 [ 643.422522][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 643.432604][T10180] Call Trace: [ 643.435904][T10180] [ 643.438845][T10180] dump_stack_lvl+0x168/0x230 [ 643.443563][T10180] ? show_regs_print_info+0x20/0x20 [ 643.448794][T10180] ? load_image+0x3b0/0x3b0 [ 643.453325][T10180] ? __lock_acquire+0x7c60/0x7c60 [ 643.458380][T10180] ? do_raw_spin_unlock+0x11d/0x230 [ 643.461407][T10185] lo speed is unknown, defaulting to 1000 [ 643.463607][T10180] gfs2_assert_warn_i+0x18f/0x2c0 [ 643.469434][T10185] lo speed is unknown, defaulting to 1000 [ 643.474391][T10180] gfs2_quota_cleanup+0x4b4/0x6a0 [ 643.474428][T10180] gfs2_make_fs_ro+0x491/0x5d0 [ 643.474453][T10180] ? gfs2_dinode_out+0xb00/0xb00 [ 643.474474][T10180] ? _raw_spin_unlock+0x24/0x40 [ 643.474497][T10180] ? gfs2_glock_nq+0xcb0/0x1550 [ 643.474540][T10180] gfs2_reconfigure+0x7fc/0xcd0 [ 643.474575][T10180] ? gfs2_get_tree+0x1e0/0x1e0 [ 643.474604][T10180] ? do_raw_spin_unlock+0x11d/0x230 [ 643.474629][T10180] ? gfs2_freeze_lock+0x52/0xc0 [ 643.510232][T10185] lo speed is unknown, defaulting to 1000 [ 643.514318][T10180] ? sb_prepare_remount_readonly+0x511/0x540 [ 643.514357][T10180] ? reconfigure_super+0x641/0x880 [ 643.514386][T10180] reconfigure_super+0x219/0x880 [ 643.546168][T10180] path_mount+0xd3e/0x1020 [ 643.550622][T10180] ? user_path_at_empty+0x13e/0x190 [ 643.555847][T10180] __se_sys_mount+0x2d6/0x3c0 [ 643.556861][T10185] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 643.560553][T10180] ? __x64_sys_mount+0xc0/0xc0 [ 643.572417][T10180] ? lockdep_hardirqs_on+0x94/0x140 [ 643.577635][T10180] ? __x64_sys_mount+0x1c/0xc0 [ 643.582423][T10180] do_syscall_64+0x4c/0xa0 [ 643.586861][T10180] ? clear_bhb_loop+0x15/0x70 [ 643.591555][T10180] ? clear_bhb_loop+0x15/0x70 [ 643.596255][T10180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 643.602167][T10180] RIP: 0033:0x7fa3526f3969 [ 643.606601][T10180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.626229][T10180] RSP: 002b:00007fa35053a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 643.634671][T10180] RAX: ffffffffffffffda RBX: 00007fa35291b080 RCX: 00007fa3526f3969 [ 643.642660][T10180] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 643.650652][T10180] RBP: 00007fa352775ab1 R08: 0000000000000000 R09: 0000000000000000 [ 643.658644][T10180] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 643.666715][T10180] R13: 0000000000000001 R14: 00007fa35291b080 R15: 00007ffe4a3930c8 [ 643.674728][T10180] [ 643.681917][T10185] lo speed is unknown, defaulting to 1000 [ 643.691569][T10185] lo speed is unknown, defaulting to 1000 [ 643.713503][T10185] lo speed is unknown, defaulting to 1000 [ 643.720249][T10185] lo speed is unknown, defaulting to 1000 [ 643.744898][T10185] lo speed is unknown, defaulting to 1000 [ 644.967548][T10199] 9pnet_virtio: no channels available for device syz [ 645.063249][ T7974] vhci_hcd: vhci_device speed not set [ 648.358272][T10231] 9pnet_virtio: no channels available for device syz [ 651.546220][T10255] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1528'. [ 651.863398][T10255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.915133][T10255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.940271][T10255] bond0 (unregistering): Released all slaves [ 652.923266][T10271] overlayfs: failed to resolve './file1': -2 [ 653.348628][T10283] ubi: mtd0 is already attached to ubi31 [ 654.394926][T10282] input: syz0 as /devices/virtual/input/input42 [ 654.512730][T10294] ubi: mtd0 is already attached to ubi31 [ 655.260745][ T8684] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 655.625419][T10298] loop4: detected capacity change from 0 to 32768 [ 655.680424][T10298] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 655.688708][T10298] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 655.699492][T10298] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 655.716096][ T7974] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 655.725566][ T7974] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 655.891430][ T7974] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 165ms [ 655.899463][ T8684] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.936461][ T7974] gfs2: fsid=syz:syz.0: jid=0: Done [ 655.941796][T10298] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 655.953950][ T8684] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 656.021390][ T8684] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.032330][ T8684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.085098][T10289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 656.284640][T10298] gfs2: fsid=syz:syz.0: found 1 quota changes [ 656.360327][T10298] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 656.370521][T10298] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 656.392522][T10298] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 656.406756][T10298] CPU: 0 PID: 10298 Comm: syz.4.1541 Not tainted 5.15.182-syzkaller #0 [ 656.415025][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 656.425100][T10298] Call Trace: [ 656.428405][T10298] [ 656.431356][T10298] dump_stack_lvl+0x168/0x230 [ 656.436072][T10298] ? show_regs_print_info+0x20/0x20 [ 656.441314][T10298] ? load_image+0x3b0/0x3b0 [ 656.445842][T10298] ? __lock_acquire+0x7c60/0x7c60 [ 656.450888][T10298] ? do_raw_spin_unlock+0x11d/0x230 [ 656.456109][T10298] gfs2_assert_warn_i+0x18f/0x2c0 [ 656.461366][T10298] gfs2_quota_cleanup+0x4b4/0x6a0 [ 656.466416][T10298] gfs2_make_fs_ro+0x491/0x5d0 [ 656.471201][T10298] ? gfs2_dinode_out+0xb00/0xb00 [ 656.476149][T10298] ? _raw_spin_unlock+0x24/0x40 [ 656.481022][T10298] ? gfs2_glock_nq+0xcb0/0x1550 [ 656.485899][T10298] gfs2_reconfigure+0x7fc/0xcd0 [ 656.490775][T10298] ? gfs2_get_tree+0x1e0/0x1e0 [ 656.495549][T10298] ? do_raw_spin_unlock+0x11d/0x230 [ 656.500756][T10298] ? gfs2_freeze_lock+0x52/0xc0 [ 656.505608][T10298] ? sb_prepare_remount_readonly+0x511/0x540 [ 656.511595][T10298] ? reconfigure_super+0x641/0x880 [ 656.516809][T10298] reconfigure_super+0x219/0x880 [ 656.521759][T10298] path_mount+0xd3e/0x1020 [ 656.526188][T10298] ? user_path_at_empty+0x13e/0x190 [ 656.531402][T10298] __se_sys_mount+0x2d6/0x3c0 [ 656.536093][T10298] ? __x64_sys_mount+0xc0/0xc0 [ 656.540868][T10298] ? lockdep_hardirqs_on+0x94/0x140 [ 656.546071][T10298] ? __x64_sys_mount+0x1c/0xc0 [ 656.550844][T10298] do_syscall_64+0x4c/0xa0 [ 656.555265][T10298] ? clear_bhb_loop+0x15/0x70 [ 656.559943][T10298] ? clear_bhb_loop+0x15/0x70 [ 656.564619][T10298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 656.570519][T10298] RIP: 0033:0x7fa3526f3969 [ 656.574935][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.594546][T10298] RSP: 002b:00007fa35055b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 656.602965][T10298] RAX: ffffffffffffffda RBX: 00007fa35291afa0 RCX: 00007fa3526f3969 [ 656.610938][T10298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 656.618908][T10298] RBP: 00007fa352775ab1 R08: 0000000000000000 R09: 0000000000000000 [ 656.626887][T10298] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 656.634884][T10298] R13: 0000000000000000 R14: 00007fa35291afa0 R15: 00007ffe4a3930c8 [ 656.642972][T10298] [ 656.736441][ T4209] usb 7-1: USB disconnect, device number 7 [ 657.422339][T10329] ubi: mtd0 is already attached to ubi31 [ 658.239252][T10335] device pim6reg1 entered promiscuous mode [ 658.963373][T10349] ubi: mtd0 is already attached to ubi31 [ 659.426392][T10361] loop6: detected capacity change from 0 to 32768 [ 659.629270][T10361] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 659.637839][T10361] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 659.674814][T10361] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 659.683922][ T8684] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 659.690743][ T8684] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 659.820740][T10368] input: syz0 as /devices/virtual/input/input44 [ 659.917677][ T8684] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 226ms [ 659.945743][ T8684] gfs2: fsid=syz:syz.0: jid=0: Done [ 659.951053][T10361] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 660.222799][T10361] gfs2: fsid=syz:syz.0: found 1 quota changes [ 660.240394][T10361] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 660.250060][T10361] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 660.270168][T10361] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 660.284433][T10361] CPU: 0 PID: 10361 Comm: syz.6.1561 Not tainted 5.15.182-syzkaller #0 [ 660.292710][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 660.302795][T10361] Call Trace: [ 660.306186][T10361] [ 660.309136][T10361] dump_stack_lvl+0x168/0x230 [ 660.313858][T10361] ? show_regs_print_info+0x20/0x20 [ 660.319097][T10361] ? load_image+0x3b0/0x3b0 [ 660.323619][T10361] ? __lock_acquire+0x7c60/0x7c60 [ 660.328657][T10361] ? do_raw_spin_unlock+0x11d/0x230 [ 660.333874][T10361] gfs2_assert_warn_i+0x18f/0x2c0 [ 660.339164][T10361] gfs2_quota_cleanup+0x4b4/0x6a0 [ 660.344214][T10361] gfs2_make_fs_ro+0x491/0x5d0 [ 660.348997][T10361] ? gfs2_dinode_out+0xb00/0xb00 [ 660.353948][T10361] ? _raw_spin_unlock+0x24/0x40 [ 660.358813][T10361] ? gfs2_glock_nq+0xcb0/0x1550 [ 660.363689][T10361] gfs2_reconfigure+0x7fc/0xcd0 [ 660.368560][T10361] ? gfs2_get_tree+0x1e0/0x1e0 [ 660.373326][T10361] ? do_raw_spin_unlock+0x11d/0x230 [ 660.378534][T10361] ? gfs2_freeze_lock+0x52/0xc0 [ 660.383389][T10361] ? sb_prepare_remount_readonly+0x511/0x540 [ 660.389381][T10361] ? reconfigure_super+0x641/0x880 [ 660.394504][T10361] reconfigure_super+0x219/0x880 [ 660.399456][T10361] path_mount+0xd3e/0x1020 [ 660.403890][T10361] ? user_path_at_empty+0x13e/0x190 [ 660.409099][T10361] __se_sys_mount+0x2d6/0x3c0 [ 660.413793][T10361] ? __x64_sys_mount+0xc0/0xc0 [ 660.418566][T10361] ? lockdep_hardirqs_on+0x94/0x140 [ 660.423773][T10361] ? __x64_sys_mount+0x1c/0xc0 [ 660.428554][T10361] do_syscall_64+0x4c/0xa0 [ 660.432979][T10361] ? clear_bhb_loop+0x15/0x70 [ 660.437657][T10361] ? clear_bhb_loop+0x15/0x70 [ 660.442336][T10361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.448237][T10361] RIP: 0033:0x7f7d46b31969 [ 660.452658][T10361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.472266][T10361] RSP: 002b:00007f7d44999038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 660.480687][T10361] RAX: ffffffffffffffda RBX: 00007f7d46d58fa0 RCX: 00007f7d46b31969 [ 660.488662][T10361] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 660.496636][T10361] RBP: 00007f7d46bb3ab1 R08: 0000000000000000 R09: 0000000000000000 [ 660.504604][T10361] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 660.512576][T10361] R13: 0000000000000000 R14: 00007f7d46d58fa0 R15: 00007fff5de6ea68 [ 660.520561][T10361] [ 662.178128][T10385] device pim6reg1 entered promiscuous mode [ 662.534813][T10394] ubi: mtd0 is already attached to ubi31 [ 663.351133][T10388] ODEBUG: Out of memory. ODEBUG disabled [ 663.896569][T10404] ubi: mtd0 is already attached to ubi31 [ 664.997404][T10415] loop9: detected capacity change from 0 to 32768 [ 665.717644][T10415] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 665.726076][T10415] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 665.763376][T10415] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 665.785178][ T5921] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 665.792284][ T5921] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 666.112746][ T5921] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 320ms [ 666.271284][ T5921] gfs2: fsid=syz:syz.0: jid=0: Done [ 666.354119][T10415] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 666.975389][T10431] device pim6reg1 entered promiscuous mode [ 667.216358][T10415] gfs2: fsid=syz:syz.0: found 1 quota changes [ 667.326685][T10415] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 667.336397][T10415] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 667.473223][T10439] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 667.599619][T10439] CPU: 1 PID: 10439 Comm: syz.9.1577 Not tainted 5.15.182-syzkaller #0 [ 667.607916][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 667.617984][T10439] Call Trace: [ 667.621283][T10439] [ 667.624222][T10439] dump_stack_lvl+0x168/0x230 [ 667.629016][T10439] ? show_regs_print_info+0x20/0x20 [ 667.634234][T10439] ? load_image+0x3b0/0x3b0 [ 667.638754][T10439] ? __lock_acquire+0x7c60/0x7c60 [ 667.643795][T10439] ? do_raw_spin_unlock+0x11d/0x230 [ 667.649058][T10439] gfs2_assert_warn_i+0x18f/0x2c0 [ 667.654109][T10439] gfs2_quota_cleanup+0x4b4/0x6a0 [ 667.659156][T10439] gfs2_make_fs_ro+0x491/0x5d0 [ 667.663941][T10439] ? gfs2_dinode_out+0xb00/0xb00 [ 667.668894][T10439] ? _raw_spin_unlock+0x24/0x40 [ 667.673763][T10439] ? gfs2_glock_nq+0xcb0/0x1550 [ 667.678651][T10439] gfs2_reconfigure+0x7fc/0xcd0 [ 667.683531][T10439] ? gfs2_get_tree+0x1e0/0x1e0 [ 667.688308][T10439] ? do_raw_spin_unlock+0x11d/0x230 [ 667.693549][T10439] ? gfs2_freeze_lock+0x52/0xc0 [ 667.698417][T10439] ? sb_prepare_remount_readonly+0x511/0x540 [ 667.704432][T10439] ? reconfigure_super+0x641/0x880 [ 667.709586][T10439] reconfigure_super+0x219/0x880 [ 667.714566][T10439] path_mount+0xd3e/0x1020 [ 667.719037][T10439] ? user_path_at_empty+0x13e/0x190 [ 667.724259][T10439] __se_sys_mount+0x2d6/0x3c0 [ 667.728960][T10439] ? __x64_sys_mount+0xc0/0xc0 [ 667.733744][T10439] ? lockdep_hardirqs_on+0x94/0x140 [ 667.738957][T10439] ? __x64_sys_mount+0x1c/0xc0 [ 667.743741][T10439] do_syscall_64+0x4c/0xa0 [ 667.748177][T10439] ? clear_bhb_loop+0x15/0x70 [ 667.752872][T10439] ? clear_bhb_loop+0x15/0x70 [ 667.757565][T10439] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 667.763476][T10439] RIP: 0033:0x7fa8fb9a3969 [ 667.767909][T10439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.787620][T10439] RSP: 002b:00007fa8f97ea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 667.796064][T10439] RAX: ffffffffffffffda RBX: 00007fa8fbbcb080 RCX: 00007fa8fb9a3969 [ 667.804061][T10439] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 667.812049][T10439] RBP: 00007fa8fba25ab1 R08: 0000000000000000 R09: 0000000000000000 [ 667.820040][T10439] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 667.828028][T10439] R13: 0000000000000001 R14: 00007fa8fbbcb080 R15: 00007ffd37564a68 [ 667.836040][T10439] [ 670.299759][T10477] device pim6reg1 entered promiscuous mode [ 672.369628][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 672.447811][T10496] ubi: mtd0 is already attached to ubi31 [ 673.470252][T10511] device pim6reg1 entered promiscuous mode [ 673.590991][T10513] fuse: Unknown parameter '' [ 674.347871][T10388] Set syz1 is full, maxelem 65536 reached [ 674.787929][T10532] lo speed is unknown, defaulting to 1000 [ 674.819808][T10532] lo speed is unknown, defaulting to 1000 [ 676.469361][T10556] input: syz0 as /devices/virtual/input/input46 [ 676.916728][T10563] binder: 10562:10563 ioctl c0306201 2000000007c0 returned -11 [ 680.508458][T10603] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1633'. [ 680.765942][T10612] device pim6reg1 entered promiscuous mode [ 682.204994][T10618] siw: device registration error -23 [ 684.513325][T10635] input: syz0 as /devices/virtual/input/input47 [ 685.627022][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.634137][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.897924][T10675] 9pnet: Insufficient options for proto=fd [ 689.414573][T10714] input: syz0 as /devices/virtual/input/input48 [ 691.431531][T10752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 691.440581][T10752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 691.448547][T10752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.550534][T10756] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 693.997049][T10791] device syzkaller1 entered promiscuous mode [ 694.343588][ T8684] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 694.352041][ T8684] Bluetooth: hci3: Injecting HCI hardware error event [ 694.364209][ T8441] Bluetooth: hci3: hardware error 0x00 [ 696.672100][T10835] input: syz0 as /devices/virtual/input/input49 [ 698.289440][T10845] loop9: detected capacity change from 0 to 32768 [ 698.347418][T10845] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 698.355642][T10845] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 698.385149][T10845] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 698.394631][ T8684] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 698.401408][ T8684] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 698.659824][ T8684] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 258ms [ 698.678249][ T8684] gfs2: fsid=syz:syz.0: jid=0: Done [ 698.691983][T10845] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 698.938296][T10845] gfs2: fsid=syz:syz.0: found 1 quota changes [ 698.995308][T10845] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 699.004964][T10845] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 699.059878][T10845] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 699.074162][T10845] CPU: 0 PID: 10845 Comm: syz.9.1706 Not tainted 5.15.182-syzkaller #0 [ 699.082438][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 699.092522][T10845] Call Trace: [ 699.095824][T10845] [ 699.098777][T10845] dump_stack_lvl+0x168/0x230 [ 699.103489][T10845] ? show_regs_print_info+0x20/0x20 [ 699.108716][T10845] ? load_image+0x3b0/0x3b0 [ 699.113231][T10845] ? __lock_acquire+0x7c60/0x7c60 [ 699.118266][T10845] ? do_raw_spin_unlock+0x11d/0x230 [ 699.123476][T10845] gfs2_assert_warn_i+0x18f/0x2c0 [ 699.128516][T10845] gfs2_quota_cleanup+0x4b4/0x6a0 [ 699.133697][T10845] gfs2_make_fs_ro+0x491/0x5d0 [ 699.138471][T10845] ? gfs2_dinode_out+0xb00/0xb00 [ 699.143412][T10845] ? _raw_spin_unlock+0x24/0x40 [ 699.148308][T10845] ? gfs2_glock_nq+0xcb0/0x1550 [ 699.153181][T10845] gfs2_reconfigure+0x7fc/0xcd0 [ 699.158045][T10845] ? gfs2_get_tree+0x1e0/0x1e0 [ 699.162811][T10845] ? do_raw_spin_unlock+0x11d/0x230 [ 699.168015][T10845] ? gfs2_freeze_lock+0x52/0xc0 [ 699.172875][T10845] ? sb_prepare_remount_readonly+0x511/0x540 [ 699.178859][T10845] ? reconfigure_super+0x641/0x880 [ 699.183974][T10845] reconfigure_super+0x219/0x880 [ 699.188923][T10845] path_mount+0xd3e/0x1020 [ 699.193355][T10845] ? user_path_at_empty+0x13e/0x190 [ 699.198559][T10845] __se_sys_mount+0x2d6/0x3c0 [ 699.203241][T10845] ? __x64_sys_mount+0xc0/0xc0 [ 699.208019][T10845] ? lockdep_hardirqs_on+0x94/0x140 [ 699.213337][T10845] ? __x64_sys_mount+0x1c/0xc0 [ 699.218239][T10845] do_syscall_64+0x4c/0xa0 [ 699.222668][T10845] ? clear_bhb_loop+0x15/0x70 [ 699.227353][T10845] ? clear_bhb_loop+0x15/0x70 [ 699.232044][T10845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 699.237948][T10845] RIP: 0033:0x7fa8fb9a3969 [ 699.242378][T10845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.262075][T10845] RSP: 002b:00007fa8f980b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 699.270491][T10845] RAX: ffffffffffffffda RBX: 00007fa8fbbcafa0 RCX: 00007fa8fb9a3969 [ 699.278462][T10845] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 699.286456][T10845] RBP: 00007fa8fba25ab1 R08: 0000000000000000 R09: 0000000000000000 [ 699.294433][T10845] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 699.302403][T10845] R13: 0000000000000000 R14: 00007fa8fbbcafa0 R15: 00007ffd37564a68 [ 699.310388][T10845] [ 699.678757][T10863] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.728683][ T4176] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 701.250827][T10881] bridge0: port 3(netdevsim0) entered blocking state [ 701.258437][T10881] bridge0: port 3(netdevsim0) entered disabled state [ 701.293329][T10884] input: syz0 as /devices/virtual/input/input50 [ 701.320484][T10881] device netdevsim0 entered promiscuous mode [ 701.334750][T10881] bridge0: port 3(netdevsim0) entered blocking state [ 701.342028][T10881] bridge0: port 3(netdevsim0) entered forwarding state [ 701.642024][T10894] loop1: detected capacity change from 0 to 32768 [ 701.664802][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1717'. [ 701.764539][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1717'. [ 701.789888][T10894] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 701.798161][T10894] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 701.810451][T10894] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 701.819302][ T4639] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 701.836458][ T4639] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 702.278483][ T4639] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 442ms [ 702.762001][ T4639] gfs2: fsid=syz:syz.0: jid=0: Done [ 702.777848][T10894] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 702.986036][T10894] gfs2: fsid=syz:syz.0: found 1 quota changes [ 703.223779][T10894] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 703.233671][T10894] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 703.279383][T10894] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 703.293619][T10894] CPU: 0 PID: 10894 Comm: syz.1.1721 Not tainted 5.15.182-syzkaller #0 [ 703.301887][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 703.311967][T10894] Call Trace: [ 703.315271][T10894] [ 703.318220][T10894] dump_stack_lvl+0x168/0x230 [ 703.322934][T10894] ? show_regs_print_info+0x20/0x20 [ 703.328158][T10894] ? load_image+0x3b0/0x3b0 [ 703.332683][T10894] ? __lock_acquire+0x7c60/0x7c60 [ 703.337730][T10894] ? do_raw_spin_unlock+0x11d/0x230 [ 703.342954][T10894] gfs2_assert_warn_i+0x18f/0x2c0 [ 703.348010][T10894] gfs2_quota_cleanup+0x4b4/0x6a0 [ 703.353063][T10894] gfs2_make_fs_ro+0x491/0x5d0 [ 703.357847][T10894] ? gfs2_dinode_out+0xb00/0xb00 [ 703.362802][T10894] ? _raw_spin_unlock+0x24/0x40 [ 703.367676][T10894] ? gfs2_glock_nq+0xcb0/0x1550 [ 703.372574][T10894] gfs2_reconfigure+0x7fc/0xcd0 [ 703.377459][T10894] ? gfs2_get_tree+0x1e0/0x1e0 [ 703.382250][T10894] ? do_raw_spin_unlock+0x11d/0x230 [ 703.387572][T10894] ? gfs2_freeze_lock+0x52/0xc0 [ 703.392453][T10894] ? sb_prepare_remount_readonly+0x511/0x540 [ 703.398464][T10894] ? reconfigure_super+0x641/0x880 [ 703.403609][T10894] reconfigure_super+0x219/0x880 [ 703.408583][T10894] path_mount+0xd3e/0x1020 [ 703.413035][T10894] ? user_path_at_empty+0x13e/0x190 [ 703.418264][T10894] __se_sys_mount+0x2d6/0x3c0 [ 703.422985][T10894] ? __x64_sys_mount+0xc0/0xc0 [ 703.427780][T10894] ? lockdep_hardirqs_on+0x94/0x140 [ 703.433066][T10894] ? __x64_sys_mount+0x1c/0xc0 [ 703.433661][T10915] siw: device registration error -23 [ 703.437860][T10894] do_syscall_64+0x4c/0xa0 [ 703.437889][T10894] ? clear_bhb_loop+0x15/0x70 [ 703.437912][T10894] ? clear_bhb_loop+0x15/0x70 [ 703.457044][T10894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 703.462953][T10894] RIP: 0033:0x7fc235490969 [ 703.467375][T10894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.487119][T10894] RSP: 002b:00007fc2332f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 703.495546][T10894] RAX: ffffffffffffffda RBX: 00007fc2356b7fa0 RCX: 00007fc235490969 [ 703.503524][T10894] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 703.511633][T10894] RBP: 00007fc235512ab1 R08: 0000000000000000 R09: 0000000000000000 [ 703.519610][T10894] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 703.527672][T10894] R13: 0000000000000000 R14: 00007fc2356b7fa0 R15: 00007ffc240179b8 [ 703.535664][T10894] [ 703.782067][ T4209] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 703.905675][ T4209] Bluetooth: hci0: Injecting HCI hardware error event [ 703.937578][ T4176] Bluetooth: hci0: hardware error 0x00 [ 706.205104][T10929] lo speed is unknown, defaulting to 1000 [ 706.211447][T10929] lo speed is unknown, defaulting to 1000 [ 713.607864][T11014] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 715.239419][T11009] capability: warning: `syz.9.1754' uses deprecated v2 capabilities in a way that may be insecure [ 715.748847][T11039] input: syz0 as /devices/virtual/input/input54 [ 717.422126][T11060] netlink: 'syz.6.1769': attribute type 1 has an invalid length. [ 719.244690][T11072] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1773'. [ 723.679440][T11104] input: syz0 as /devices/virtual/input/input55 [ 725.335540][ T4639] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 725.591999][ T4639] usb 2-1: Using ep0 maxpacket: 8 [ 725.722489][ T4639] usb 2-1: config 0 has no interfaces? [ 725.729680][ T4639] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 725.898884][ T4639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.134592][ T4639] usb 2-1: config 0 descriptor?? [ 726.481358][ T5921] usb 2-1: USB disconnect, device number 8 [ 729.800957][T11167] ubi: mtd0 is already attached to ubi31 [ 730.881399][T11175] input: syz0 as /devices/virtual/input/input56 [ 730.967853][T11177] 9pnet_virtio: no channels available for device syz [ 733.620088][T11205] 9pnet_virtio: no channels available for device syz [ 734.358461][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 734.386791][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 734.578571][T11212] rdma_rxe: ignoring netdev event = 26 for syz_tun [ 734.586009][T11212] rdma_rxe: ignoring netdev event = 21 for syz_tun [ 736.697854][T11238] input: syz0 as /devices/virtual/input/input57 [ 737.826230][T11250] device pim6reg1 entered promiscuous mode [ 738.626012][T11265] 9pnet_virtio: no channels available for device syz [ 739.318720][T11270] loop8: detected capacity change from 0 to 32768 [ 739.367832][T11270] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 739.376687][T11270] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 739.386443][T11270] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 739.435601][ T7974] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 739.451865][ T7974] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 739.583567][ T7974] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 739.607786][ T7974] gfs2: fsid=syz:syz.0: jid=0: Done [ 739.627442][T11270] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 739.905594][T11270] gfs2: fsid=syz:syz.0: found 1 quota changes [ 739.966884][T11270] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 739.976722][T11270] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 740.023438][T11270] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 740.037754][T11270] CPU: 0 PID: 11270 Comm: syz.8.1829 Not tainted 5.15.182-syzkaller #0 [ 740.046028][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 740.056096][T11270] Call Trace: [ 740.059384][T11270] [ 740.062323][T11270] dump_stack_lvl+0x168/0x230 [ 740.067028][T11270] ? show_regs_print_info+0x20/0x20 [ 740.072244][T11270] ? load_image+0x3b0/0x3b0 [ 740.076765][T11270] ? __lock_acquire+0x7c60/0x7c60 [ 740.081807][T11270] ? do_raw_spin_unlock+0x11d/0x230 [ 740.087027][T11270] gfs2_assert_warn_i+0x18f/0x2c0 [ 740.092087][T11270] gfs2_quota_cleanup+0x4b4/0x6a0 [ 740.097146][T11270] gfs2_make_fs_ro+0x491/0x5d0 [ 740.101949][T11270] ? gfs2_dinode_out+0xb00/0xb00 [ 740.106911][T11270] ? _raw_spin_unlock+0x24/0x40 [ 740.111784][T11270] ? gfs2_glock_nq+0xcb0/0x1550 [ 740.116674][T11270] gfs2_reconfigure+0x7fc/0xcd0 [ 740.121566][T11270] ? gfs2_get_tree+0x1e0/0x1e0 [ 740.126350][T11270] ? do_raw_spin_unlock+0x11d/0x230 [ 740.131575][T11270] ? gfs2_freeze_lock+0x52/0xc0 [ 740.136444][T11270] ? sb_prepare_remount_readonly+0x511/0x540 [ 740.142452][T11270] ? reconfigure_super+0x641/0x880 [ 740.147601][T11270] reconfigure_super+0x219/0x880 [ 740.152570][T11270] path_mount+0xd3e/0x1020 [ 740.157031][T11270] ? user_path_at_empty+0x13e/0x190 [ 740.162258][T11270] __se_sys_mount+0x2d6/0x3c0 [ 740.166970][T11270] ? __x64_sys_mount+0xc0/0xc0 [ 740.171782][T11270] ? lockdep_hardirqs_on+0x94/0x140 [ 740.177013][T11270] ? __x64_sys_mount+0x1c/0xc0 [ 740.181816][T11270] do_syscall_64+0x4c/0xa0 [ 740.186257][T11270] ? clear_bhb_loop+0x15/0x70 [ 740.190967][T11270] ? clear_bhb_loop+0x15/0x70 [ 740.195673][T11270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 740.201598][T11270] RIP: 0033:0x7f4c3c873969 [ 740.206033][T11270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.225789][T11270] RSP: 002b:00007f4c3a6db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 740.234396][T11270] RAX: ffffffffffffffda RBX: 00007f4c3ca9afa0 RCX: 00007f4c3c873969 [ 740.242399][T11270] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 740.250398][T11270] RBP: 00007f4c3c8f5ab1 R08: 0000000000000000 R09: 0000000000000000 [ 740.258397][T11270] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 740.266397][T11270] R13: 0000000000000000 R14: 00007f4c3ca9afa0 R15: 00007ffda2b388f8 [ 740.274407][T11270] [ 744.247306][T11313] ubi: mtd0 is already attached to ubi31 [ 744.996086][T11314] fuse: Bad value for 'fd' [ 746.281873][ T7] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 746.373038][T11331] loop8: detected capacity change from 0 to 32768 [ 746.419149][T11331] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 746.427550][T11331] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 746.439123][T11331] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 746.448682][ T4209] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 746.456169][ T4209] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 746.469877][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1849'. [ 746.559614][ T4209] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 103ms [ 746.711056][ T4209] gfs2: fsid=syz:syz.0: jid=0: Done [ 746.719484][T11331] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 747.460552][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.523628][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.590841][ T7] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 747.616452][ T7] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 747.626525][ T7] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 747.637020][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.699774][T11331] gfs2: fsid=syz:syz.0: found 1 quota changes [ 747.719881][T11331] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 747.733934][T11331] CPU: 0 PID: 11331 Comm: syz.8.1846 Not tainted 5.15.182-syzkaller #0 [ 747.742196][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 747.752250][T11331] Call Trace: [ 747.755526][T11331] [ 747.758452][T11331] dump_stack_lvl+0x168/0x230 [ 747.763135][T11331] ? show_regs_print_info+0x20/0x20 [ 747.768343][T11331] ? load_image+0x3b0/0x3b0 [ 747.772846][T11331] ? __lock_acquire+0x7c60/0x7c60 [ 747.777867][T11331] ? do_raw_spin_unlock+0x11d/0x230 [ 747.783086][T11331] gfs2_assert_warn_i+0x18f/0x2c0 [ 747.788115][T11331] gfs2_quota_cleanup+0x4b4/0x6a0 [ 747.793142][T11331] gfs2_make_fs_ro+0x491/0x5d0 [ 747.797905][T11331] ? gfs2_dinode_out+0xb00/0xb00 [ 747.802847][T11331] ? _raw_spin_unlock+0x24/0x40 [ 747.807717][T11331] ? gfs2_glock_nq+0xcb0/0x1550 [ 747.812579][T11331] gfs2_reconfigure+0x7fc/0xcd0 [ 747.817434][T11331] ? gfs2_get_tree+0x1e0/0x1e0 [ 747.822190][T11331] ? do_raw_spin_unlock+0x11d/0x230 [ 747.827385][T11331] ? gfs2_freeze_lock+0x52/0xc0 [ 747.832231][T11331] ? sb_prepare_remount_readonly+0x511/0x540 [ 747.838211][T11331] ? reconfigure_super+0x641/0x880 [ 747.843322][T11331] reconfigure_super+0x219/0x880 [ 747.848268][T11331] path_mount+0xd3e/0x1020 [ 747.852683][T11331] ? user_path_at_empty+0x13e/0x190 [ 747.857898][T11331] __se_sys_mount+0x2d6/0x3c0 [ 747.862576][T11331] ? __x64_sys_mount+0xc0/0xc0 [ 747.867340][T11331] ? lockdep_hardirqs_on+0x94/0x140 [ 747.872534][T11331] ? __x64_sys_mount+0x1c/0xc0 [ 747.877302][T11331] do_syscall_64+0x4c/0xa0 [ 747.881715][T11331] ? clear_bhb_loop+0x15/0x70 [ 747.886408][T11331] ? clear_bhb_loop+0x15/0x70 [ 747.891078][T11331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 747.896982][T11331] RIP: 0033:0x7f4c3c873969 [ 747.901428][T11331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.921182][T11331] RSP: 002b:00007f4c3a6db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 747.929597][T11331] RAX: ffffffffffffffda RBX: 00007f4c3ca9afa0 RCX: 00007f4c3c873969 [ 747.937567][T11331] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 747.945543][T11331] RBP: 00007f4c3c8f5ab1 R08: 0000000000000000 R09: 0000000000000000 [ 747.953525][T11331] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 747.961497][T11331] R13: 0000000000000000 R14: 00007f4c3ca9afa0 R15: 00007ffda2b388f8 [ 747.969525][T11331] [ 748.012259][T11327] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 748.123670][ T7] usb 10-1: USB disconnect, device number 5 [ 751.852591][T11382] device pim6reg1 entered promiscuous mode [ 760.155069][ T4209] hid (null): report_id 44392 is invalid [ 760.261193][ T4209] hid-generic 000C:0006:0101.001D: unknown main item tag 0x4 [ 761.244712][ T4209] hid-generic 000C:0006:0101.001D: report_id 44392 is invalid [ 761.268722][ T4209] hid-generic 000C:0006:0101.001D: item 0 2 1 8 parsing failed [ 761.277112][ T4209] hid-generic: probe of 000C:0006:0101.001D failed with error -22 [ 761.624840][T11472] bridge0: port 3(syz_tun) entered blocking state [ 761.655576][T11472] bridge0: port 3(syz_tun) entered disabled state [ 761.693764][T11472] device syz_tun entered promiscuous mode [ 761.724670][T11472] bridge0: port 3(syz_tun) entered blocking state [ 761.731277][T11472] bridge0: port 3(syz_tun) entered forwarding state [ 762.182857][ T4211] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 763.171962][T11493] 9pnet_virtio: no channels available for device syz [ 763.432062][ T4211] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 764.212157][ T4211] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 764.222563][ T4211] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 764.231632][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.264777][T11474] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 764.557340][ T4209] usb 2-1: USB disconnect, device number 9 [ 764.591661][ T7] hid (null): report_id 44392 is invalid [ 765.215523][ T7] hid-generic 000C:0006:0101.001E: unknown main item tag 0x4 [ 765.241875][ T7] hid-generic 000C:0006:0101.001E: report_id 44392 is invalid [ 765.249391][ T7] hid-generic 000C:0006:0101.001E: item 0 2 1 8 parsing failed [ 765.262362][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 765.272231][ T7] hid-generic: probe of 000C:0006:0101.001E failed with error -22 [ 765.606322][T11515] 9pnet: Insufficient options for proto=fd [ 769.683398][T11538] ubi: mtd0 is already attached to ubi31 [ 770.725821][ T7965] hid (null): report_id 44392 is invalid [ 770.743684][ T7965] hid-generic 000C:0006:0101.001F: unknown main item tag 0x4 [ 770.751146][ T7965] hid-generic 000C:0006:0101.001F: report_id 44392 is invalid [ 770.897362][ T7965] hid-generic 000C:0006:0101.001F: item 0 2 1 8 parsing failed [ 771.122263][ T7965] hid-generic: probe of 000C:0006:0101.001F failed with error -22 [ 771.494479][ T4268] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 773.102035][ T4268] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 773.132270][ T4268] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 773.151923][ T4268] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 773.161375][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.202372][T11558] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 773.254020][T11574] input: syz0 as /devices/virtual/input/input58 [ 773.521489][ T7] usb 5-1: USB disconnect, device number 5 [ 774.576417][T11593] fuse: Bad value for 'fd' [ 776.340955][ T4211] hid (null): report_id 44392 is invalid [ 776.364534][ T4211] hid-generic 000C:0006:0101.0020: unknown main item tag 0x4 [ 776.425658][ T4211] hid-generic 000C:0006:0101.0020: report_id 44392 is invalid [ 776.619794][ T4211] hid-generic 000C:0006:0101.0020: item 0 2 1 8 parsing failed [ 777.451082][ T4211] hid-generic: probe of 000C:0006:0101.0020 failed with error -22 [ 778.041990][ T4211] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 779.332218][ T4211] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 780.165459][ T4211] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 780.212169][ T4211] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 780.229716][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.284753][T11622] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 780.861382][ T4211] usb 2-1: USB disconnect, device number 10 [ 780.912311][T11645] fuse: Bad value for 'fd' [ 781.123309][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 781.508382][T11660] input: syz0 as /devices/virtual/input/input59 [ 783.179876][ T7974] hid (null): report_id 44392 is invalid [ 783.313235][ T7974] hid-generic 000C:0006:0101.0021: unknown main item tag 0x4 [ 783.382814][ T7974] hid-generic 000C:0006:0101.0021: report_id 44392 is invalid [ 783.390433][ T7974] hid-generic 000C:0006:0101.0021: item 0 2 1 8 parsing failed [ 783.398885][ T7974] hid-generic: probe of 000C:0006:0101.0021 failed with error -22 [ 785.772510][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 786.422132][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 786.482961][ T7] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 786.506079][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 786.698007][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.780695][T11718] ubi: mtd0 is already attached to ubi31 [ 787.512223][T11698] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 787.700597][T11724] input: syz0 as /devices/virtual/input/input60 [ 788.184802][ T7] hid (null): report_id 44392 is invalid [ 788.765225][ T7] hid-generic 000C:0006:0101.0022: unknown main item tag 0x4 [ 788.823707][ T7] hid-generic 000C:0006:0101.0022: report_id 44392 is invalid [ 788.894240][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 789.648987][ T7] hid-generic 000C:0006:0101.0022: item 0 2 1 8 parsing failed [ 789.657281][ T7] hid-generic: probe of 000C:0006:0101.0022 failed with error -22 [ 789.682763][ T7965] usb 5-1: USB disconnect, device number 6 [ 789.753310][T11737] loop8: detected capacity change from 0 to 128 [ 789.853500][T11737] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 789.898797][T11737] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 790.184533][T11748] binder: 11743:11748 ioctl c0306201 0 returned -14 [ 793.338782][T11773] ubi: mtd0 is already attached to ubi31 [ 796.199292][ T4209] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 800.177709][ T4209] usb 7-1: unable to read config index 0 descriptor/all [ 800.259708][ T4209] usb 7-1: can't read configurations, error -71 [ 801.156209][ T7965] hid (null): report_id 44392 is invalid [ 801.177319][ T7965] hid-generic 000C:0006:0101.0023: unknown main item tag 0x4 [ 801.247332][ T7965] hid-generic 000C:0006:0101.0023: report_id 44392 is invalid [ 801.302370][ T7965] hid-generic 000C:0006:0101.0023: item 0 2 1 8 parsing failed [ 801.368186][ T7965] hid-generic: probe of 000C:0006:0101.0023 failed with error -22 [ 805.231879][ T4211] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 806.213674][ T7965] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 806.352042][ T4211] usb 2-1: device descriptor read/all, error -71 [ 806.692420][ T7965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.709365][T11880] input: syz0 as /devices/virtual/input/input61 [ 806.717568][ T7965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.750838][ T7965] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 806.785934][ T7965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.837527][ T7965] usb 5-1: config 0 descriptor?? [ 807.323754][ T7965] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 807.331111][ T7965] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 807.380887][ T7965] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0024/input/input62 [ 807.433994][ T7965] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 807.653986][ T7965] usb 5-1: USB disconnect, device number 7 [ 807.769094][ T4211] hid (null): report_id 44392 is invalid [ 807.873951][ T4211] hid-generic 000C:0006:0101.0025: unknown main item tag 0x4 [ 807.999489][ T4211] hid-generic 000C:0006:0101.0025: report_id 44392 is invalid [ 808.122711][ T4211] hid-generic 000C:0006:0101.0025: item 0 2 1 8 parsing failed [ 808.289183][ T4211] hid-generic: probe of 000C:0006:0101.0025 failed with error -22 [ 808.510902][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.517591][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.161961][ T7965] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 812.612059][ T7965] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 812.651807][ T7965] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 812.691887][ T7965] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.731730][ T7965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.782890][T11912] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 813.069016][ T7974] usb 5-1: USB disconnect, device number 8 [ 813.710814][ T7974] hid (null): report_id 44392 is invalid [ 813.892542][ T7974] hid-generic 000C:0006:0101.0026: unknown main item tag 0x4 [ 814.061435][ T7974] hid-generic 000C:0006:0101.0026: report_id 44392 is invalid [ 814.212931][ T7974] hid-generic 000C:0006:0101.0026: item 0 2 1 8 parsing failed [ 814.242047][ T7974] hid-generic: probe of 000C:0006:0101.0026 failed with error -22 [ 814.404197][T11878] Set syz1 is full, maxelem 65536 reached [ 815.419393][T11931] input: syz0 as /devices/virtual/input/input63 [ 821.012595][T11977] input: syz0 as /devices/virtual/input/input64 [ 821.101855][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'. [ 821.386822][T11984] input: syz0 as /devices/virtual/input/input65 [ 821.494336][ T8374] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 821.989628][ T8374] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 822.312914][ T8374] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 822.370432][ T8374] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 822.752139][T11995] tipc: Failed to remove unknown binding: 66,1,1/0:20462728/20462730 [ 822.761273][T11995] tipc: Failed to remove unknown binding: 66,1,1/0:20462728/20462730 [ 822.774546][ T8374] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.992824][T11981] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 824.245254][ T8374] usb 10-1: USB disconnect, device number 6 [ 825.689637][T12025] input: syz0 as /devices/virtual/input/input66 [ 826.995331][ T26] audit: type=1326 audit(1746829867.177:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12040 comm="syz.1.2040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc235490969 code=0x0 [ 827.139911][T12049] ubi: mtd0 is already attached to ubi31 [ 829.005030][T12036] loop9: detected capacity change from 0 to 32768 [ 829.183222][T12036] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 829.217457][T12036] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 829.245826][T12036] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 829.270129][ T7965] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 829.284340][ T7965] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 829.772146][ T7965] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 487ms [ 830.483835][ T7965] gfs2: fsid=syz:syz.0: jid=0: Done [ 830.508186][T12036] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 830.542921][T12036] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 831.827520][ T7] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 832.805380][T12095] loop6: detected capacity change from 0 to 128 [ 832.965754][T12095] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 832.991927][T12095] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 833.022073][ T7] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 833.048207][ T26] audit: type=1800 audit(1746829873.227:253): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2054" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 833.081912][ T7] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 833.106088][ T7] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 833.120071][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.162567][T12083] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 833.457830][ T21] usb 10-1: USB disconnect, device number 7 [ 833.811622][ T4268] hid (null): report_id 44392 is invalid [ 834.398200][ T4268] hid-generic 000C:0006:0101.0027: unknown main item tag 0x4 [ 834.621515][ T4268] hid-generic 000C:0006:0101.0027: report_id 44392 is invalid [ 834.701132][ T4268] hid-generic 000C:0006:0101.0027: item 0 2 1 8 parsing failed [ 834.818696][ T4268] hid-generic: probe of 000C:0006:0101.0027 failed with error -22 [ 835.523796][T12117] loop9: detected capacity change from 0 to 32768 [ 835.678188][T12117] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 835.686433][T12117] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 835.698073][T12117] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 835.706975][ T7965] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 835.722128][ T7965] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 835.965576][ T7965] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 243ms [ 835.987153][ T7965] gfs2: fsid=syz:syz.0: jid=0: Done [ 835.992551][T12117] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 836.171891][ T4268] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 836.209230][T12117] gfs2: fsid=syz:syz.0: found 1 quota changes [ 836.255610][T12117] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 836.270124][T12117] CPU: 0 PID: 12117 Comm: syz.9.2060 Not tainted 5.15.182-syzkaller #0 [ 836.278485][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 836.288574][T12117] Call Trace: [ 836.291875][T12117] [ 836.294822][T12117] dump_stack_lvl+0x168/0x230 [ 836.299531][T12117] ? show_regs_print_info+0x20/0x20 [ 836.304744][T12117] ? load_image+0x3b0/0x3b0 [ 836.309252][T12117] ? __lock_acquire+0x7c60/0x7c60 [ 836.314285][T12117] ? do_raw_spin_unlock+0x11d/0x230 [ 836.319494][T12117] gfs2_assert_warn_i+0x18f/0x2c0 [ 836.324542][T12117] gfs2_quota_cleanup+0x4b4/0x6a0 [ 836.329577][T12117] gfs2_make_fs_ro+0x491/0x5d0 [ 836.334442][T12117] ? gfs2_dinode_out+0xb00/0xb00 [ 836.339383][T12117] ? _raw_spin_unlock+0x24/0x40 [ 836.344235][T12117] ? gfs2_glock_nq+0xcb0/0x1550 [ 836.349102][T12117] gfs2_reconfigure+0x7fc/0xcd0 [ 836.353965][T12117] ? gfs2_get_tree+0x1e0/0x1e0 [ 836.358730][T12117] ? do_raw_spin_unlock+0x11d/0x230 [ 836.363929][T12117] ? gfs2_freeze_lock+0x52/0xc0 [ 836.368782][T12117] ? sb_prepare_remount_readonly+0x511/0x540 [ 836.374770][T12117] ? reconfigure_super+0x641/0x880 [ 836.379889][T12117] reconfigure_super+0x219/0x880 [ 836.384835][T12117] path_mount+0xd3e/0x1020 [ 836.389259][T12117] ? user_path_at_empty+0x13e/0x190 [ 836.394464][T12117] __se_sys_mount+0x2d6/0x3c0 [ 836.399149][T12117] ? __x64_sys_mount+0xc0/0xc0 [ 836.403916][T12117] ? lockdep_hardirqs_on+0x94/0x140 [ 836.409115][T12117] ? __x64_sys_mount+0x1c/0xc0 [ 836.413882][T12117] do_syscall_64+0x4c/0xa0 [ 836.418303][T12117] ? clear_bhb_loop+0x15/0x70 [ 836.422976][T12117] ? clear_bhb_loop+0x15/0x70 [ 836.427653][T12117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 836.433557][T12117] RIP: 0033:0x7fa8fb9a3969 [ 836.437977][T12117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.457583][T12117] RSP: 002b:00007fa8f980b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 836.466004][T12117] RAX: ffffffffffffffda RBX: 00007fa8fbbcafa0 RCX: 00007fa8fb9a3969 [ 836.473977][T12117] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 836.481946][T12117] RBP: 00007fa8fba25ab1 R08: 0000000000000000 R09: 0000000000000000 [ 836.489920][T12117] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 836.497895][T12117] R13: 0000000000000000 R14: 00007fa8fbbcafa0 R15: 00007ffd37564a68 [ 836.505884][T12117] [ 836.646471][ T4268] usb 5-1: Using ep0 maxpacket: 8 [ 836.912025][ T4268] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 836.963246][ T4268] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 837.102243][ T4268] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.274538][ T4268] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.526258][ T4268] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.700397][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.060624][T12150] loop6: detected capacity change from 0 to 128 [ 838.126455][ T4268] usb 5-1: GET_CAPABILITIES returned 0 [ 838.143762][ T4268] usbtmc 5-1:16.0: can't read capabilities [ 838.157888][T12150] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 838.168621][T12150] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 838.237458][ T4268] hid (null): report_id 44392 is invalid [ 838.324555][ T4268] hid-generic 000C:0006:0101.0028: unknown main item tag 0x4 [ 838.555204][ T4268] hid-generic 000C:0006:0101.0028: report_id 44392 is invalid [ 838.672031][ T26] audit: type=1800 audit(1746829878.807:254): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2066" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 838.764421][ T4268] hid-generic 000C:0006:0101.0028: item 0 2 1 8 parsing failed [ 838.921997][ T4268] hid-generic: probe of 000C:0006:0101.0028 failed with error -22 [ 839.054143][ T4268] usb 5-1: USB disconnect, device number 9 [ 840.205002][T12177] bond0: (slave dummy0): Error: Slave device does not support XDP [ 840.321817][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 841.188586][T12186] tmpfs: Unknown parameter 'usrquota' [ 841.665004][ T7] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 841.676946][ T7] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 841.688698][ T7] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 841.697894][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.742866][T12167] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 841.994091][T12194] input: syz0 as /devices/virtual/input/input67 [ 842.286070][ T7965] usb 7-1: USB disconnect, device number 10 [ 842.493957][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2070'. [ 843.742442][ T21] hid (null): report_id 44392 is invalid [ 843.829515][ T21] hid-generic 000C:0006:0101.0029: unknown main item tag 0x4 [ 843.987060][ T21] hid-generic 000C:0006:0101.0029: report_id 44392 is invalid [ 844.167138][ T21] hid-generic 000C:0006:0101.0029: item 0 2 1 8 parsing failed [ 844.335403][ T21] hid-generic: probe of 000C:0006:0101.0029 failed with error -22 [ 844.883072][T12223] input: syz0 as /devices/virtual/input/input68 [ 846.958485][T12231] input: syz1 as /devices/virtual/input/input69 [ 847.616704][T12256] input: syz0 as /devices/virtual/input/input70 [ 849.261558][ T7965] hid (null): report_id 44392 is invalid [ 849.297287][ T7965] hid-generic 000C:0006:0101.002A: unknown main item tag 0x4 [ 849.333561][ T7965] hid-generic 000C:0006:0101.002A: report_id 44392 is invalid [ 849.368459][ T7965] hid-generic 000C:0006:0101.002A: item 0 2 1 8 parsing failed [ 849.391179][ T7965] hid-generic: probe of 000C:0006:0101.002A failed with error -22 [ 850.018617][T12283] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 850.311410][T12288] lo speed is unknown, defaulting to 1000 [ 850.318134][T12288] lo speed is unknown, defaulting to 1000 [ 851.145747][T12300] input: syz0 as /devices/virtual/input/input71 [ 854.063948][T12109] hid (null): report_id 44392 is invalid [ 854.722777][T12109] hid-generic 000C:0006:0101.002B: unknown main item tag 0x4 [ 854.730270][T12109] hid-generic 000C:0006:0101.002B: report_id 44392 is invalid [ 854.855208][T12109] hid-generic 000C:0006:0101.002B: item 0 2 1 8 parsing failed [ 854.863637][T12109] hid-generic: probe of 000C:0006:0101.002B failed with error -22 [ 857.041287][T12344] ubi: mtd0 is already attached to ubi31 [ 857.579021][T12339] lo speed is unknown, defaulting to 1000 [ 857.586815][T12339] lo speed is unknown, defaulting to 1000 [ 857.889012][T12361] input: syz0 as /devices/virtual/input/input72 [ 860.429231][T12386] 9pnet_virtio: no channels available for device syz [ 861.299376][ T7] hid (null): report_id 44392 is invalid [ 861.310066][ T7] hid-generic 000C:0006:0101.002C: unknown main item tag 0x4 [ 861.421614][ T7] hid-generic 000C:0006:0101.002C: report_id 44392 is invalid [ 861.466039][ T7] hid-generic 000C:0006:0101.002C: item 0 2 1 8 parsing failed [ 861.542992][ T7] hid-generic: probe of 000C:0006:0101.002C failed with error -22 [ 863.597306][T12397] ubi: mtd0 is already attached to ubi31 [ 864.231654][T12404] loop8: detected capacity change from 0 to 32768 [ 864.273614][T12404] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 864.281910][T12404] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 864.298987][T12404] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 864.308458][ T7974] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 864.340674][ T7974] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 864.572532][ T7974] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 231ms [ 864.601117][ T7974] gfs2: fsid=syz:syz.0: jid=0: Done [ 864.741461][T12404] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 865.312894][T12404] gfs2: fsid=syz:syz.0: found 1 quota changes [ 865.423219][T12404] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 865.433616][T12404] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 865.496158][T12404] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 865.510372][T12404] CPU: 0 PID: 12404 Comm: syz.8.2135 Not tainted 5.15.182-syzkaller #0 [ 865.518611][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 865.528666][T12404] Call Trace: [ 865.531946][T12404] [ 865.534870][T12404] dump_stack_lvl+0x168/0x230 [ 865.539548][T12404] ? show_regs_print_info+0x20/0x20 [ 865.544764][T12404] ? load_image+0x3b0/0x3b0 [ 865.549275][T12404] ? __lock_acquire+0x7c60/0x7c60 [ 865.554304][T12404] ? do_raw_spin_unlock+0x11d/0x230 [ 865.559496][T12404] gfs2_assert_warn_i+0x18f/0x2c0 [ 865.564541][T12404] gfs2_quota_cleanup+0x4b4/0x6a0 [ 865.569568][T12404] gfs2_make_fs_ro+0x491/0x5d0 [ 865.574328][T12404] ? gfs2_dinode_out+0xb00/0xb00 [ 865.579261][T12404] ? _raw_spin_unlock+0x24/0x40 [ 865.584226][T12404] ? gfs2_glock_nq+0xcb0/0x1550 [ 865.589599][T12404] gfs2_reconfigure+0x7fc/0xcd0 [ 865.594470][T12404] ? gfs2_get_tree+0x1e0/0x1e0 [ 865.599342][T12404] ? do_raw_spin_unlock+0x11d/0x230 [ 865.604565][T12404] ? gfs2_freeze_lock+0x52/0xc0 [ 865.609414][T12404] ? sb_prepare_remount_readonly+0x511/0x540 [ 865.615394][T12404] ? reconfigure_super+0x641/0x880 [ 865.620507][T12404] reconfigure_super+0x219/0x880 [ 865.625454][T12404] path_mount+0xd3e/0x1020 [ 865.629876][T12404] ? user_path_at_empty+0x13e/0x190 [ 865.635076][T12404] __se_sys_mount+0x2d6/0x3c0 [ 865.639752][T12404] ? __x64_sys_mount+0xc0/0xc0 [ 865.644512][T12404] ? lockdep_hardirqs_on+0x94/0x140 [ 865.649724][T12404] ? __x64_sys_mount+0x1c/0xc0 [ 865.654485][T12404] do_syscall_64+0x4c/0xa0 [ 865.658896][T12404] ? clear_bhb_loop+0x15/0x70 [ 865.663562][T12404] ? clear_bhb_loop+0x15/0x70 [ 865.668235][T12404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 865.674125][T12404] RIP: 0033:0x7f4c3c873969 [ 865.678538][T12404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.698139][T12404] RSP: 002b:00007f4c3a6db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 865.706549][T12404] RAX: ffffffffffffffda RBX: 00007f4c3ca9afa0 RCX: 00007f4c3c873969 [ 865.714517][T12404] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 865.722488][T12404] RBP: 00007f4c3c8f5ab1 R08: 0000000000000000 R09: 0000000000000000 [ 865.730457][T12404] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 865.738429][T12404] R13: 0000000000000000 R14: 00007f4c3ca9afa0 R15: 00007ffda2b388f8 [ 865.746496][T12404] [ 866.231999][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.244187][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.251895][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.259315][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.266878][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.274411][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.282056][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.289502][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.307745][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 866.585005][ T7] hid (null): report_id 44392 is invalid [ 867.284814][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 867.286823][ T7] hid-generic 000C:0006:0101.002E: unknown main item tag 0x4 [ 867.301906][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 867.309467][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 867.322001][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 867.330276][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 867.351861][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 867.359308][ T4268] hid-generic FFF9:0000:0203.002D: unknown main item tag 0x0 [ 867.367020][ T7] hid-generic 000C:0006:0101.002E: report_id 44392 is invalid [ 867.398919][ T7] hid-generic 000C:0006:0101.002E: item 0 2 1 8 parsing failed [ 867.411991][ T4268] hid-generic FFF9:0000:0203.002D: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 867.437474][ T7] hid-generic: probe of 000C:0006:0101.002E failed with error -22 [ 867.769252][ T26] audit: type=1326 audit(1746829907.947:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.8.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c873969 code=0x7ffc0000 [ 867.870776][ T26] audit: type=1326 audit(1746829907.977:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.8.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c873969 code=0x7ffc0000 [ 867.938344][ T26] audit: type=1326 audit(1746829907.977:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.8.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4c3c873969 code=0x7ffc0000 [ 868.871458][ T26] audit: type=1326 audit(1746829907.977:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.8.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c873969 code=0x7ffc0000 [ 868.894236][ T26] audit: type=1326 audit(1746829907.977:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.8.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c873969 code=0x7ffc0000 [ 868.925716][ T26] audit: type=1326 audit(1746829907.977:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.8.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f4c3c873969 code=0x7ffc0000 [ 869.101979][ T26] audit: type=1326 audit(1746829907.977:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.8.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c873969 code=0x7ffc0000 [ 869.167251][ T26] audit: type=1326 audit(1746829907.977:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.8.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c873969 code=0x7ffc0000 [ 869.944842][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.951247][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.458196][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2157'. [ 871.478073][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2157'. [ 871.501186][T12495] netlink: 'syz.8.2157': attribute type 7 has an invalid length. [ 872.520100][T12500] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 872.535350][ T4209] kernel read not supported for file /vga_arbiter (pid: 4209 comm: kworker/0:3) [ 872.878688][T12109] Bluetooth: hci2: command 0x0405 tx timeout [ 874.938288][T12509] ubi: mtd0 is already attached to ubi31 [ 876.383464][T12525] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2168'. [ 877.299699][T12535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.288872][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2177'. [ 880.025059][T12550] ubi: mtd0 is already attached to ubi31 [ 882.661859][T12584] block nbd4: shutting down sockets [ 882.671830][ T7965] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 883.051977][ T7965] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 883.079824][ T7965] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 883.084375][T12590] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 883.117614][ T7965] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 883.157420][ T7965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.232278][T12579] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 883.517293][T12109] usb 7-1: USB disconnect, device number 11 [ 885.086693][T12615] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2198'. [ 885.256508][T12618] CUSE: unknown device info "˙" [ 885.261681][T12618] CUSE: zero length info key specified [ 886.223650][T12621] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2200'. [ 886.361557][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2201'. [ 886.391476][T12623] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2201'. [ 886.512135][T12627] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 887.318203][T12634] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2204'. [ 887.523590][T12646] tipc: Started in network mode [ 887.697773][T12646] tipc: Node identity , cluster identity 4711 [ 887.714269][T12646] tipc: Failed to obtain node identity [ 887.992815][T12646] tipc: Enabling of bearer rejected, failed to enable media [ 889.303005][T12663] 9pnet_virtio: no channels available for device syz [ 890.082992][T12675] ubi: mtd0 is already attached to ubi31 [ 891.042109][T12689] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 891.051778][T12689] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 891.104599][T12689] loop1: detected capacity change from 0 to 4096 [ 892.266286][T12689] 9pnet_virtio: no channels available for device syz [ 892.333798][T12689] loop1: detected capacity change from 0 to 8192 [ 892.417030][T12689] loop1: p1 p2 < > p3 p4 < p5 > [ 892.422189][T12689] loop1: p1 size 108986237 extends beyond EOD, truncated [ 892.439531][T12689] loop1: p3 size 131072 extends beyond EOD, truncated [ 892.447303][T12700] ax25_connect(): syz.8.2226 uses autobind, please contact jreuter@yaina.de [ 892.448759][T12689] loop1: p5 size 108986237 extends beyond EOD, truncated [ 895.575102][T12719] ubi: mtd0 is already attached to ubi31 [ 897.095568][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 900.470792][T12760] ubi: mtd0 is already attached to ubi31 [ 902.805557][T12773] ubi: mtd0 is already attached to ubi31 [ 904.843741][T12791] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2250'. [ 907.400701][T12811] ubi: mtd0 is already attached to ubi31 [ 909.915494][T12818] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 912.781329][T12849] 9pnet_virtio: no channels available for device syz [ 913.821197][T12861] 9pnet_virtio: no channels available for device syz [ 925.087159][T12946] loop4: detected capacity change from 0 to 32768 [ 925.157976][T12946] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 925.166381][T12946] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 925.177774][T12946] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 925.187063][ T4214] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 925.194047][ T4214] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 925.281003][ T4214] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms [ 925.305216][ T4214] gfs2: fsid=syz:syz.0: jid=0: Done [ 925.310504][T12946] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 925.492285][T12946] gfs2: fsid=syz:syz.0: found 1 quota changes [ 925.514641][T12946] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 925.524665][T12946] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 925.548875][T12946] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 925.563241][T12946] CPU: 1 PID: 12946 Comm: syz.4.2293 Not tainted 5.15.182-syzkaller #0 [ 925.571492][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 925.581550][T12946] Call Trace: [ 925.584831][T12946] [ 925.587769][T12946] dump_stack_lvl+0x168/0x230 [ 925.592476][T12946] ? show_regs_print_info+0x20/0x20 [ 925.597681][T12946] ? load_image+0x3b0/0x3b0 [ 925.602198][T12946] ? __lock_acquire+0x7c60/0x7c60 [ 925.607226][T12946] ? do_raw_spin_unlock+0x11d/0x230 [ 925.612458][T12946] gfs2_assert_warn_i+0x18f/0x2c0 [ 925.617494][T12946] gfs2_quota_cleanup+0x4b4/0x6a0 [ 925.622538][T12946] gfs2_make_fs_ro+0x491/0x5d0 [ 925.627325][T12946] ? gfs2_dinode_out+0xb00/0xb00 [ 925.632265][T12946] ? _raw_spin_unlock+0x24/0x40 [ 925.637118][T12946] ? gfs2_glock_nq+0xcb0/0x1550 [ 925.642020][T12946] gfs2_reconfigure+0x7fc/0xcd0 [ 925.646888][T12946] ? gfs2_get_tree+0x1e0/0x1e0 [ 925.651651][T12946] ? do_raw_spin_unlock+0x11d/0x230 [ 925.656854][T12946] ? gfs2_freeze_lock+0x52/0xc0 [ 925.661706][T12946] ? sb_prepare_remount_readonly+0x511/0x540 [ 925.667709][T12946] ? reconfigure_super+0x641/0x880 [ 925.672839][T12946] reconfigure_super+0x219/0x880 [ 925.677807][T12946] path_mount+0xd3e/0x1020 [ 925.682233][T12946] ? user_path_at_empty+0x13e/0x190 [ 925.687434][T12946] __se_sys_mount+0x2d6/0x3c0 [ 925.692122][T12946] ? __x64_sys_mount+0xc0/0xc0 [ 925.696893][T12946] ? lockdep_hardirqs_on+0x94/0x140 [ 925.702091][T12946] ? __x64_sys_mount+0x1c/0xc0 [ 925.706867][T12946] do_syscall_64+0x4c/0xa0 [ 925.711289][T12946] ? clear_bhb_loop+0x15/0x70 [ 925.715965][T12946] ? clear_bhb_loop+0x15/0x70 [ 925.720643][T12946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 925.726543][T12946] RIP: 0033:0x7fa3526f3969 [ 925.731053][T12946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.750665][T12946] RSP: 002b:00007fa35055b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 925.759172][T12946] RAX: ffffffffffffffda RBX: 00007fa35291afa0 RCX: 00007fa3526f3969 [ 925.767149][T12946] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 925.775216][T12946] RBP: 00007fa352775ab1 R08: 0000000000000000 R09: 0000000000000000 [ 925.783189][T12946] R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000 [ 925.791337][T12946] R13: 0000000000000000 R14: 00007fa35291afa0 R15: 00007ffe4a3930c8 [ 925.799355][T12946] [ 928.141061][T12976] ubi: mtd0 is already attached to ubi31 [ 929.768535][T12985] bridge0: port 3(vlan2) entered blocking state [ 929.777840][T12985] bridge0: port 3(vlan2) entered disabled state [ 929.786525][T12985] device vlan2 entered promiscuous mode [ 929.796408][T12985] device bond0 entered promiscuous mode [ 929.802156][T12985] device bond_slave_0 entered promiscuous mode [ 929.808495][T12985] device bond_slave_1 entered promiscuous mode [ 929.815508][T12985] device dummy0 entered promiscuous mode [ 929.825991][T12985] bridge0: port 3(vlan2) entered blocking state [ 929.832384][T12985] bridge0: port 3(vlan2) entered forwarding state [ 931.758777][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.826189][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.944653][T13002] Invalid ELF header magic: != ELF [ 932.249524][T13018] input: syz0 as /devices/virtual/input/input74 [ 932.659774][ T7966] hid (null): report_id 44392 is invalid [ 932.780885][ T7966] hid-generic 000C:0006:0101.002F: unknown main item tag 0x4 [ 933.083091][ T7966] hid-generic 000C:0006:0101.002F: report_id 44392 is invalid [ 933.092087][ T7966] hid-generic 000C:0006:0101.002F: item 0 2 1 8 parsing failed [ 933.102625][ T7966] hid-generic: probe of 000C:0006:0101.002F failed with error -22 [ 934.720772][T13025] ubi: mtd0 is already attached to ubi31 [ 936.462901][T13032] ubi: mtd0 is already attached to ubi31 [ 939.372644][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 939.384672][T13058] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../file0/../file0 [ 939.395466][T13056] binder: 13039:13056 ioctl c018620b 0 returned -14 [ 941.010453][T13075] input: syz0 as /devices/virtual/input/input75 [ 1048.491680][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1048.498341][ C1] rcu: 1-...!: (10500 ticks this GP) idle=c17/1/0x4000000000000000 softirq=42046/42055 fqs=4 [ 1048.511342][ C1] (t=10502 jiffies g=60305 q=361) [ 1048.516482][ C1] rcu: rcu_preempt kthread starved for 10494 jiffies! g60305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1048.527699][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1048.537681][ C1] rcu: RCU grace-period kthread stack dump: [ 1048.543575][ C1] task:rcu_preempt state:R running task stack:27008 pid: 15 ppid: 2 flags:0x00004000 [ 1048.554377][ C1] Call Trace: [ 1048.557672][ C1] [ 1048.560622][ C1] __schedule+0x11b8/0x43b0 [ 1048.565158][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 1048.570563][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1048.576480][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1048.582397][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1048.587275][ C1] ? rcu_is_watching+0x11/0xa0 [ 1048.592057][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1048.597982][ C1] schedule+0x11b/0x1e0 [ 1048.602159][ C1] schedule_timeout+0x15c/0x280 [ 1048.607029][ C1] ? console_conditional_schedule+0x40/0x40 [ 1048.612940][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1048.618856][ C1] ? update_process_times+0x200/0x200 [ 1048.624253][ C1] ? prepare_to_swait_event+0x331/0x350 [ 1048.629827][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 1048.634708][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 1048.640881][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 1048.645767][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1048.650986][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1048.656206][ C1] rcu_gp_kthread+0x98/0x350 [ 1048.660831][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1048.665960][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1048.671884][ C1] ? __kthread_parkme+0x157/0x1b0 [ 1048.676932][ C1] kthread+0x436/0x520 [ 1048.681014][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1048.686141][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1048.690749][ C1] ret_from_fork+0x1f/0x30 [ 1048.695196][ C1] [ 1048.698227][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1048.704556][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1048.709784][ C0] NMI backtrace for cpu 0 [ 1048.709795][ C0] CPU: 0 PID: 13093 Comm: syz.4.2332 Not tainted 5.15.182-syzkaller #0 [ 1048.709813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1048.709823][ C0] RIP: 0010:arch_do_signal_or_restart+0xab6/0x1300 [ 1048.709848][ C0] Code: 74 08 4c 89 f7 e8 5a d7 93 00 49 8b 06 49 89 47 40 4c 8d 73 30 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 f7 e8 30 d7 93 00 49 8b 06 49 89 47 48 4c 8d 73 18 4c [ 1048.709863][ C0] RSP: 0018:ffffc90002defcc0 EFLAGS: 00040246 [ 1048.709878][ C0] RAX: 1ffff920005bdff1 RBX: ffffc90002deff58 RCX: dffffc0000000000 [ 1048.709892][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1048.709902][ C0] RBP: ffffc90002defec0 R08: 0000000000000000 R09: fffffbfff1775c66 [ 1048.709914][ C0] R10: fffffbfff1775c66 R11: 1ffffffff1775c60 R12: 0000000000000000 [ 1048.709927][ C0] R13: 00007fa350539d00 R14: ffffc90002deff88 R15: 00007fa350539b38 [ 1048.709940][ C0] FS: 00007fa35053a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1048.709955][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1048.709967][ C0] CR2: 000000110c40093d CR3: 0000000027a29000 CR4: 00000000003506f0 [ 1048.709982][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1048.709993][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1048.710003][ C0] Call Trace: [ 1048.710008][ C0] [ 1048.710014][ C0] ? _copy_from_user+0x111/0x170 [ 1048.710041][ C0] ? get_sigframe_size+0x10/0x10 [ 1048.710071][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 1048.710094][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 1048.710114][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1048.710134][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1048.710155][ C0] do_syscall_64+0x58/0xa0 [ 1048.710170][ C0] ? clear_bhb_loop+0x15/0x70 [ 1048.710186][ C0] ? clear_bhb_loop+0x15/0x70 [ 1048.710201][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1048.710222][ C0] RIP: 0033:0x7fa3526f3969 [ 1048.710237][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.710250][ C0] RSP: 002b:00007fa35053a0e8 EFLAGS: 00000246 [ 1048.710263][ C0] RAX: fffffffffffffffc RBX: 00007fa35291b088 RCX: 00007fa3526f3969 [ 1048.710276][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa35291b088 [ 1048.710287][ C0] RBP: 00007fa35291b080 R08: 0000000000000000 R09: 0000000000000000 [ 1048.710297][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa35291b08c [ 1048.710308][ C0] R13: 0000000000000000 R14: 00007ffe4a392fe0 R15: 00007ffe4a3930c8 [ 1048.710327][ C0] [ 1048.710776][ C1] NMI backtrace for cpu 1 [ 1048.979332][ C1] CPU: 1 PID: 13087 Comm: syz.4.2332 Not tainted 5.15.182-syzkaller #0 [ 1048.987603][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1048.997674][ C1] Call Trace: [ 1049.000967][ C1] [ 1049.003821][ C1] dump_stack_lvl+0x168/0x230 [ 1049.008524][ C1] ? show_regs_print_info+0x20/0x20 [ 1049.013750][ C1] ? load_image+0x3b0/0x3b0 [ 1049.018273][ C1] ? try_to_wake_up+0x3d4/0x1050 [ 1049.023236][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 1049.028349][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1049.034537][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1049.039929][ C1] ? _raw_spin_lock+0x40/0x40 [ 1049.044623][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1049.050707][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1049.056825][ C1] rcu_dump_cpu_stacks+0x22f/0x380 [ 1049.061967][ C1] print_cpu_stall+0x31d/0x5f0 [ 1049.066756][ C1] rcu_sched_clock_irq+0x6d8/0x1110 [ 1049.071978][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 1049.076852][ C1] ? account_process_tick+0x227/0x3a0 [ 1049.082244][ C1] update_process_times+0x193/0x200 [ 1049.087464][ C1] tick_sched_timer+0x37d/0x560 [ 1049.092339][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 1049.097567][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 1049.103142][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1049.108272][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1049.114370][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 1049.119357][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1049.125361][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1049.131016][ C1] [ 1049.133962][ C1] [ 1049.136917][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1049.142923][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 1049.148756][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e d6 b1 f7 48 89 df e8 16 ab b2 f7 e8 51 4f d3 f7 fb bf 01 00 00 00 46 cf a6 f7 65 8b 05 e7 e2 57 76 85 c0 74 02 5b c3 e8 94 ed 55 [ 1049.168384][ C1] RSP: 0018:ffffc9000326fbc0 EFLAGS: 00000282 [ 1049.174482][ C1] RAX: a2283a7362f10000 RBX: ffff8880794d40c0 RCX: a2283a7362f10000 [ 1049.182468][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b0fc0 RDI: 0000000000000001 [ 1049.190463][ C1] RBP: ffff88805977bbb0 R08: dffffc0000000000 R09: ffffed100f29a819 [ 1049.198468][ C1] R10: ffffed100f29a819 R11: 1ffff1100f29a818 R12: ffff8880794d40c0 [ 1049.206575][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc9000326fe00 [ 1049.214589][ C1] get_signal+0x11d6/0x12c0 [ 1049.219146][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 1049.224808][ C1] ? rcu_lock_release+0x5/0x20 [ 1049.229590][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 1049.234632][ C1] ? futex_exit_release+0x1c0/0x1c0 [ 1049.239848][ C1] ? get_sigframe_size+0x10/0x10 [ 1049.244824][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 1049.250303][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 1049.255608][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 1049.261176][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1049.266655][ C1] do_syscall_64+0x58/0xa0 [ 1049.271089][ C1] ? clear_bhb_loop+0x15/0x70 [ 1049.275775][ C1] ? clear_bhb_loop+0x15/0x70 [ 1049.280475][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1049.286385][ C1] RIP: 0033:0x7fa3526f3969 [ 1049.290814][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.310437][ C1] RSP: 002b:00007fa35055b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1049.318880][ C1] RAX: fffffffffffffe00 RBX: 00007fa35291afa8 RCX: 00007fa3526f3969 [ 1049.326869][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa35291afa8 [ 1049.334855][ C1] RBP: 00007fa35291afa0 R08: 0000000000000000 R09: 0000000000000000 [ 1049.342842][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa35291afac [ 1049.350826][ C1] R13: 0000000000000000 R14: 00007ffe4a392fe0 R15: 00007ffe4a3930c8 [ 1049.358832][ C1]