last executing test programs: 13m31.357398132s ago: executing program 1 (id=16): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xa41, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) close_range(r1, 0xffffffffffffffff, 0x0) 13m31.038849386s ago: executing program 2 (id=18): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 13m30.976384837s ago: executing program 1 (id=19): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x68, 0x12, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x8}, {0x1, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0xa, 0xc4, 0x10, 0x88, 0x2, 0x0, 0x3}}, {0x4}}]}]}, 0x68}}, 0x0) 13m29.773600983s ago: executing program 2 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m29.486032197s ago: executing program 1 (id=22): rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xaa080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3, 0x0, 0x40100, 0x20c4a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x8010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m29.22622299s ago: executing program 1 (id=23): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x200000, &(0x7f0000000340), 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x42842, 0x10e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 13m29.021530883s ago: executing program 2 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0xe, &(0x7f00000000c0), 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 13m27.673994232s ago: executing program 2 (id=28): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") pread64(0xffffffffffffffff, 0x0, 0x0, 0x55) chdir(&(0x7f0000000400)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1) unlink(&(0x7f00000004c0)='./file1\x00') 13m27.231960998s ago: executing program 1 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000480)='sched_switch\x00', r1, 0x0, 0x8001}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 13m23.487817938s ago: executing program 2 (id=38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000280), r4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m23.3606729s ago: executing program 1 (id=41): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x17545}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 13m23.032270745s ago: executing program 32 (id=41): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x17545}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 13m21.487121405s ago: executing program 2 (id=48): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x7f]}}]}}]}, 0x8c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)="cc", 0x1}], 0x1}}, {{0x0, 0xfeb5, &(0x7f0000000200)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x4000000000002c8, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9) shutdown(r0, 0x2) 13m21.050352072s ago: executing program 33 (id=48): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x7f]}}]}}]}, 0x8c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)="cc", 0x1}], 0x1}}, {{0x0, 0xfeb5, &(0x7f0000000200)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x4000000000002c8, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9) shutdown(r0, 0x2) 12m9.969548305s ago: executing program 5 (id=191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x64440, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xe) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x5402, 0x0) 12m8.86256402s ago: executing program 5 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(r2, &(0x7f0000000300)="782eb839364254bd87fce4c00c5d4f87dac3fc0867d8df287d119c013bcacea906569644f208c35a26508be531d97d3e98d5f9272db94c14cba842ed911d5d7ab2ab306dbd5b26ba54d3629d23cb519692b83a5d85d00277907fbf48655fddbc1b67786ffcb9212980b1a7c435a77602c18111f8a5866b30a3d07fce60ab449f017d8cc596349cb653028a531c541daa44de0cc5b9fc9fbd33f9b2b7229452613851217d6c696a11c0b248553b5a4fdf573dc0e4609eefa761a57ee51068734bf3aa8e5a1a6db971f1edc98cec97dcd5a7142e4bb935db4160a38cdabebfc2befe0ae1", 0xe3, 0x1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @local}, 0x1, 0x2, 0x1, 0x4}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, &(0x7f0000000080)=r6}, 0x20) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 12m7.952434883s ago: executing program 5 (id=197): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r4 = socket$inet6(0xa, 0x3, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4e24, 0x0, 0x0, 0x8, 0x2, 0x0, 0x20, 0x73}, {0x10000, 0xeca, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7789, 0x10000}, {0x0, 0x0, 0x1}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@private=0xa010100, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) close(r4) 12m5.90645982s ago: executing program 5 (id=200): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc1e, &(0x7f0000001940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f0000001080)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 12m3.641825371s ago: executing program 5 (id=206): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) userfaultfd(0x801) socket$inet6(0xa, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write(r2, &(0x7f0000000000)="3f000000010000", 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 11m59.834679323s ago: executing program 5 (id=213): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x2, 0x1, 0x0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x4005, 0x80000001}}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000140)={'team_slave_0\x00', {0x2, 0x0, @dev}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x20002014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000600)={0xa0000013}) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x400) close_range(r1, 0xffffffffffffffff, 0x0) 11m58.734107857s ago: executing program 34 (id=213): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x2, 0x1, 0x0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x4005, 0x80000001}}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000140)={'team_slave_0\x00', {0x2, 0x0, @dev}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x20002014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000600)={0xa0000013}) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x400) close_range(r1, 0xffffffffffffffff, 0x0) 11m34.083527971s ago: executing program 3 (id=262): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mkdir(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x1, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 11m31.421533088s ago: executing program 3 (id=265): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ed, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rmdir(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(r0, 0x12fff, 0x4101, 0x3) 11m28.977579751s ago: executing program 3 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000240)={r4, r5, 0x0, 0x0, 0x5}) close_range(r2, 0xffffffffffffffff, 0x0) 11m27.51955669s ago: executing program 3 (id=273): syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) renameat2(r3, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 11m25.353077919s ago: executing program 3 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) 11m23.11430114s ago: executing program 3 (id=282): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x80, 0x0, 0x1, 0x401, 0xff97, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 11m7.401212374s ago: executing program 35 (id=282): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x80, 0x0, 0x1, 0x401, 0xff97, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 7m47.601043082s ago: executing program 8 (id=1079): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45) r1 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) copy_file_range(r1, 0x0, r0, 0x0, 0x3df1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x166940, 0x102) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f00000000c0)={0x7, 0x10000002000003}) 7m43.521493057s ago: executing program 8 (id=1095): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x0, 0x0, 0x0, 0x0, 0x1, 0x472, 0x0, 0xfffffffc, 0x0, 0x0, 0x7fff, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9f1, 0x0, 0xfffffffa, 0x0, 0x2, 0x3, 0xef, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40000, 0x687, 0x0, 0x232, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x51, 0xfffffffb, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x8001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x2000000, 0x40, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000007, 0x8000, 0x0, 0x3, 0xfffffffd, 0xfffffffd, 0x1, 0x0, 0xb9b, 0x40, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x800, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x3, 0x1, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x4], [0x4, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1000, 0xffffffff, 0x4, 0x80, 0x0, 0x0, 0x80, 0xe, 0x0, 0x43, 0x0, 0x0, 0x8f3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 7m42.56900956s ago: executing program 8 (id=1104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800020000000000000000002800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="80fd"], 0xa) 7m42.275650324s ago: executing program 8 (id=1107): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000005c0)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}]}, 0x1, 0x7bc, &(0x7f0000001740)="$eJzs3ctrXNcZAPDvjl6W7FYqFFp3JSi0AuNR5ap2C124dFEKNRjatW0xGgtXI43RjIwlBLYJgSwSSEIWgWTjdR7OLts8tvF/kUWwcRLZxCGLMOHOQxpJM4rG0cyI+PeDq3vOPXd0zjfnPs7MvcwN4Lk1mf7JRJyMiFeTiPH68iQihqqpwYjztfWebm7k0imJSuW/XyXVdZ5sbuSi6TWp4/XMbyPikxcjTmX21ltaW1+cKxTyK/X8dHnp+nRpbf30taW5hfxCfvnszOzsmXN/OXf28GL95v76iYev/euP75//7oXf3Hvl0yTOx4l6WXMch2UyJuvvyVD6Fu7wz8OurM+SfjeAZ5LumgO1vTxOxngMVFNtjPayZQBAt9yKiEpnXu5wfQDgyEl2nv/vD/atJQBAbzS+B3iyuZFrTP39RqK3Hv0jIo7V4m9c36yVDNav2R2rXgcde5LsuDKSRMTEIdQ/GRFvf3jp3XSKttchRw6hJoCdbt+JiCsTk3uP/8meexY69af9Ciu1Y9rkrsXP2/kH+umjdPzz11bjv8zW+CdajH9GWuy7z+LH9//Mg0Oopq10/Pf3pnvbnjbFXzcxUM/9ojrmG0quXivk02PbLyNiKoZG0vxMddXWd0FNPf7+cbv6m8d/X7/+/3fS+tP59hqZB4O7hn/zc+W5nxp3w6M7Eb8bbBV/stX/SZvx78UD1vHvv730VruyNP403sa0N/7uqtyN+EPL/t/uy2Tf+xOnq5vDdGOjaOGDz98ca1f/dv+PVOdp/Y3PAr2Q9v/Y/vFPJM33a5Y6r+Ozu+Mftytr3v5bx996+x9O/ldND9eX3Zwrl1dmIoaT/+xdfmb7tY18Y/00/qnft97/223/mfq9sVe2cvsbfPjle/V/1TL+qtvt4u+uNP75jvp/n0Sl/ppdRfeeLg60q/9g/T9bTU3Vlxzk+LdPSy81L3nmNw4AAAAAAAAAAAAAAAAAAAAAAAAAOpCJiBORZLJb6Uwmm609w/vXMZYpFEvlU1eLq8vzUX1W9kQMZRo/dTne9HuoM/Xfw2/kz+zK/zkifhURb4yMVvPZXLEw3+/gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDu+M7n/99KZ9lsreyLkX63DgDommP9bgAA0HPO/wDw/Ons/D/atXYAAL3T8ef/StKdhgAAPXPg8/+V7rYDAOgd1/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADososXLqRT5dvNjVyan7+xtrpYvHF6Pl9azC6t5rK54sr17EKxuFDIZ3PFpbb/6HZtVigWr8/G8urN6XK+VJ4ura1fXiquLpcvX1uaW8hfzg/1LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLjS2vriXKGQX5HYNzF6NJpxZBKDcSSa8bNPDPet9uajxGj/DlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9wPAQAA//8zpCOb") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 7m41.737332192s ago: executing program 8 (id=1112): syz_open_dev$dri(0x0, 0x3ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 7m40.072231554s ago: executing program 8 (id=1124): r0 = gettid() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000008ebc, 0x1) 7m39.842631057s ago: executing program 36 (id=1124): r0 = gettid() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000008ebc, 0x1) 16.484872739s ago: executing program 4 (id=2412): syz_open_dev$cec(0x0, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 16.45506658s ago: executing program 7 (id=2413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffff7}}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1fff) r3 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @a}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000002500)='./file2\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f000001c000)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000080)=""/43, 0x2b) getdents(r7, 0xfffffffffffffffd, 0xbb) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x5a, 0x1}, 0x14}}, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f00000010c0)={[{@rootdir={'rootdir', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@umask={'umask', 0x3d, 0x3}}, {@nostrict}, {@uid_forget}, {@umask}]}, 0x1, 0xc4a, &(0x7f0000000300)="$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") symlink(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='./control\x00') 16.218386673s ago: executing program 6 (id=2414): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x0, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r2, 0x9) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) 13.192671009s ago: executing program 4 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f00000006c0)={@multicast, @random="eb3e18160747", @void, {@generic={0x88a2}}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) 12.882044964s ago: executing program 7 (id=2417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000000009500000000000000b2cc830810b519e3e8ddb8d77b502651aab8126fafac8ea8d8bd897231715ffa806d90d10a1b518487cd2489eb4e1c89e944cd14f5699e06689d47eb5b9687a1d1d5c620"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 11.643112733s ago: executing program 6 (id=2418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000000009500000000000000b2cc830810b519e3e8ddb8d77b502651aab8126fafac8ea8d8bd897231715ffa806d90d10a1b518487cd2489eb4e1c89e944cd14f5699e06689d47eb5b9687a1d1d5c620"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 11.479230145s ago: executing program 9 (id=2419): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.471454345s ago: executing program 0 (id=2420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000000009500000000000000b2cc830810b519e3e8ddb8d77b502651aab8126fafac8ea8d8bd897231715ffa806d90d10a1b518487cd2489eb4e1c89e944cd14f5699e06689d47eb5b9687a1d1d5c620"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) 10.246696944s ago: executing program 6 (id=2421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffff7}}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1fff) r3 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @a}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000002500)='./file2\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f000001c000)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000080)=""/43, 0x2b) getdents(r7, 0xfffffffffffffffd, 0xbb) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x5a, 0x1}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f00000010c0)={[{@rootdir={'rootdir', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@umask={'umask', 0x3d, 0x3}}, {@nostrict}, {@uid_forget}, {@umask}]}, 0x1, 0xc4a, &(0x7f0000000300)="$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") 9.992896838s ago: executing program 7 (id=2422): syz_open_dev$cec(0x0, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 9.025012403s ago: executing program 0 (id=2423): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@can_newroute={0x28, 0x18, 0x400, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000011) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 8.871888605s ago: executing program 4 (id=2424): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d000000950000000000000088f4756552cd36f647e61979a9763ce061c04cd7c926e5e466c67f9d2828487e0a32cc42cc6e37cdf5afb02c7eae43d02f989a44"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x36, 0x0, &(0x7f0000000300)="e02742e80f1c335a9782762f86dda2741eb6a138cfb57c6a7782662a6ea2ce437d56363ee453a8de0d20cd2b6814cac5e5d6433a9390", 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x5, 0xfffa}, 0x3a, [0x8000, 0xc957, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d36, 0x4000004, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x1, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0x0, 0x80008071, 0x3, 0x80000000, 0x1, 0x407, 0x7ff, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0xff, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0xb0f, 0xf0000000, 0x8200012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x2, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x80420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0x2, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x0, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x40007, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xf, 0x7, 0x9, 0x6, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0xffffffff, 0x5, 0x3e7, 0xb, 0x5, 0x8002, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0xc, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x200005, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7a, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) 8.164819266s ago: executing program 6 (id=2425): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0xfffffffffffffff9, 0x2, 0x8001, 0x2, [0x7, 0x12ae1acd, 0x7, 0x28]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(0x0, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3}) 8.067511567s ago: executing program 9 (id=2426): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0xfffffffffffffff9, 0x2, 0x8001, 0x2, [0x7, 0x12ae1acd, 0x7, 0x28]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(0x0, 0x0) 7.118010382s ago: executing program 6 (id=2427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000000009500000000000000b2cc830810b519e3e8ddb8d77b502651aab8126fafac8ea8d8bd897231715ffa806d90d10a1b518487cd2489eb4e1c89e944cd14f5699e06689d47eb5b9687a1d1d5c620"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 7.066890032s ago: executing program 9 (id=2428): syz_open_dev$vim2m(0x0, 0x0, 0x2) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat(0xffffffffffffff9c, 0x0, 0x300, 0xba) fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) accept(r2, &(0x7f0000000240)=@qipcrtr, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB="20199e"], 0x16) 6.983649204s ago: executing program 0 (id=2429): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x0, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = dup(0xffffffffffffffff) bind$bt_l2cap(r2, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(0xffffffffffffffff, 0x9) accept4$vsock_stream(r2, 0x0, 0x0, 0x80000) 6.954490804s ago: executing program 7 (id=2430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000000009500000000000000b2cc830810b519e3e8ddb8d77b502651aab8126fafac8ea8d8bd897231715ffa806d90d10a1b518487cd2489eb4e1c89e944cd14f5699e06689d47eb5b9687a1d1d5c620"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 5.987331479s ago: executing program 0 (id=2431): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x22a441, 0x1, 0x30}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127adff9f48a8854702b889321dfefd5644a03e0e41fb1cd1e442ac39d59aa0370071b34de016c447989af4c7d374e269dcbc1ce5f7083363d5bb2641018094b1721358f7a6c82f35dd9ed03c7be3fc46e5ef7b1fde49376ecde0494076cbe41c8292de99cc323303fda797e0704d3143999a0f53c8c056f2d7c2614c1bd977cc3e42e07548870d6bf096bf0369ee6a3f85cb27ec069f135e88005eb6147c3c08e1c787c9b5f9579653b876d44f3eb55573068fd1355b6fb755d1a72cb8eddfb7928f40f81e88e41bd2b3477299f540275d5107cd0dcb493a6f84ddbb9b43a60169c9ce7abb46e2d65a662a4e48cfafe180fbad39ee09548985149d100a6df90948f173ee8d7884fe5a916395d9631d7c55a09db75724229f3f492aca7c60e7c0984e5e05d555248874628cf294c6e1ad720e6f60662754e716d8e7f27b1321776768a8e4fd3abbeb3a23252a5e08b1f6b6e407cc69b8ed030f713f698db531f40f6082fce8f82eb6b90d7dcb33bd3cbcbc797d5597c444173c4455da38ffd93a45d756d158003c61c9d6e7e45a127a457172ccbbe9f2eadd4beb591f59ee37e3f23e858241463bb1d55b7ca1e19b84d1b077c7d6c3f942899a63dca8d63034da73146cc0e29ad541aff15049154a2c6ebe5b25b62833f09424bdabc08ffff5fff9cd35db4b3a9136ff557d88f68b8dc840e5edd3a9bf554986d3f706a1b962036d8f08e3d4cb9697c012f7be5bc00e77c89e796ee7d43a8c6ac172f262bc69517cc0978570280c2992c597ffa2ba8efc8b243b03b7f16942bf1e071de3dd4fa45a965946500d44fb10709fa8d4f1267077aa7afc2d32bc830e328762ade9f9d9a3b6835074eeffefbb98a45d688a0b76944e6fc4f805c912f966465266d4f43d2e70c65d6c5b0bddb1310c294e1b69b6f761bc4eda8b64121def17e864efc4ed59ca6973831827c77c1b27d50256341dd36e5e64cb78b509911e9cf36cc5b807648f119309f6fd403031434cf60873ce7582673581388cad04103e6b228d176ab09ed16d3d359fe02be3c014aefa3e7bca21ba3b7a5f981a375d0b920533936f8fc8afa3cc0156a902fca84745560fd50afd613d3f4482ec69683eb0ab3b78a106089797f6cbf00d40b2330be8a3e3c7a2838da551ba637cad6f81324348bcf7c65a9ef74999c8c4a8e96c50ec92becf9f08cf474fa597c910ad80a916cdfa6e61ea980875b130171472c760c6cb664f79406ddb74968e3f38e66320bd504ba4c4f25345191c8d3e758559db194781674c9dd02d84c04322b59924873c7092d01e9f45b98895769f35421a76f016e57ad16196d22b701b3639bc85b58b344a447e566b465cf92f6e160eeacfb0a8827480e1e4a9584e0e3984860c7b4cd042b8a5cb54c035be9a5683ebf4997e9dd289dc7d59bb5f2712eacb84031a02e6de31ba4fa3fb82b6106e76b4feed2d890544e7579f729c0f8af00cdea57f77793182e976be43d7158632deb9b154fbd8aa37fd2cbebfcae76014cbeb72c30bdda2dd95d75ed9dfe3f162d22af877bed110fddcb42e48b69fe34f97a0f00d094e962c5fa7eba412e63d57db086bdc6a2445c20dda5880dcaf3d9ad886652a1d2f1ce20f11c6de0481bf2005d0e605db4b4cd7c900f60a36825f4d5c7da23cb868ec", 0x4c2}], 0x1}, 0x20000044) syz_open_dev$tty20(0xc, 0x4, 0x1) 5.792544582s ago: executing program 4 (id=2432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000000009500000000000000b2cc830810b519e3e8ddb8d77b502651aab8126fafac8ea8d8bd897231715ffa806d90d10a1b518487cd2489eb4e1c89e944cd14f5699e06689d47eb5b9687a1d1d5c620"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 4.527038631s ago: executing program 0 (id=2433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000000009500000000000000b2cc830810b519e3e8ddb8d77b502651aab8126fafac8ea8d8bd897231715ffa806d90d10a1b518487cd2489eb4e1c89e944cd14f5699e06689d47eb5b9687a1d1d5c620"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 4.523566831s ago: executing program 7 (id=2434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f00000006c0)={@multicast, @random="eb3e18160747", @void, {@generic={0x88a2}}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) 1.693850074s ago: executing program 0 (id=2435): syz_open_dev$cec(0x0, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) umount2(0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 1.693038644s ago: executing program 4 (id=2436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffff7}}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1fff) r3 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @a}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000002500)='./file2\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f000001c000)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000080)=""/43, 0x2b) getdents(r7, 0xfffffffffffffffd, 0xbb) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x5a, 0x1}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) symlink(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='./control\x00') 1.683973224s ago: executing program 9 (id=2437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = accept(r1, &(0x7f0000001700)=@ax25={{}, [@null, @default, @default, @rose, @default, @remote, @remote, @default]}, &(0x7f00000012c0)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @private2, 0xbd64}}, 0xc, 0x4df}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001ac0)=@sack_info={r4, 0x736, 0x4}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 1.32083695s ago: executing program 9 (id=2438): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@can_newroute={0x28, 0x18, 0x400, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000011) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 878.779686ms ago: executing program 7 (id=2439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = accept(r1, &(0x7f0000001700)=@ax25={{}, [@null, @default, @default, @rose, @default, @remote, @remote, @default]}, &(0x7f00000012c0)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @private2, 0xbd64}}, 0xc, 0x4df}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001ac0)=@sack_info={r4, 0x736, 0x4}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 872.594586ms ago: executing program 4 (id=2440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = accept(r1, &(0x7f0000001700)=@ax25={{}, [@null, @default, @default, @rose, @default, @remote, @remote, @default]}, &(0x7f00000012c0)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @private2, 0xbd64}}, 0xc, 0x4df}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000001ac0)=@sack_info={r5, 0x736, 0x4}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 32.749359ms ago: executing program 9 (id=2441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x0, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = dup(0xffffffffffffffff) bind$bt_l2cap(r2, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(0xffffffffffffffff, 0x9) accept4$vsock_stream(r2, 0x0, 0x0, 0x80000) 0s ago: executing program 6 (id=2442): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d000000950000000000000088f4756552cd36f647e61979a9763ce061c04cd7c926e5e466c67f9d2828487e0a32cc42cc6e37cdf5afb02c7eae43d02f989a44"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x36, 0x0, &(0x7f0000000300)="e02742e80f1c335a9782762f86dda2741eb6a138cfb57c6a7782662a6ea2ce437d56363ee453a8de0d20cd2b6814cac5e5d6433a9390", 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x5, 0xfffa}, 0x3a, [0x8000, 0xc957, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d36, 0x4000004, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x1, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0x0, 0x80008071, 0x3, 0x80000000, 0x1, 0x407, 0x7ff, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0xff, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0xb0f, 0xf0000000, 0x8200012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x2, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x80420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0x2, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x0, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x40007, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xf, 0x7, 0x9, 0x6, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0xffffffff, 0x5, 0x3e7, 0xb, 0x5, 0x8002, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0xc, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x200005, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7a, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) kernel console output (not intermixed with test programs): 0837][ T7019] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 430.194566][ T7019] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 430.217219][ T7019] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 430.238352][ T7019] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 430.258296][ T7019] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 430.284159][ T7019] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 430.576426][ T7979] usb 8-1: config 0 has no interfaces? [ 430.656561][ T7979] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 430.683806][ T7979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 430.726640][ T7979] usb 8-1: SerialNumber: syz [ 430.753461][ T7979] usb 8-1: config 0 descriptor?? [ 431.119241][ T7979] usb 8-1: USB disconnect, device number 11 [ 431.131982][ T6015] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.235012][ T6015] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.336617][ T6015] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.434794][ T6015] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.519547][ T8975] loop4: detected capacity change from 0 to 32768 [ 432.665278][ T8975] XFS (loop4): Mounting V5 Filesystem [ 432.741855][ T8979] chnl_net:caif_netlink_parms(): no params data found [ 432.794067][ T9006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 433.024333][ T8975] XFS (loop4): Ending clean mount [ 433.059652][ T8975] XFS (loop4): Quotacheck needed: Please wait. [ 433.114911][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.128999][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.165787][ T8979] device bridge_slave_0 entered promiscuous mode [ 433.210930][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.241703][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.301029][ T8975] XFS (loop4): Quotacheck: Done. [ 433.301850][ T8979] device bridge_slave_1 entered promiscuous mode [ 433.513971][ T8979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.541268][ T4175] XFS (loop4): Unmounting Filesystem [ 433.571617][ T8979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.769274][ T8979] team0: Port device team_slave_0 added [ 433.841060][ T8979] team0: Port device team_slave_1 added [ 434.077545][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.095297][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.136236][ T7424] Bluetooth: hci3: command 0x0409 tx timeout [ 434.156187][ T8979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.259692][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.267812][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.369336][ T8979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.482578][ T6015] device hsr_slave_0 left promiscuous mode [ 434.500324][ T6015] device hsr_slave_1 left promiscuous mode [ 434.555090][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.586363][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.615398][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.643231][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.676980][ T6015] device bridge_slave_1 left promiscuous mode [ 434.716433][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.809230][ T6015] device bridge_slave_0 left promiscuous mode [ 434.816151][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.844396][ T6015] device veth1_macvtap left promiscuous mode [ 434.861440][ T6015] device veth0_macvtap left promiscuous mode [ 434.876511][ T6015] device veth1_vlan left promiscuous mode [ 434.895446][ T6015] device veth0_vlan left promiscuous mode [ 435.259259][ T9060] loop7: detected capacity change from 0 to 1024 [ 435.405383][ T9060] EXT4-fs (loop7): Ignoring removed nobh option [ 435.413111][ T9060] EXT4-fs (loop7): Ignoring removed bh option [ 435.420024][ T9060] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 435.975003][ T9060] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 436.198769][ T7424] Bluetooth: hci3: command 0x041b tx timeout [ 436.449447][ T9069] loop4: detected capacity change from 0 to 8192 [ 436.512320][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 436.546233][ T9069] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 436.607879][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 436.616927][ T9069] REISERFS (device loop4): using ordered data mode [ 436.666373][ T9069] reiserfs: using flush barriers [ 436.709870][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.738264][ T9069] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 436.788766][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.815614][ T9069] REISERFS (device loop4): checking transaction log (loop4) [ 436.849899][ T9069] REISERFS (device loop4): Using r5 hash to sort names [ 436.896253][ T9069] REISERFS (device loop4): using 3.5.x disk format [ 436.905535][ T9069] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 437.099251][ T6015] bond0 (unregistering): Released all slaves [ 437.231612][ T8979] device hsr_slave_0 entered promiscuous mode [ 437.263496][ T8979] device hsr_slave_1 entered promiscuous mode [ 437.294570][ T8979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.328688][ T8979] Cannot create hsr debugfs directory [ 437.783198][ T9081] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 437.789308][ T9074] loop7: detected capacity change from 0 to 40427 [ 437.938209][ T8979] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 438.001449][ T8979] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 438.011263][ T9074] F2FS-fs (loop7): invalid crc value [ 438.043146][ T8979] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 438.069938][ T9074] F2FS-fs (loop7): Found nat_bits in checkpoint [ 438.113269][ T8979] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 438.268275][ T5764] Bluetooth: hci3: command 0x040f tx timeout [ 438.349025][ T9074] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 438.540243][ T5298] attempt to access beyond end of device [ 438.540243][ T5298] loop7: rw=2049, want=45104, limit=40427 [ 438.680628][ T8979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.764063][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 438.801983][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 438.838405][ T8979] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.878056][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.900160][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 438.980448][ T630] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.989635][ T630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.109227][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 439.151891][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 439.183784][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.227627][ T630] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.236507][ T630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.322253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 439.379957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 439.481492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 439.516012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 439.575237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 439.605400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 439.643919][ T9114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1152'. [ 439.686661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 439.714829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 439.755850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.774988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 439.825643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.879872][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 440.191474][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.201385][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.346652][ T7424] Bluetooth: hci3: command 0x0419 tx timeout [ 440.456996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.478638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.534115][ T8979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.772288][ T9111] loop7: detected capacity change from 0 to 32768 [ 440.983762][ T9111] XFS (loop7): Mounting V5 Filesystem [ 441.117658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.130228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.157612][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.210561][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.281838][ T8979] device veth0_vlan entered promiscuous mode [ 441.300355][ T9111] XFS (loop7): Ending clean mount [ 441.329323][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.358897][ T9111] XFS (loop7): Quotacheck needed: Please wait. [ 441.392060][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.465692][ T8979] device veth1_vlan entered promiscuous mode [ 441.521271][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 441.556924][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 441.588264][ T9111] XFS (loop7): Quotacheck: Done. [ 441.677462][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 441.700779][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.774097][ T5298] XFS (loop7): Unmounting Filesystem [ 441.789602][ T8979] device veth0_macvtap entered promiscuous mode [ 441.876863][ T8979] device veth1_macvtap entered promiscuous mode [ 441.976630][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.050769][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.076333][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.126184][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.183126][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.204864][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.236032][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.276170][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.293867][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.305114][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.330262][ T8979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.342577][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.377185][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.408507][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.441691][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.487845][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.521513][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.560367][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.610300][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.649364][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.680101][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.712529][ T8979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.761339][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.783050][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 442.837822][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 442.873297][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.905171][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 442.948388][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 442.965386][ T9186] loop4: detected capacity change from 0 to 40427 [ 442.989475][ T8979] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.001847][ T8979] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.016981][ T8979] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.028849][ T8979] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.152784][ T9186] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 443.187346][ T9186] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 443.424871][ T4746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.665413][ T9186] F2FS-fs (loop4): Found nat_bits in checkpoint [ 443.834952][ T4746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.140290][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 444.221041][ T4746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.230271][ T9186] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 444.276544][ T4746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.290626][ T9224] loop7: detected capacity change from 0 to 512 [ 444.334111][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.379596][ T9186] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 444.433712][ T9186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 444.451439][ T9224] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 444.554980][ T9224] EXT4-fs (loop7): orphan cleanup on readonly fs [ 444.647200][ T9224] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.1164: Block bitmap for bg 0 marked uninitialized [ 444.816310][ T9224] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 444.867990][ T9224] EXT4-fs (loop7): 1 orphan inode deleted [ 444.874910][ T9224] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 445.013991][ T9224] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 445.035603][ T9246] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1177'. [ 445.063613][ T9186] attempt to access beyond end of device [ 445.063613][ T9186] loop4: rw=2049, want=78056, limit=40427 [ 445.102781][ T9246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1177'. [ 445.143211][ T9224] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 445.268121][ T9241] attempt to access beyond end of device [ 445.268121][ T9241] loop4: rw=2049, want=78344, limit=40427 [ 445.389456][ T9257] overlayfs: failed to clone upperpath [ 445.531416][ T9260] loop9: detected capacity change from 0 to 7 [ 445.583639][ T6477] Dev loop9: unable to read RDB block 7 [ 445.616535][ T6477] loop9: unable to read partition table [ 445.656701][ T6477] loop9: partition table beyond EOD, truncated [ 445.709685][ T9260] Dev loop9: unable to read RDB block 7 [ 445.732618][ T9260] loop9: unable to read partition table [ 445.746337][ T9260] loop9: partition table beyond EOD, truncated [ 445.777944][ T9260] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 447.336248][ T7423] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 447.514147][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1198'. [ 447.716753][ T7423] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 447.740205][ T7423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.802805][ T7423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.840737][ T7423] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 447.996621][ T7423] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 448.027548][ T7423] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 448.056980][ T7423] usb 10-1: Manufacturer: syz [ 448.292591][ T7423] usb 10-1: config 0 descriptor?? [ 448.659694][ T9340] overlayfs: failed to clone upperpath [ 448.816709][ T9312] loop4: detected capacity change from 0 to 32768 [ 448.880036][ T9312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1182 (9312) [ 448.900072][ T7423] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 448.951155][ T7423] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 449.002766][ T7423] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 449.125177][ T9312] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 449.167054][ T9312] BTRFS info (device loop4): using free space tree [ 449.215487][ T9312] BTRFS info (device loop4): has skinny extents [ 449.679831][ T7985] usb 10-1: USB disconnect, device number 2 [ 450.313134][ T9312] BTRFS info (device loop4): enabling ssd optimizations [ 450.618575][ T9397] overlayfs: failed to clone upperpath [ 450.681928][ T7982] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 451.056519][ T7982] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.097872][ T7982] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.206342][ T7982] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.230117][ T7982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.261728][ T7982] usb 10-1: SerialNumber: syz [ 451.315593][ T7415] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 451.599335][ T7982] usb 10-1: 0:2 : does not exist [ 451.604632][ T7982] usb 10-1: unit 11 not found! [ 451.623503][ T7982] usb 10-1: USB disconnect, device number 3 [ 451.707278][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 451.796630][ T7415] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 451.815183][ T7415] usb 8-1: can't read configurations, error -71 [ 451.849064][ T6477] udevd[6477]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.460998][ T9453] loop7: detected capacity change from 0 to 512 [ 452.567613][ T9453] EXT4-fs (loop7): orphan cleanup on readonly fs [ 452.647379][ T9453] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1224: bg 0: block 248: padding at end of block bitmap is not set [ 452.720990][ T9460] netlink: 'syz.4.1226': attribute type 4 has an invalid length. [ 452.784730][ T9453] Quota error (device loop7): write_blk: dquota write failed [ 452.806438][ T9453] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 452.864107][ T9453] EXT4-fs error (device loop7): ext4_acquire_dquot:6204: comm syz.7.1224: Failed to acquire dquot type 1 [ 453.050899][ T9453] EXT4-fs (loop7): 1 truncate cleaned up [ 453.080982][ T9453] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 453.190513][ T9453] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 454.059013][ T9453] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 454.094399][ T9479] Quota error (device loop7): find_block_dqentry: Quota for id 131074 referenced but not present [ 454.124171][ T9479] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 131074 [ 454.168632][ T9479] EXT4-fs error (device loop7): ext4_acquire_dquot:6204: comm syz.7.1224: Failed to acquire dquot type 1 [ 454.277985][ T9459] loop9: detected capacity change from 0 to 32768 [ 454.368083][ T9459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1225 (9459) [ 454.590118][ T9459] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 454.600594][ T9459] BTRFS info (device loop9): using free space tree [ 454.609313][ T9459] BTRFS info (device loop9): has skinny extents [ 454.803425][ T9459] BTRFS info (device loop9): enabling ssd optimizations [ 456.929206][ T9550] overlayfs: failed to resolve './file1': -2 [ 457.188869][ T9556] device syzkaller1 entered promiscuous mode [ 457.366258][ T7982] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 457.630098][ T9571] loop2: detected capacity change from 0 to 7 [ 457.796215][ T6477] Dev loop2: unable to read RDB block 7 [ 457.982354][ T6477] loop2: unable to read partition table [ 458.219961][ T6477] loop2: partition table beyond EOD, truncated [ 458.491709][ T9571] Dev loop2: unable to read RDB block 7 [ 458.515079][ T9571] loop2: unable to read partition table [ 458.536524][ T9571] loop2: partition table beyond EOD, truncated [ 458.550053][ T9571] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 459.060198][ T7982] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 459.113445][ T7982] usb 10-1: config 0 has no interface number 0 [ 459.164619][ T7982] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 459.229505][ T7982] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 459.245746][ T7982] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.258925][ T7982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.298199][ T7982] usb 10-1: config 0 descriptor?? [ 459.316671][ T9553] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 459.369295][ T7982] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 459.625209][ T7982] usb 10-1: USB disconnect, device number 4 [ 460.104461][ T9596] loop7: detected capacity change from 0 to 40427 [ 460.150350][ T9596] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 460.159291][ T9596] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 460.180836][ T9596] F2FS-fs (loop7): Found nat_bits in checkpoint [ 460.244829][ T9596] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 460.413613][ T9596] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 460.421088][ T9596] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 460.615175][ T9596] attempt to access beyond end of device [ 460.615175][ T9596] loop7: rw=2049, want=78344, limit=40427 [ 460.672282][ T9596] attempt to access beyond end of device [ 460.672282][ T9596] loop7: rw=2049, want=45104, limit=40427 [ 460.719985][ T9596] attempt to access beyond end of device [ 460.719985][ T9596] loop7: rw=2049, want=45112, limit=40427 [ 463.470805][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1281'. [ 463.576511][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1281'. [ 466.069277][ T1111] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 466.526548][ T1111] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 466.551765][ T1111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.584871][ T9734] loop7: detected capacity change from 0 to 32768 [ 466.606220][ T1111] usb 10-1: config 0 descriptor?? [ 467.201845][ T9734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1296 (9734) [ 467.394377][ T9734] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 467.451935][ T9734] BTRFS info (device loop7): force clearing of disk cache [ 467.476473][ T9734] BTRFS info (device loop7): enabling auto defrag [ 467.507765][ T9734] BTRFS info (device loop7): max_inline at 0 [ 467.514926][ T1111] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 467.535246][ T9734] BTRFS info (device loop7): enabling disk space caching [ 467.576313][ T9734] BTRFS info (device loop7): disk space caching is enabled [ 467.583569][ T9734] BTRFS info (device loop7): has skinny extents [ 467.961361][ T1111] usb 10-1: USB disconnect, device number 5 [ 467.983604][ T9768] fido_id[9768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:04F3:0755.000D/report_descriptor': No such file or directory [ 468.103882][ T9734] BTRFS info (device loop7): enabling ssd optimizations [ 468.133295][ T9734] BTRFS info (device loop7): clearing free space tree [ 468.151246][ T9734] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 468.165225][ T9734] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 468.602343][ T9806] vivid-001: disconnect [ 468.716294][ T9806] vivid-001: reconnect [ 469.006580][ T1111] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 469.018806][ T1280] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 469.268256][ T1111] usb 10-1: Using ep0 maxpacket: 16 [ 469.386734][ T1111] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 469.582741][ T1111] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 469.599937][ T1111] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.644500][ T1111] usb 10-1: Product: syz [ 469.658011][ T1111] usb 10-1: Manufacturer: syz [ 469.664907][ T1111] usb 10-1: SerialNumber: syz [ 469.725143][ T1111] usb 10-1: config 0 descriptor?? [ 469.796322][ T1111] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 469.847975][ T1111] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 470.436266][ T1111] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 471.166488][ T1111] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 471.199582][ T1111] em28xx 10-1:0.0: board has no eeprom [ 471.326490][ T1111] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 471.344793][ T1111] em28xx 10-1:0.0: dvb set to bulk mode. [ 471.369185][ T4172] em28xx 10-1:0.0: Binding DVB extension [ 471.406365][ T1111] usb 10-1: USB disconnect, device number 6 [ 471.448427][ T1111] em28xx 10-1:0.0: Disconnecting em28xx [ 471.565527][ T4172] em28xx 10-1:0.0: Registering input extension [ 471.607201][ T1111] em28xx 10-1:0.0: Closing input extension [ 471.764800][ T1111] em28xx 10-1:0.0: Freeing device [ 471.785428][ T9893] loop9: detected capacity change from 0 to 16 [ 471.849417][ T9893] erofs: (device loop9): mounted with root inode @ nid 36. [ 471.951266][ T9872] loop4: detected capacity change from 0 to 32768 [ 471.956703][ T9893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 472.187899][ T9872] XFS (loop4): Mounting V5 Filesystem [ 472.300214][ T9872] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 472.383670][ T9872] XFS (loop4): Starting recovery (logdev: internal) [ 472.481508][ T9872] XFS (loop4): Ending recovery (logdev: internal) [ 472.730618][ T26] audit: type=1800 audit(1747675508.056:127): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1321" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 472.844467][ T26] audit: type=1804 audit(1747675508.166:128): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1321" name="/newroot/226/file1/file1" dev="loop4" ino=4422 res=1 errno=0 [ 473.087205][ T4175] XFS (loop4): Unmounting Filesystem [ 474.045140][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 474.068551][ T9984] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 474.097797][ T9984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 474.141077][ T9984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.173971][ T9984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.219099][ T9984] device bridge_slave_0 left promiscuous mode [ 474.252942][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.299893][ T9984] device bridge_slave_1 left promiscuous mode [ 474.316199][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.350009][ T9984] bond0: (slave bond_slave_0): Releasing backup interface [ 474.386233][ T9984] bond0: (slave bond_slave_1): Releasing backup interface [ 474.589635][ T9984] team0: Port device team_slave_0 removed [ 474.625430][ T9984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.664090][ T9984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.684084][ T9984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.706281][ T9984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.523756][ T9984] bond0: (slave wlan1): Releasing backup interface [ 477.209512][T10023] loop7: detected capacity change from 0 to 4096 [ 477.289973][T10023] EXT4-fs (loop7): Test dummy encryption mode enabled [ 477.365246][T10023] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 477.653770][T10038] overlayfs: failed to resolve './file1': -2 [ 480.014582][T10070] kvm: pic: non byte read [ 480.022811][T10070] kvm: pic: non byte read [ 480.025101][T10071] loop4: detected capacity change from 0 to 4096 [ 480.035012][T10070] kvm: pic: non byte read [ 480.069901][T10070] kvm: pic: non byte read [ 480.094940][T10070] kvm: pic: non byte read [ 480.122909][T10070] kvm: pic: level sensitive irq not supported [ 480.123065][T10070] kvm: pic: non byte read [ 480.146277][T10081] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.154820][T10070] kvm: pic: non byte read [ 480.177666][T10070] kvm: pic: non byte read [ 480.203430][T10070] kvm: pic: single mode not supported [ 480.203453][T10070] kvm: pic: level sensitive irq not supported [ 480.236368][T10070] kvm: pic: non byte read [ 480.356352][ T1111] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 480.726538][ T1111] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 480.764883][ T1111] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.027211][ T7415] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 481.044804][ T1111] usb 8-1: config 0 descriptor?? [ 481.316426][ T7415] usb 10-1: Using ep0 maxpacket: 8 [ 481.594851][T10096] loop2: detected capacity change from 0 to 7 [ 481.596616][ T7415] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 481.620838][T10096] Dev loop2: unable to read RDB block 7 [ 481.636617][T10096] loop2: AHDI p1 p2 p3 [ 481.640875][T10096] loop2: partition table partially beyond EOD, truncated [ 481.641123][ T7415] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.678468][T10096] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 481.686883][ T7415] usb 10-1: Product: syz [ 481.697598][T10096] loop2: p2 size 150995456 extends beyond EOD, truncated [ 481.705071][ T7415] usb 10-1: Manufacturer: syz [ 481.721889][ T7415] usb 10-1: SerialNumber: syz [ 481.733993][ T7415] usb 10-1: config 0 descriptor?? [ 481.930925][ T7586] udevd[7586]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 481.959450][ T6392] udevd[6392]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 482.026560][ T7415] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 482.422847][T10103] overlayfs: failed to clone upperpath [ 484.010864][T10123] binder: 10122:10123 ioctl c0306201 200000000a40 returned -14 [ 484.018706][ T7415] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 484.054983][ T7415] usb 10-1: USB disconnect, device number 7 [ 484.096246][ T1111] usb 8-1: Cannot set autoneg [ 484.102566][ T1111] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 484.159300][ T1111] usb 8-1: USB disconnect, device number 14 [ 484.384956][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1396'. [ 486.401548][T10161] loop9: detected capacity change from 0 to 40427 [ 486.505211][T10161] F2FS-fs (loop9): build fault injection attr: rate: 690, type: 0x1ffff [ 486.537740][T10161] F2FS-fs (loop9): invalid crc value [ 486.568354][T10161] F2FS-fs (loop9): Found nat_bits in checkpoint [ 486.646482][T10161] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 486.689743][T10161] attempt to access beyond end of device [ 486.689743][T10161] loop9: rw=524288, want=45072, limit=40427 [ 486.702322][T10161] attempt to access beyond end of device [ 486.702322][T10161] loop9: rw=0, want=45072, limit=40427 [ 486.778063][T10161] attempt to access beyond end of device [ 486.778063][T10161] loop9: rw=2049, want=45104, limit=40427 [ 487.842114][T10182] device syzkaller0 entered promiscuous mode [ 488.285179][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 488.738043][T10193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.178117][ T1108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 489.496180][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 490.196232][ T1108] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 490.216202][ T1108] usb 5-1: config 0 has no interface number 0 [ 490.223067][ T1108] usb 5-1: config 0 interface 184 has no altsetting 0 [ 490.396507][ T1108] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 490.435405][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.448687][ T1108] usb 5-1: Product: syz [ 490.452898][ T1108] usb 5-1: Manufacturer: syz [ 490.466183][ T1108] usb 5-1: SerialNumber: syz [ 490.491426][ T1108] usb 5-1: config 0 descriptor?? [ 490.537598][ T1108] smsc75xx v1.0.0 [ 490.626285][ T4266] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 490.711618][T10231] tipc: Started in network mode [ 490.726283][T10231] tipc: Node identity 063214c96441, cluster identity 4711 [ 490.733888][T10231] tipc: Enabled bearer , priority 0 [ 491.588452][T10227] tipc: Resetting bearer [ 491.666303][ T1108] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 491.695496][ T1108] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 491.717709][T10227] tipc: Disabling bearer [ 491.846522][ T4266] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.866796][ T4266] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.900076][ T4266] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.919823][ T4266] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.925948][T10250] loop7: detected capacity change from 0 to 1024 [ 492.009515][T10250] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 492.035633][T10250] EXT4-fs (loop7): Ignoring removed nobh option [ 492.066443][T10250] EXT4-fs (loop7): Ignoring removed bh option [ 492.072619][T10250] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 492.137165][T10250] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,data_err=abort,mblk_io_submit,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 492.198240][ T4266] usb 10-1: usb_control_msg returned -32 [ 492.203946][ T4266] usbtmc 10-1:16.0: can't read capabilities [ 492.247268][T10250] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3876: comm syz.7.1434: Allocating blocks 497-513 which overlap fs metadata [ 492.312678][T10257] EXT4-fs (loop7): pa ffff888074f17380: logic 64, phys. 177, len 21 [ 492.321878][T10257] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 492.712473][T10268] loop7: detected capacity change from 0 to 128 [ 492.752477][T10268] FAT-fs (loop7): Unrecognized mount option "18446744073709551615ÿTïabÞ¹à×ÓP¤‰»€º ’-‚œÙÏÅGHRl‹Ãe(PSLzœAÔiê}–õÌ™¸hKaAµU(VWêögÕI”ÿ·÷¢úéå&’Ë †+ b³àÍœ$O†F|¬—çžÂìK^/§G¡D(¤ÓoúT-²è1ïP@ÿÿ0177777777777777777777718446744073709551615" or missing value [ 492.781474][ T7982] usb 10-1: USB disconnect, device number 8 [ 493.776539][ T1108] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 493.820058][ T1108] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 493.869447][ T1108] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 493.904194][ T1108] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 493.946649][ T1108] usb 5-1: USB disconnect, device number 11 [ 495.492415][T10301] loop4: detected capacity change from 0 to 1024 [ 495.523759][T10301] EXT4-fs (loop4): Ignoring removed nobh option [ 495.530212][T10301] EXT4-fs (loop4): Ignoring removed bh option [ 495.594327][T10301] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nojournal_checksum,lazytime,jqfmt=vfsv0,grpquota,nobh,jqfmt=vfsold,bh,usrquota,,errors=continue. Quota mode: writeback. [ 495.594947][T10299] loop7: detected capacity change from 0 to 4096 [ 495.639794][ T26] audit: type=1800 audit(1747675530.956:129): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1449" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 495.672253][T10301] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.1449: Allocating blocks 497-513 which overlap fs metadata [ 495.687117][T10301] EXT4-fs (loop4): pa ffff888058f2c000: logic 256, phys. 385, len 8 [ 495.696136][T10301] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 495.820986][ T4175] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 495.894310][ T4175] Trying to write to read-only block-device loop4 [ 495.951366][T10299] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 495.976886][ T4175] Trying to write to read-only block-device loop4 [ 495.983572][ T4175] Trying to write to read-only block-device loop4 [ 496.028322][ T4175] Trying to write to read-only block-device loop4 [ 496.035366][ T4175] Trying to write to read-only block-device loop4 [ 496.042146][ T4175] Trying to write to read-only block-device loop4 [ 496.048752][ T4175] Trying to write to read-only block-device loop4 [ 496.055352][ T4175] Trying to write to read-only block-device loop4 [ 496.062010][ T4175] Trying to write to read-only block-device loop4 [ 496.100095][ T4175] Trying to write to read-only block-device loop4 [ 497.577346][T10331] tipc: Enabled bearer , priority 0 [ 499.029795][ T7415] tipc: Node number set to 274111400 [ 499.646548][T10331] device syzkaller0 entered promiscuous mode [ 499.940064][T10329] tipc: Resetting bearer [ 500.456789][T10329] tipc: Disabling bearer [ 501.630840][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.695939][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.348880][T10389] loop9: detected capacity change from 0 to 1024 [ 502.592286][T10389] EXT4-fs (loop9): Ignoring removed bh option [ 502.623277][T10389] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 503.427672][T10389] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 503.439183][T10389] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 503.476708][T10389] EXT4-fs (loop9): filesystem has both journal inode and journal device! [ 503.710420][T10405] overlayfs: failed to clone upperpath [ 504.007781][T10409] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1481'. [ 504.055827][T10413] tipc: Enabled bearer , priority 0 [ 504.156459][T10413] device syzkaller0 entered promiscuous mode [ 504.259790][T10412] tipc: Resetting bearer [ 504.374279][T10412] tipc: Disabling bearer [ 505.683688][T10445] overlayfs: failed to clone upperpath [ 506.286385][T10448] loop4: detected capacity change from 0 to 1024 [ 507.063898][T10459] loop7: detected capacity change from 0 to 128 [ 509.034374][T10476] delete_channel: no stack [ 509.149542][T10472] delete_channel: no stack [ 516.551767][T10555] loop9: detected capacity change from 0 to 256 [ 516.902768][T10559] loop7: detected capacity change from 0 to 2048 [ 517.747351][T10559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.807922][T10555] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 517.981306][T10555] exFAT-fs (loop9): hint_cluster is invalid (17) [ 518.106915][T10569] exFAT-fs (loop9): error, broken FAT chain. [ 518.189147][T10569] exFAT-fs (loop9): Filesystem has been set read-only [ 518.262950][T10569] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 8, err : -5) [ 518.443477][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 518.574052][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 8, err : -5) [ 519.177558][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.183593][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 8, err : -5) [ 519.235051][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.250634][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 9, err : -5) [ 519.281312][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.299605][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 10, err : -5) [ 519.380304][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.456958][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 11, err : -5) [ 519.496409][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.502473][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 12, err : -5) [ 519.516525][T10579] misc userio: Invalid payload size [ 519.539016][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.559468][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 13, err : -5) [ 519.616193][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.622309][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 14, err : -5) [ 519.636384][T10576] overlayfs: failed to resolve './file2': -2 [ 519.656202][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.662367][T10554] exFAT-fs (loop9): error, failed to bmap (inode : ffff888072fd3560 iblock : 15, err : -5) [ 519.696240][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.722380][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.728861][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.756165][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.782716][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.802602][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.829254][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.856456][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.881457][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.928615][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.969403][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 519.999681][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.029810][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.066285][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.106168][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.149145][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.172969][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.183610][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.211309][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.228687][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.240778][T10590] overlayfs: failed to clone upperpath [ 520.256177][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.262358][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.290302][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.318303][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.324440][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.342980][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.350924][ T26] audit: type=1326 audit(1747675555.676:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 520.386187][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.392327][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.421262][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.427822][ T26] audit: type=1326 audit(1747675555.686:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 520.466412][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.472958][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.475195][T10594] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=832 (1664 ns) > initial count (16 ns). Using initial count to start timer. [ 520.508060][ T26] audit: type=1326 audit(1747675555.696:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 520.533594][ T26] audit: type=1326 audit(1747675555.706:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 520.557316][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.563445][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.569991][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.576452][ T26] audit: type=1326 audit(1747675555.706:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 520.606263][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.613197][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.692233][T10601] fuse: Bad value for 'fd' [ 520.717052][ T26] audit: type=1326 audit(1747675555.706:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 520.766496][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.782967][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.811448][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.819838][ T26] audit: type=1326 audit(1747675555.706:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 520.849960][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.890472][ T26] audit: type=1326 audit(1747675555.706:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 520.937087][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 520.959637][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.206226][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.237011][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.273783][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.281111][ T26] audit: type=1326 audit(1747675555.706:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 521.328854][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.368366][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.374752][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.428984][ T26] audit: type=1326 audit(1747675555.706:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592e155969 code=0x7ffc0000 [ 521.486236][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.492302][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.506211][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.526219][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.532800][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.568043][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.574096][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.591700][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.600658][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.606758][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.623044][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.629154][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.646283][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.652337][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 521.666223][T10554] exFAT-fs (loop9): error, broken FAT chain. [ 522.090772][T10626] loop9: detected capacity change from 0 to 40427 [ 522.106272][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.204892][T10626] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x1ffff [ 522.223350][T10626] F2FS-fs (loop9): invalid crc value [ 522.271233][T10626] F2FS-fs (loop9): Found nat_bits in checkpoint [ 522.559706][T10626] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 522.910744][T10603] loop4: detected capacity change from 0 to 32768 [ 523.030868][T10626] overlayfs: failed to resolve './file2': -2 [ 523.141470][T10626] F2FS-fs (loop9) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2aa/0x530 [ 523.175510][ T6392] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (6392) [ 523.280470][ T8979] attempt to access beyond end of device [ 523.280470][ T8979] loop9: rw=2049, want=45120, limit=40427 [ 523.395692][T10645] serio: Serial port ttyS3 [ 524.867614][T10627] overlayfs: failed to clone upperpath [ 524.942492][T10671] loop7: detected capacity change from 0 to 8 [ 525.138221][T10671] squashfs: Unknown parameter '' [ 525.503954][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'. [ 526.698045][T10703] fuse: Bad value for 'fd' [ 529.167419][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1587'. [ 529.215120][T10743] device wlan0 entered promiscuous mode [ 529.236878][T10743] device wlan0 left promiscuous mode [ 529.463211][T10695] loop4: detected capacity change from 0 to 32768 [ 531.136312][ T4213] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 532.100335][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 532.161179][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.212592][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 532.258983][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 532.346979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.452900][ T7987] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 532.460777][ T4213] usb 5-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 532.476425][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.484667][ T4213] usb 5-1: Product: syz [ 532.516844][ T4213] usb 5-1: Manufacturer: syz [ 532.521493][ T4213] usb 5-1: SerialNumber: syz [ 532.549883][ T4213] usb 5-1: config 0 descriptor?? [ 532.595267][ T4213] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 532.637883][ T4213] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 532.766584][ T7987] usb 10-1: no configurations [ 532.771589][ T7987] usb 10-1: can't read configurations, error -22 [ 532.807711][ T4213] usb 5-1: USB disconnect, device number 12 [ 532.825235][ T4213] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 532.946262][ T7987] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 533.160862][T10778] loop7: detected capacity change from 0 to 64 [ 533.236500][ T7987] usb 10-1: no configurations [ 533.241392][ T7987] usb 10-1: can't read configurations, error -22 [ 533.261862][ T7987] usb usb10-port1: attempt power cycle [ 533.349068][T10778] attempt to access beyond end of device [ 533.349068][T10778] loop7: rw=0, want=1026, limit=64 [ 533.379844][T10778] Buffer I/O error on dev loop7, logical block 512, async page read [ 533.409869][T10778] attempt to access beyond end of device [ 533.409869][T10778] loop7: rw=0, want=113154, limit=64 [ 533.427660][T10781] loop4: detected capacity change from 0 to 64 [ 533.443510][T10778] Buffer I/O error on dev loop7, logical block 56576, async page read [ 533.686272][ T7987] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 533.846804][ T7987] usb 10-1: no configurations [ 533.880418][ T7987] usb 10-1: can't read configurations, error -22 [ 534.126558][ T7987] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 534.306456][ T7987] usb 10-1: device descriptor read/all, error -71 [ 534.337967][ T7987] usb usb10-port1: unable to enumerate USB device [ 534.819595][T10794] xt_CONNSECMARK: invalid mode: 0 [ 538.612423][T10823] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.628216][T10823] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.640434][T10823] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 538.651408][T10823] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.663167][T10823] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 538.673144][T10823] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 538.681055][T10823] UDF-fs: Scanning with blocksize 512 failed [ 538.693066][T10823] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.705139][T10823] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.716539][T10823] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 538.726931][T10823] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.738752][T10823] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 538.748492][T10823] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 538.756454][T10823] UDF-fs: Scanning with blocksize 1024 failed [ 538.764944][T10823] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.777263][T10823] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.789079][T10823] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 538.799676][T10823] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.811320][T10823] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 538.821175][T10823] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 538.829143][T10823] UDF-fs: Scanning with blocksize 2048 failed [ 538.837356][T10823] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 538.849680][T10823] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 538.860394][T10823] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 538.870148][T10823] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 538.877932][T10823] UDF-fs: Scanning with blocksize 4096 failed [ 538.884289][T10823] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 542.700089][T10844] loop9: detected capacity change from 0 to 32768 [ 544.286295][ T4266] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 544.576165][ T4266] usb 10-1: Using ep0 maxpacket: 8 [ 544.709773][T10878] loop7: detected capacity change from 0 to 32768 [ 544.836749][ T4266] usb 10-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 544.847212][ T4266] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.866297][ T4266] usb 10-1: config 0 descriptor?? [ 544.893856][T10878] XFS (loop7): Mounting V5 Filesystem [ 544.998831][T10878] XFS (loop7): Ending clean mount [ 545.095304][ T5298] XFS (loop7): Unmounting Filesystem [ 545.146295][ T4266] usb 10-1: string descriptor 0 read error: -71 [ 545.152611][ T4266] usb 10-1: Found UVC 0.00 device (2833:0201) [ 545.228547][ T4266] usb 10-1: No valid video chain found. [ 545.281996][ T4266] usb 10-1: USB disconnect, device number 13 [ 545.856182][T10910] loop4: detected capacity change from 0 to 32768 [ 546.064157][ T6477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (6477) [ 548.291314][T10934] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 548.341682][T10934] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.349130][T10934] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.150966][ T4172] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 551.195734][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 551.195750][ T26] audit: type=1326 audit(1747675586.516:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f0c45969 code=0x7ffc0000 [ 551.256575][ T4172] usb 10-1: config 1 interface 0 has no altsetting 0 [ 551.306728][ T26] audit: type=1326 audit(1747675586.566:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f73f0c45969 code=0x7ffc0000 [ 551.314455][ T4282] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 551.330508][ T26] audit: type=1326 audit(1747675586.566:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f0c45969 code=0x7ffc0000 [ 551.371822][ T26] audit: type=1326 audit(1747675586.566:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f73f0c45969 code=0x7ffc0000 [ 551.399814][ T26] audit: type=1326 audit(1747675586.616:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f0c45969 code=0x7ffc0000 [ 551.446438][ T26] audit: type=1326 audit(1747675586.616:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73f0c47887 code=0x7ffc0000 [ 551.456513][ T4172] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 551.509103][ T26] audit: type=1326 audit(1747675586.616:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f73f0c477fc code=0x7ffc0000 [ 551.571538][ T26] audit: type=1326 audit(1747675586.616:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f73f0c47734 code=0x7ffc0000 [ 551.673371][ T4172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.681920][ T26] audit: type=1326 audit(1747675586.616:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f73f0c47734 code=0x7ffc0000 [ 551.682108][ T4172] usb 10-1: Product: syz [ 551.708841][ T4172] usb 10-1: Manufacturer: syz [ 551.713690][ T4172] usb 10-1: SerialNumber: syz [ 551.746185][ T26] audit: type=1326 audit(1747675586.616:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.7.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f73f0c445ca code=0x7ffc0000 [ 552.632900][ T4172] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 552.811200][T10981] loop4: detected capacity change from 0 to 32768 [ 554.172023][ T4266] usb 10-1: USB disconnect, device number 14 [ 554.220274][ T4266] usblp0: removed [ 555.338993][ T7415] Bluetooth: hci3: command 0x0406 tx timeout [ 555.370659][T11016] orangefs_mount: mount request failed with -4 [ 555.887225][T11026] loop9: detected capacity change from 0 to 16 [ 556.310988][T11026] erofs: (device loop9): mounted with root inode @ nid 36. [ 556.585206][T11033] netlink: 'syz.4.1677': attribute type 10 has an invalid length. [ 556.707422][T11033] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 556.871146][T11039] bond0: (slave bridge0): Releasing backup interface [ 558.773333][T11060] loop7: detected capacity change from 0 to 512 [ 558.936847][T11060] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 559.031898][T11060] EXT4-fs (loop7): 1 truncate cleaned up [ 559.037929][T11060] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none. [ 559.112882][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 559.112897][ T26] audit: type=1800 audit(1747675594.436:194): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1684" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 560.355284][T11078] device pim6reg1 entered promiscuous mode [ 563.971540][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.978520][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.435060][T11123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.812057][T11149] loop7: detected capacity change from 0 to 512 [ 570.423057][T11149] EXT4-fs (loop7): orphan cleanup on readonly fs [ 570.775438][T11149] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1709: bg 0: block 248: padding at end of block bitmap is not set [ 570.931412][T11149] Quota error (device loop7): write_blk: dquota write failed [ 571.026012][T11149] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 571.246927][T11149] EXT4-fs error (device loop7): ext4_acquire_dquot:6204: comm syz.7.1709: Failed to acquire dquot type 1 [ 571.531262][T11149] EXT4-fs (loop7): 1 truncate cleaned up [ 571.604290][T11149] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 572.186154][ T7423] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 572.776924][ T7423] usb 8-1: unable to get BOS descriptor or descriptor too short [ 572.826908][ T7423] usb 8-1: not running at top speed; connect to a high speed hub [ 573.206226][ T7423] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 573.226769][ T7423] usb 8-1: can't read configurations, error -71 [ 574.365065][T11196] loop4: detected capacity change from 0 to 8192 [ 574.654148][T11199] netlink: 'syz.6.1724': attribute type 2 has an invalid length. [ 574.674283][T11199] netlink: 'syz.6.1724': attribute type 2 has an invalid length. [ 575.080146][T11205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 575.460435][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 576.107381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 581.899580][T11244] netlink: 'syz.7.1739': attribute type 1 has an invalid length. [ 582.078829][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 582.188182][T11249] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 582.435981][T11252] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 583.164001][T11258] loop4: detected capacity change from 0 to 256 [ 583.208786][T11252] bond1 (unregistering): Released all slaves [ 583.267112][T11258] /dev/loop4: Can't open blockdev [ 584.803018][T11275] loop7: detected capacity change from 0 to 8192 [ 587.485087][T11285] loop7: detected capacity change from 0 to 4096 [ 587.813363][T11293] loop4: detected capacity change from 0 to 64 [ 588.252629][T11285] NILFS (loop7): invalid segment: Checksum error in segment payload [ 588.465265][T11285] NILFS (loop7): trying rollback from an earlier position [ 588.771654][T11285] NILFS (loop7): recovery complete [ 588.908072][T11300] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 589.744124][T11317] loop4: detected capacity change from 0 to 16 [ 589.811092][T11317] /dev/loop4: Can't open blockdev [ 592.095482][T11332] kvm: pic: non byte write [ 592.308766][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1757'. [ 592.397294][T11342] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1760'. [ 593.599541][T11351] loop4: detected capacity change from 0 to 40427 [ 594.048982][T11356] team0: Port device team_slave_1 removed [ 595.557389][ T4172] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 595.939438][T11381] binder: 11378:11381 ioctl 4018620d 0 returned -22 [ 598.420073][ T4172] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 598.430198][ T4172] usb 5-1: config 0 has no interface number 0 [ 598.437743][ T4172] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 598.447465][ T4172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.221121][ T4172] usb 5-1: config 0 descriptor?? [ 600.958199][T11410] overlayfs: failed to clone upperpath [ 601.175513][T11367] syz.4.1772 (11367): drop_caches: 2 [ 601.916806][ T4172] usb 5-1: can't set config #0, error -71 [ 601.937482][ T4172] usb 5-1: USB disconnect, device number 13 [ 604.229907][T11449] xt_NFQUEUE: number of total queues is 0 [ 604.365818][T11453] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 604.378377][T11453] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 611.654191][T11511] loop9: detected capacity change from 0 to 4096 [ 611.823653][T11512] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 611.893158][ T26] audit: type=1800 audit(1747675647.216:195): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1807" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 615.358684][T11525] loop4: detected capacity change from 0 to 128 [ 618.147639][T11547] dccp_xmit_packet: Payload too large (65475) for featneg. [ 620.864314][T11571] print_req_error: 2 callbacks suppressed [ 620.864334][T11571] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 620.885270][T11571] efs: cannot read volume header [ 621.571158][T11583] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1826'. [ 621.901137][T11590] loop9: detected capacity change from 0 to 256 [ 622.716334][T11590] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 622.774970][T11598] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 623.168206][T11602] attempt to access beyond end of device [ 623.168206][T11602] loop9: rw=524288, want=34359738496, limit=256 [ 623.181728][T11602] attempt to access beyond end of device [ 623.181728][T11602] loop9: rw=0, want=34359738496, limit=256 [ 623.198050][ T26] audit: type=1800 audit(1747675658.516:196): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1825" name="file1" dev="loop9" ino=1048639 res=0 errno=0 [ 624.735483][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.751285][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.880732][T11611] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1831'. [ 630.713941][T11662] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 630.721869][T11662] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 630.865187][T11662] vhci_hcd vhci_hcd.0: Device attached [ 630.905626][T11671] loop9: detected capacity change from 0 to 128 [ 633.006310][ T1108] vhci_hcd: vhci_device speed not set [ 633.097270][T11669] vhci_hcd: connection closed [ 633.113646][ T630] vhci_hcd: stop threads [ 633.320085][ T630] vhci_hcd: release socket [ 633.328396][ T630] vhci_hcd: disconnect device [ 633.490302][ T1108] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 633.498214][ T1108] usb 51-1: enqueue for inactive port 0 [ 634.426245][ T1108] vhci_hcd: vhci_device speed not set [ 635.065572][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1852'. [ 635.652422][T11696] syz.9.1852 (11696) used greatest stack depth: 17288 bytes left [ 636.982494][ T26] audit: type=1326 audit(1747675672.306:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.4.1856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b41528969 code=0x0 [ 643.472845][T11749] loop7: detected capacity change from 0 to 512 [ 643.876773][T11749] EXT4-fs (loop7): Value of option "test_dummy_encryption=dont_appraise" is unrecognized [ 643.940898][T11757] program syz.4.1869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.747669][T11759] loop9: detected capacity change from 0 to 32768 [ 644.993036][T11759] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.1871 (11759) [ 645.312470][T11759] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 645.321796][T11759] BTRFS info (device loop9): setting nodatacow, compression disabled [ 645.330300][T11759] BTRFS info (device loop9): turning off barriers [ 645.338120][T11759] BTRFS info (device loop9): enabling ssd optimizations [ 645.346511][T11759] BTRFS info (device loop9): using spread ssd allocation scheme [ 645.354947][T11759] BTRFS info (device loop9): force clearing of disk cache [ 645.363139][T11759] BTRFS info (device loop9): doing ref verification [ 645.370230][T11759] BTRFS error (device loop9): invalid value 0 for thread_pool [ 645.724679][T11759] BTRFS error (device loop9): open_ctree failed: -22 [ 646.789736][T11776] loop4: detected capacity change from 0 to 512 [ 646.920375][ T6392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by udevd (6392) [ 649.313167][T11791] loop7: detected capacity change from 0 to 1764 [ 650.142663][T11799] loop4: detected capacity change from 0 to 2048 [ 650.489929][T11805] trusted_key: encrypted_key: insufficient parameters specified [ 654.818985][T11827] loop9: detected capacity change from 0 to 1024 [ 654.913976][T11833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1885'. [ 654.923374][T11833] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1885'. [ 658.016679][T11862] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 660.097148][T11870] loop4: detected capacity change from 0 to 512 [ 663.277272][ T7985] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 663.285676][ T7985] Bluetooth: hci2: Injecting HCI hardware error event [ 663.293578][ T4170] Bluetooth: hci2: hardware error 0x00 [ 665.466540][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 674.972272][T11997] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 676.867080][T12009] vivid-003: disconnect [ 677.241101][T12004] vivid-003: reconnect [ 677.396838][T12011] loop7: detected capacity change from 0 to 64 [ 677.579656][T12015] loop9: detected capacity change from 0 to 2048 [ 677.603183][T12015] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 677.623616][T12015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 677.641888][T12015] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1935'. [ 678.142250][T12017] device batadv1 entered promiscuous mode [ 679.062894][T12025] loop4: detected capacity change from 0 to 128 [ 679.826401][T12036] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 680.884664][T12033] loop9: detected capacity change from 0 to 8192 [ 681.013245][T12033] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 681.033649][T12033] REISERFS (device loop9): using ordered data mode [ 681.040786][T12033] reiserfs: using flush barriers [ 681.047582][T12033] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 681.064450][T12033] REISERFS (device loop9): checking transaction log (loop9) [ 681.119651][T12033] REISERFS (device loop9): Using r5 hash to sort names [ 681.238578][T12033] REISERFS (device loop9): using 3.5.x disk format [ 681.564906][T12033] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 681.909312][T12050] 9pnet_virtio: no channels available for device 127.0.0.1 [ 681.944797][T12045] fuse: Unknown parameter '0x0000000000000008' [ 682.230608][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1943'. [ 683.842409][T12061] overlayfs: failed to clone upperpath [ 684.873554][T12069] loop7: detected capacity change from 0 to 4096 [ 685.178324][T12069] ntfs: (device loop7): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 685.190643][T12069] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 685.303980][T12069] ntfs: volume version 3.1. [ 685.316941][T12069] ntfs: (device loop7): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 685.326926][T12069] ntfs: (device loop7): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 685.339610][T12069] ntfs: (device loop7): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 685.355882][T12069] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 685.369810][T12069] ntfs: (device loop7): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 685.381206][T12069] ntfs: (device loop7): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 686.064232][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.228821][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.859061][T12091] bridge0: port 3(gretap0) entered blocking state [ 686.866432][T12091] bridge0: port 3(gretap0) entered disabled state [ 686.888127][T12091] device gretap0 entered promiscuous mode [ 686.900102][T12091] bridge0: port 3(gretap0) entered blocking state [ 686.907547][T12091] bridge0: port 3(gretap0) entered forwarding state [ 686.973733][T12091] loop7: detected capacity change from 0 to 164 [ 687.542238][T12091] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 689.442851][T12106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 690.297536][ T26] audit: type=1326 audit(1747675725.626:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.9.1959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a8086969 code=0x0 [ 694.627775][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'. [ 696.816372][ T7417] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 697.766113][ T7417] usb 10-1: device descriptor read/64, error -71 [ 698.046395][ T7417] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 698.316264][ T7417] usb 10-1: device descriptor read/64, error -71 [ 698.463195][ T7417] usb usb10-port1: attempt power cycle [ 698.916267][ T7417] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 699.056425][ T7417] usb 10-1: device descriptor read/8, error -71 [ 699.370327][T12189] Falling back ldisc for ptm0. [ 699.719437][T12198] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1982'. [ 702.017297][T12222] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 702.106384][T12222] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.117645][T12222] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.219018][T12296] orangefs_mount: mount request failed with -4 [ 714.855870][T12339] loop4: detected capacity change from 0 to 64 [ 720.506141][ T1108] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 720.896222][ T1108] usb 5-1: config 1 interface 0 has no altsetting 0 [ 721.056250][ T1108] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 721.080643][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.106186][ T1108] usb 5-1: Product: syz [ 721.126081][ T1108] usb 5-1: Manufacturer: syz [ 721.133026][ T1108] usb 5-1: SerialNumber: syz [ 722.304813][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2036'. [ 722.317266][T12390] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2036'. [ 724.024129][T12396] loop9: detected capacity change from 0 to 128 [ 724.038865][ T1108] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 724.078552][T12397] netlink: 'syz.0.2028': attribute type 10 has an invalid length. [ 724.127021][ T1108] usb 5-1: USB disconnect, device number 14 [ 724.144911][ T1108] usblp0: removed [ 724.189267][T12396] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 724.214896][T12397] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.224057][T12397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.233237][T12397] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.242032][T12397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.326858][T12396] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 724.401452][T12397] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 724.412177][T12401] device bridge_slave_1 left promiscuous mode [ 724.454716][T12401] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.574490][T12401] device bridge_slave_0 left promiscuous mode [ 724.626907][T12401] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.325111][T12401] bond0: (slave bridge0): Releasing backup interface [ 730.752766][T12444] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 730.781851][T12444] bridge0: port 3(gretap0) entered disabled state [ 730.789685][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.798548][T12444] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.458144][T12459] binder: 12451:12459 ioctl 4018620d 0 returned -22 [ 733.866335][ T4213] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 734.116196][ T4213] usb 10-1: Using ep0 maxpacket: 16 [ 734.294991][T12475] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2045'. [ 734.306720][T12475] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2045'. [ 735.196549][ T4213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.229583][ T4213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.278894][ T4213] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 735.328494][ T4213] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 735.368487][ T4213] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.424539][ T4213] usb 10-1: config 0 descriptor?? [ 735.476544][ T4213] usb 10-1: can't set config #0, error -71 [ 735.492980][ T4213] usb 10-1: USB disconnect, device number 19 [ 739.319831][T12515] loop7: detected capacity change from 0 to 1024 [ 739.401326][T12515] EXT4-fs (loop7): Ignoring removed nobh option [ 739.486369][T12516] xt_NFQUEUE: number of total queues is 0 [ 739.614773][T12515] EXT4-fs (loop7): inline encryption not supported [ 740.266219][T12515] EXT4-fs (loop7): Ignoring removed bh option [ 740.390466][T12518] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 740.417076][T12515] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 740.463769][T12518] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 740.490695][ T4252] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 740.490833][T12518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 740.575884][T12515] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,quota,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 740.640963][T12518] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 740.654573][T12518] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 740.682669][T12518] bond1 (unregistering): Released all slaves [ 741.328481][ T140] wlan1: Trigger new scan to find an IBSS to join [ 743.618471][T12533] loop4: detected capacity change from 0 to 4096 [ 746.026286][ T9] wlan1: Trigger new scan to find an IBSS to join [ 746.980984][ T140] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 747.176131][T12588] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 747.203779][T12588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 747.214755][T12588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 747.633532][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.663249][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.381150][T12661] loop7: detected capacity change from 0 to 1024 [ 757.177825][ T7408] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 757.556208][ T7408] usb 5-1: Using ep0 maxpacket: 16 [ 757.696349][ T7408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.726016][ T7408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.766246][ T7408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 757.797512][ T7408] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 757.866062][ T7408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.884205][ T7408] usb 5-1: config 0 descriptor?? [ 758.381827][ T7408] hid-generic 0003:0955:7214.000E: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 758.666594][T12689] netlink: 'syz.4.2108': attribute type 2 has an invalid length. [ 758.710349][T12689] netlink: 'syz.4.2108': attribute type 2 has an invalid length. [ 758.767397][ T4210] usb 5-1: USB disconnect, device number 15 [ 769.013786][T12794] loop7: detected capacity change from 0 to 512 [ 769.129484][T12794] EXT4-fs (loop7): orphan cleanup on readonly fs [ 769.139545][T12794] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2137: bg 0: block 248: padding at end of block bitmap is not set [ 769.158132][T12794] Quota error (device loop7): write_blk: dquota write failed [ 769.166675][T12794] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 769.177425][T12794] EXT4-fs error (device loop7): ext4_acquire_dquot:6204: comm syz.7.2137: Failed to acquire dquot type 1 [ 769.191397][T12794] EXT4-fs (loop7): 1 truncate cleaned up [ 769.198500][T12794] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 770.036699][ T4252] wlan1: Trigger new scan to find an IBSS to join [ 773.568390][T12840] loop9: detected capacity change from 0 to 512 [ 773.691894][T12843] overlayfs: failed to clone upperpath [ 773.977181][T12840] EXT4-fs (loop9): Value of option "test_dummy_encryption=dont_appraise" is unrecognized [ 774.036134][ T4282] wlan1: Trigger new scan to find an IBSS to join [ 777.202239][ T4222] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 777.891478][T12873] loop9: detected capacity change from 0 to 512 [ 778.018124][T12873] EXT4-fs (loop9): orphan cleanup on readonly fs [ 778.089210][T12873] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2153: bg 0: block 248: padding at end of block bitmap is not set [ 778.219073][T12873] Quota error (device loop9): write_blk: dquota write failed [ 778.236131][T12873] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 778.286163][T12873] EXT4-fs error (device loop9): ext4_acquire_dquot:6204: comm syz.9.2153: Failed to acquire dquot type 1 [ 778.339713][T12873] EXT4-fs (loop9): 1 truncate cleaned up [ 778.356544][T12873] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 778.716089][ T7423] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 780.617205][ T7423] usb 10-1: unable to get BOS descriptor or descriptor too short [ 781.243969][ T7423] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 781.255074][ T7423] usb 10-1: can't read configurations, error -71 [ 789.114362][T12953] loop9: detected capacity change from 0 to 4096 [ 789.247199][T12953] NILFS (loop9): invalid segment: Checksum error in segment payload [ 789.255430][T12953] NILFS (loop9): trying rollback from an earlier position [ 789.738398][T12953] NILFS (loop9): recovery complete [ 789.999785][T12964] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 792.604495][T12987] loop4: detected capacity change from 0 to 512 [ 796.478276][T13068] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 796.986764][ T140] wlan1: Trigger new scan to find an IBSS to join [ 800.322513][T13116] loop7: detected capacity change from 0 to 4096 [ 800.642415][T13116] ntfs: (device loop7): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 800.695318][T13116] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 801.642861][T13116] ntfs: volume version 3.1. [ 801.800645][T13116] ntfs: (device loop7): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 802.036184][ T4282] wlan1: Trigger new scan to find an IBSS to join [ 802.276967][T13116] ntfs: (device loop7): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 802.484332][T13116] ntfs: (device loop7): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 803.780850][T13116] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 803.820972][T13116] ntfs: (device loop7): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 803.844500][T13116] ntfs: (device loop7): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 803.962828][ T4746] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 804.471277][T13151] device batadv1 entered promiscuous mode [ 805.044491][ T9] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 806.042422][ T4252] wlan1: Trigger new scan to find an IBSS to join [ 808.282131][T13201] loop9: detected capacity change from 0 to 4096 [ 808.486020][T13201] ntfs: (device loop9): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 808.513706][T13201] ntfs: (device loop9): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 808.685515][T13201] ntfs: volume version 3.1. [ 808.748534][T13201] ntfs: (device loop9): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 808.801459][T13201] ntfs: (device loop9): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 808.839630][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.848224][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.906360][T13201] ntfs: (device loop9): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 809.119483][T13201] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 809.139932][T13201] ntfs: (device loop9): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 809.191961][T13201] ntfs: (device loop9): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 810.444991][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 812.608256][ T4746] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 820.143680][ T26] audit: type=1326 audit(1747675855.466:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.0.2275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbf2719969 code=0x0 [ 826.026255][ T1280] wlan1: Trigger new scan to find an IBSS to join [ 828.510350][T13470] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 828.878359][T13474] loop9: detected capacity change from 0 to 32768 [ 829.284076][ T140] wlan1: Trigger new scan to find an IBSS to join [ 829.299078][ T9] wlan1: Trigger new scan to find an IBSS to join [ 829.416731][T13474] XFS: ikeep mount option is deprecated. [ 829.914293][T13474] XFS (loop9): Mounting V5 Filesystem [ 830.103002][T13474] XFS (loop9): Ending clean mount [ 830.111009][T13474] XFS (loop9): Quotacheck needed: Please wait. [ 830.616574][T13474] XFS (loop9): Quotacheck: Done. [ 831.037447][ T9] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 833.006296][ T9] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 834.570781][ T8979] XFS (loop9): Unmounting Filesystem [ 835.799006][T13526] loop7: detected capacity change from 0 to 4096 [ 836.986696][ T9] wlan1: Trigger new scan to find an IBSS to join [ 838.122785][T13526] ntfs: (device loop7): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 838.153408][T13526] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 838.531854][T13526] ntfs: volume version 3.1. [ 838.599496][T13526] ntfs: (device loop7): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 838.691978][T13526] ntfs: (device loop7): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 838.811781][T13526] ntfs: (device loop7): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 839.105610][T13526] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 839.135063][T13526] ntfs: (device loop7): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 839.677382][T13526] ntfs: (device loop7): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 840.986070][ T1280] wlan1: Trigger new scan to find an IBSS to join [ 842.048470][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 842.307923][ T4252] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 846.986309][ T4252] wlan1: Trigger new scan to find an IBSS to join [ 848.348291][ T4412] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 850.210589][ T4170] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 850.221370][ T4170] CPU: 0 PID: 4170 Comm: kworker/u5:1 Not tainted 5.15.183-syzkaller #0 [ 850.230004][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 850.240181][ T4170] Workqueue: hci1 hci_rx_work [ 850.244919][ T4170] Call Trace: [ 850.248224][ T4170] [ 850.251270][ T4170] dump_stack_lvl+0x168/0x230 [ 850.256506][ T4170] ? show_regs_print_info+0x20/0x20 [ 850.262816][ T4170] ? load_image+0x3b0/0x3b0 [ 850.269774][ T4170] sysfs_create_dir_ns+0x252/0x280 [ 850.275723][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 850.280788][ T4170] ? sysfs_warn_dup+0xa0/0xa0 [ 850.285852][ T4170] ? le_conn_complete_evt+0xcbc/0x1590 [ 850.291438][ T4170] ? hci_event_packet+0xe05/0x12f0 [ 850.296904][ T4170] ? process_one_work+0x863/0x1000 [ 850.302836][ T4170] ? do_raw_spin_unlock+0x11d/0x230 [ 850.308442][ T4170] kobject_add_internal+0x662/0xd00 [ 850.313875][ T4170] kobject_add+0x152/0x210 [ 850.318975][ T4170] ? kobject_init+0x1d0/0x1d0 [ 850.323791][ T4170] ? klist_children_get+0x50/0x50 [ 850.329014][ T4170] ? get_device_parent+0x121/0x3f0 [ 850.334156][ T4170] device_add+0x483/0xfb0 [ 850.338684][ T4170] hci_conn_add_sysfs+0xd1/0x1e0 [ 850.343678][ T4170] le_conn_complete_evt+0xcbc/0x1590 [ 850.349291][ T4170] ? cs_le_create_conn+0x5e0/0x5e0 [ 850.354947][ T4170] ? __mutex_trylock_common+0x14f/0x250 [ 850.361137][ T4170] hci_le_meta_evt+0x289/0x3b80 [ 850.366788][ T4170] ? hci_event_packet+0x36d/0x12f0 [ 850.373470][ T4170] ? hci_event_packet+0x2e2/0x12f0 [ 850.379780][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 850.385950][ T4170] ? hci_remote_host_features_evt+0x280/0x280 [ 850.392475][ T4170] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 850.399711][ T4170] ? mark_lock+0x94/0x320 [ 850.404489][ T4170] ? mutex_unlock+0x10/0x10 [ 850.409554][ T4170] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 850.416397][ T4170] ? lock_chain_count+0x20/0x20 [ 850.421938][ T4170] ? __rwlock_init+0x140/0x140 [ 850.428759][ T4170] hci_event_packet+0xe05/0x12f0 [ 850.435424][ T4170] ? lockdep_hardirqs_on+0x94/0x140 [ 850.441197][ T4170] ? rcu_lock_release+0x20/0x20 [ 850.446458][ T4170] ? hci_send_to_monitor+0x9c/0x4a0 [ 850.453124][ T4170] hci_rx_work+0x255/0xa10 [ 850.457886][ T4170] process_one_work+0x863/0x1000 [ 850.465817][ T4170] ? worker_detach_from_pool+0x240/0x240 [ 850.474828][ T4170] ? lockdep_hardirqs_off+0x70/0x100 [ 850.480882][ T4170] ? _raw_spin_lock_irq+0xab/0xe0 [ 850.487559][ T4170] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 850.494777][ T4170] ? wq_worker_running+0x97/0x170 [ 850.500771][ T4170] worker_thread+0xaa8/0x12a0 [ 850.506035][ T4170] kthread+0x436/0x520 [ 850.510307][ T4170] ? rcu_lock_release+0x20/0x20 [ 850.515558][ T4170] ? kthread_blkcg+0xd0/0xd0 [ 850.521310][ T4170] ret_from_fork+0x1f/0x30 [ 850.526556][ T4170] [ 850.546315][ T4170] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 850.561909][ T4170] Bluetooth: hci1: failed to register connection device [ 855.571385][ T4174] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 855.595507][ T4174] CPU: 1 PID: 4174 Comm: kworker/u5:2 Not tainted 5.15.183-syzkaller #0 [ 855.605423][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 855.616854][ T4174] Workqueue: hci0 hci_rx_work [ 855.622030][ T4174] Call Trace: [ 855.625590][ T4174] [ 855.629073][ T4174] dump_stack_lvl+0x168/0x230 [ 855.636208][ T4174] ? show_regs_print_info+0x20/0x20 [ 855.642416][ T4174] ? load_image+0x3b0/0x3b0 [ 855.647228][ T4174] sysfs_create_dir_ns+0x252/0x280 [ 855.652622][ T4174] ? __lock_acquire+0x7c60/0x7c60 [ 855.658202][ T4174] ? sysfs_warn_dup+0xa0/0xa0 [ 855.663658][ T4174] ? le_conn_complete_evt+0xcbc/0x1590 [ 855.669941][ T4174] ? hci_event_packet+0xe05/0x12f0 [ 855.676256][ T4174] ? process_one_work+0x863/0x1000 [ 855.682554][ T4174] ? do_raw_spin_unlock+0x11d/0x230 [ 855.689605][ T4174] kobject_add_internal+0x662/0xd00 [ 855.697555][ T4174] kobject_add+0x152/0x210 [ 855.702450][ T4174] ? kobject_init+0x1d0/0x1d0 [ 855.707875][ T4174] ? klist_children_get+0x50/0x50 [ 855.714685][ T4174] ? get_device_parent+0x121/0x3f0 [ 855.719911][ T4174] device_add+0x483/0xfb0 [ 855.725245][ T4174] hci_conn_add_sysfs+0xd1/0x1e0 [ 855.730947][ T4174] le_conn_complete_evt+0xcbc/0x1590 [ 855.737849][ T4174] ? lock_chain_count+0x20/0x20 [ 855.743575][ T4174] ? cs_le_create_conn+0x5e0/0x5e0 [ 855.749136][ T4174] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 855.756577][ T4174] hci_le_meta_evt+0x289/0x3b80 [ 855.762188][ T4174] ? hci_event_packet+0x36d/0x12f0 [ 855.769226][ T4174] ? hci_event_packet+0x2e2/0x12f0 [ 855.775396][ T4174] ? __lock_acquire+0x7c60/0x7c60 [ 855.783454][ T4174] ? release_firmware_map_entry+0x190/0x190 [ 855.791392][ T4174] ? hci_remote_host_features_evt+0x280/0x280 [ 855.797859][ T4174] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 855.805586][ T4174] ? mutex_unlock+0x10/0x10 [ 855.811075][ T4174] ? preempt_schedule+0xa7/0xb0 [ 855.817134][ T4174] ? schedule_preempt_disabled+0x20/0x20 [ 855.823293][ T4174] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 855.830117][ T4174] hci_event_packet+0xe05/0x12f0 [ 855.836035][ T4174] ? rcu_lock_release+0x20/0x20 [ 855.841593][ T4174] ? hci_send_to_monitor+0x9c/0x4a0 [ 855.847723][ T4174] hci_rx_work+0x255/0xa10 [ 855.853010][ T4174] process_one_work+0x863/0x1000 [ 855.858409][ T4174] ? worker_detach_from_pool+0x240/0x240 [ 855.865124][ T4174] ? lockdep_hardirqs_off+0x70/0x100 [ 855.873036][ T4174] ? _raw_spin_lock_irq+0xab/0xe0 [ 855.878903][ T4174] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 855.885208][ T4174] ? wq_worker_running+0x97/0x170 [ 855.894635][ T4174] worker_thread+0xaa8/0x12a0 [ 855.900459][ T4174] kthread+0x436/0x520 [ 855.905700][ T4174] ? rcu_lock_release+0x20/0x20 [ 855.911388][ T4174] ? kthread_blkcg+0xd0/0xd0 [ 855.918054][ T4174] ret_from_fork+0x1f/0x30 [ 855.922784][ T4174] [ 855.927837][ T4174] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 855.943107][ T4174] Bluetooth: hci0: failed to register connection device [ 859.245472][T13698] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 859.256543][T13698] CPU: 1 PID: 13698 Comm: kworker/u5:0 Not tainted 5.15.183-syzkaller #0 [ 859.265430][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 859.277181][T13698] Workqueue: hci1 hci_rx_work [ 859.282237][T13698] Call Trace: [ 859.286092][T13698] [ 859.289168][T13698] dump_stack_lvl+0x168/0x230 [ 859.294630][T13698] ? show_regs_print_info+0x20/0x20 [ 859.301503][T13698] ? load_image+0x3b0/0x3b0 [ 859.306476][T13698] sysfs_create_dir_ns+0x252/0x280 [ 859.312049][T13698] ? __lock_acquire+0x7c60/0x7c60 [ 859.317922][T13698] ? sysfs_warn_dup+0xa0/0xa0 [ 859.324263][T13698] ? le_conn_complete_evt+0xcbc/0x1590 [ 859.330760][T13698] ? hci_event_packet+0xe05/0x12f0 [ 859.336788][T13698] ? process_one_work+0x863/0x1000 [ 859.342523][T13698] ? do_raw_spin_unlock+0x11d/0x230 [ 859.347759][T13698] kobject_add_internal+0x662/0xd00 [ 859.353257][T13698] kobject_add+0x152/0x210 [ 859.358480][T13698] ? kobject_init+0x1d0/0x1d0 [ 859.363611][T13698] ? klist_children_get+0x50/0x50 [ 859.368955][T13698] ? get_device_parent+0x121/0x3f0 [ 859.374397][T13698] device_add+0x483/0xfb0 [ 859.379224][T13698] hci_conn_add_sysfs+0xd1/0x1e0 [ 859.385537][T13698] le_conn_complete_evt+0xcbc/0x1590 [ 859.393190][T13698] ? cs_le_create_conn+0x5e0/0x5e0 [ 859.399170][T13698] ? __mutex_trylock_common+0x14f/0x250 [ 859.406201][T13698] hci_le_meta_evt+0x289/0x3b80 [ 859.412158][T13698] ? hci_event_packet+0x36d/0x12f0 [ 859.418774][T13698] ? hci_event_packet+0x2e2/0x12f0 [ 859.425143][T13698] ? __lock_acquire+0x7c60/0x7c60 [ 859.431323][T13698] ? hci_remote_host_features_evt+0x280/0x280 [ 859.438275][T13698] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 859.444629][T13698] ? mark_lock+0x94/0x320 [ 859.449505][T13698] ? mutex_unlock+0x10/0x10 [ 859.455219][T13698] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 859.462951][T13698] ? lock_chain_count+0x20/0x20 [ 859.468738][T13698] ? __rwlock_init+0x140/0x140 [ 859.475791][T13698] hci_event_packet+0xe05/0x12f0 [ 859.481496][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 859.487184][T13698] ? rcu_lock_release+0x20/0x20 [ 859.492830][T13698] ? hci_send_to_monitor+0x9c/0x4a0 [ 859.498759][T13698] hci_rx_work+0x255/0xa10 [ 859.503992][T13698] process_one_work+0x863/0x1000 [ 859.510886][T13698] ? worker_detach_from_pool+0x240/0x240 [ 859.519879][T13698] ? lockdep_hardirqs_off+0x70/0x100 [ 859.528904][T13698] ? _raw_spin_lock_irq+0xab/0xe0 [ 859.535908][T13698] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 859.543159][T13698] ? wq_worker_running+0x97/0x170 [ 859.548940][T13698] worker_thread+0xaa8/0x12a0 [ 859.554737][T13698] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 859.561625][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 859.568747][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 859.576298][T13698] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 859.583625][T13698] kthread+0x436/0x520 [ 859.588391][T13698] ? rcu_lock_release+0x20/0x20 [ 859.594087][T13698] ? kthread_blkcg+0xd0/0xd0 [ 859.598912][T13698] ret_from_fork+0x1f/0x30 [ 859.604520][T13698] [ 859.623756][T13698] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 859.638827][T13698] Bluetooth: hci1: failed to register connection device [ 860.008405][T13735] loop4: detected capacity change from 0 to 512 [ 861.075028][T13735] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 861.136041][T13735] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 861.172054][T13698] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 861.182596][T13698] CPU: 0 PID: 13698 Comm: kworker/u5:0 Not tainted 5.15.183-syzkaller #0 [ 861.192550][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 861.204289][T13698] Workqueue: hci0 hci_rx_work [ 861.210150][T13698] Call Trace: [ 861.214008][T13698] [ 861.217053][T13698] dump_stack_lvl+0x168/0x230 [ 861.222055][T13698] ? show_regs_print_info+0x20/0x20 [ 861.227550][T13698] ? load_image+0x3b0/0x3b0 [ 861.232817][T13698] sysfs_create_dir_ns+0x252/0x280 [ 861.238123][T13698] ? __lock_acquire+0x7c60/0x7c60 [ 861.243929][T13698] ? sysfs_warn_dup+0xa0/0xa0 [ 861.249368][T13698] ? le_conn_complete_evt+0xcbc/0x1590 [ 861.255309][T13698] ? hci_event_packet+0xe05/0x12f0 [ 861.260922][T13698] ? process_one_work+0x863/0x1000 [ 861.267005][T13698] ? do_raw_spin_unlock+0x11d/0x230 [ 861.273497][T13698] kobject_add_internal+0x662/0xd00 [ 861.278989][T13698] kobject_add+0x152/0x210 [ 861.284692][T13698] ? kobject_init+0x1d0/0x1d0 [ 861.290976][T13698] ? klist_children_get+0x50/0x50 [ 861.296729][T13698] ? get_device_parent+0x121/0x3f0 [ 861.302982][T13698] device_add+0x483/0xfb0 [ 861.307547][T13698] hci_conn_add_sysfs+0xd1/0x1e0 [ 861.314708][T13698] le_conn_complete_evt+0xcbc/0x1590 [ 861.322220][T13698] ? cs_le_create_conn+0x5e0/0x5e0 [ 861.328543][T13698] ? __mutex_trylock_common+0x14f/0x250 [ 861.335024][T13698] hci_le_meta_evt+0x289/0x3b80 [ 861.341428][T13698] ? hci_event_packet+0x36d/0x12f0 [ 861.348234][T13698] ? hci_event_packet+0x2e2/0x12f0 [ 861.354033][T13698] ? __lock_acquire+0x7c60/0x7c60 [ 861.359699][T13698] ? hci_remote_host_features_evt+0x280/0x280 [ 861.366470][T13698] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 861.372797][T13698] ? mark_lock+0x94/0x320 [ 861.377160][T13698] ? mutex_unlock+0x10/0x10 [ 861.381905][T13698] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 861.387998][T13698] ? lock_chain_count+0x20/0x20 [ 861.392884][T13698] ? __rwlock_init+0x140/0x140 [ 861.397665][T13698] hci_event_packet+0xe05/0x12f0 [ 861.402917][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 861.408436][T13698] ? rcu_lock_release+0x20/0x20 [ 861.413574][T13698] ? hci_send_to_monitor+0x9c/0x4a0 [ 861.420676][T13698] hci_rx_work+0x255/0xa10 [ 861.426066][T13698] process_one_work+0x863/0x1000 [ 861.431667][T13698] ? worker_detach_from_pool+0x240/0x240 [ 861.437591][T13698] ? lockdep_hardirqs_off+0x70/0x100 [ 861.443006][T13698] ? _raw_spin_lock_irq+0xab/0xe0 [ 861.448325][T13698] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 861.453925][T13698] ? wq_worker_running+0x97/0x170 [ 861.460777][T13698] worker_thread+0xaa8/0x12a0 [ 861.467182][T13698] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 861.473819][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 861.479657][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 861.485325][T13698] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 861.492873][T13698] kthread+0x436/0x520 [ 861.498289][T13698] ? rcu_lock_release+0x20/0x20 [ 861.503790][T13698] ? kthread_blkcg+0xd0/0xd0 [ 861.509125][T13698] ret_from_fork+0x1f/0x30 [ 861.515711][T13698] [ 861.528197][T13698] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 861.545160][T13698] Bluetooth: hci0: failed to register connection device [ 862.728215][ T1108] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 863.727909][ T4170] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 863.739831][ T4170] CPU: 0 PID: 4170 Comm: kworker/u5:1 Not tainted 5.15.183-syzkaller #0 [ 863.749533][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 863.763402][ T4170] Workqueue: hci0 hci_rx_work [ 863.769228][ T4170] Call Trace: [ 863.772618][ T4170] [ 863.775799][ T4170] dump_stack_lvl+0x168/0x230 [ 863.781224][ T4170] ? show_regs_print_info+0x20/0x20 [ 863.789708][ T4170] ? load_image+0x3b0/0x3b0 [ 863.796077][ T4170] sysfs_create_dir_ns+0x252/0x280 [ 863.803358][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 863.811509][ T4170] ? sysfs_warn_dup+0xa0/0xa0 [ 863.818173][ T4170] ? le_conn_complete_evt+0xcbc/0x1590 [ 863.825384][ T4170] ? hci_event_packet+0xe05/0x12f0 [ 863.831136][ T4170] ? process_one_work+0x863/0x1000 [ 863.837476][ T4170] ? do_raw_spin_unlock+0x11d/0x230 [ 863.844039][ T4170] kobject_add_internal+0x662/0xd00 [ 863.850579][ T4170] kobject_add+0x152/0x210 [ 863.855636][ T4170] ? kobject_init+0x1d0/0x1d0 [ 863.861009][ T4170] ? klist_children_get+0x50/0x50 [ 863.866561][ T4170] ? get_device_parent+0x121/0x3f0 [ 863.872409][ T4170] device_add+0x483/0xfb0 [ 863.877377][ T4170] hci_conn_add_sysfs+0xd1/0x1e0 [ 863.883722][ T4170] le_conn_complete_evt+0xcbc/0x1590 [ 863.889824][ T4170] ? cs_le_create_conn+0x5e0/0x5e0 [ 863.895219][ T4170] ? __mutex_trylock_common+0x14f/0x250 [ 863.902225][ T4170] hci_le_meta_evt+0x289/0x3b80 [ 863.907702][ T4170] ? hci_event_packet+0x36d/0x12f0 [ 863.913453][ T4170] ? hci_event_packet+0x2e2/0x12f0 [ 863.919556][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 863.925601][ T4170] ? hci_remote_host_features_evt+0x280/0x280 [ 863.933469][ T4170] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 863.940225][ T4170] ? mark_lock+0x94/0x320 [ 863.945456][ T4170] ? mutex_unlock+0x10/0x10 [ 863.950238][ T4170] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 863.956764][ T4170] ? lock_chain_count+0x20/0x20 [ 863.962174][ T4170] ? __rwlock_init+0x140/0x140 [ 863.967207][ T4170] hci_event_packet+0xe05/0x12f0 [ 863.972349][ T4170] ? lockdep_hardirqs_on+0x94/0x140 [ 863.977776][ T4170] ? rcu_lock_release+0x20/0x20 [ 863.983766][ T4170] ? hci_send_to_monitor+0x9c/0x4a0 [ 863.990110][ T4170] hci_rx_work+0x255/0xa10 [ 863.995386][ T4170] process_one_work+0x863/0x1000 [ 864.001598][ T4170] ? worker_detach_from_pool+0x240/0x240 [ 864.008115][ T4170] ? lockdep_hardirqs_off+0x70/0x100 [ 864.015036][ T4170] ? _raw_spin_lock_irq+0xab/0xe0 [ 864.021834][ T4170] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 864.027586][ T4170] ? wq_worker_running+0x97/0x170 [ 864.036700][ T4170] worker_thread+0xaa8/0x12a0 [ 864.042623][ T4170] kthread+0x436/0x520 [ 864.049546][ T4170] ? rcu_lock_release+0x20/0x20 [ 864.056393][ T4170] ? kthread_blkcg+0xd0/0xd0 [ 864.062359][ T4170] ret_from_fork+0x1f/0x30 [ 864.069774][ T4170] [ 864.081627][ T4170] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 864.100972][ T4170] Bluetooth: hci0: failed to register connection device [ 864.274849][T13777] loop4: detected capacity change from 0 to 128 [ 866.565891][ T4170] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 866.576948][ T4170] CPU: 0 PID: 4170 Comm: kworker/u5:1 Not tainted 5.15.183-syzkaller #0 [ 866.585759][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 866.597488][ T4170] Workqueue: hci0 hci_rx_work [ 866.602616][ T4170] Call Trace: [ 866.606373][ T4170] [ 866.609331][ T4170] dump_stack_lvl+0x168/0x230 [ 866.614173][ T4170] ? show_regs_print_info+0x20/0x20 [ 866.619891][ T4170] ? load_image+0x3b0/0x3b0 [ 866.624500][ T4170] sysfs_create_dir_ns+0x252/0x280 [ 866.630117][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 866.636074][ T4170] ? sysfs_warn_dup+0xa0/0xa0 [ 866.642268][ T4170] ? le_conn_complete_evt+0xcbc/0x1590 [ 866.648526][ T4170] ? hci_event_packet+0xe05/0x12f0 [ 866.654221][ T4170] ? process_one_work+0x863/0x1000 [ 866.659696][ T4170] ? do_raw_spin_unlock+0x11d/0x230 [ 866.665039][ T4170] kobject_add_internal+0x662/0xd00 [ 866.671406][ T4170] kobject_add+0x152/0x210 [ 866.677011][ T4170] ? kobject_init+0x1d0/0x1d0 [ 866.682579][ T4170] ? klist_children_get+0x50/0x50 [ 866.688777][ T4170] ? get_device_parent+0x121/0x3f0 [ 866.693991][ T4170] device_add+0x483/0xfb0 [ 866.698730][ T4170] hci_conn_add_sysfs+0xd1/0x1e0 [ 866.703874][ T4170] le_conn_complete_evt+0xcbc/0x1590 [ 866.709637][ T4170] ? cs_le_create_conn+0x5e0/0x5e0 [ 866.715102][ T4170] ? __mutex_trylock_common+0x14f/0x250 [ 866.721343][ T4170] hci_le_meta_evt+0x289/0x3b80 [ 866.726681][ T4170] ? hci_event_packet+0x36d/0x12f0 [ 866.733126][ T4170] ? hci_event_packet+0x2e2/0x12f0 [ 866.738868][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 866.745235][ T4170] ? hci_remote_host_features_evt+0x280/0x280 [ 866.753811][ T4170] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 866.761287][ T4170] ? mark_lock+0x94/0x320 [ 866.770735][ T4170] ? mutex_unlock+0x10/0x10 [ 866.776973][ T4170] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 866.786908][ T4170] ? lock_chain_count+0x20/0x20 [ 866.793996][ T4170] ? __rwlock_init+0x140/0x140 [ 866.801067][ T4170] hci_event_packet+0xe05/0x12f0 [ 866.808392][ T4170] ? lockdep_hardirqs_on+0x94/0x140 [ 866.816051][ T4170] ? rcu_lock_release+0x20/0x20 [ 866.824031][ T4170] ? hci_send_to_monitor+0x9c/0x4a0 [ 866.830695][ T4170] hci_rx_work+0x255/0xa10 [ 866.837538][ T4170] process_one_work+0x863/0x1000 [ 866.843825][ T4170] ? worker_detach_from_pool+0x240/0x240 [ 866.850410][ T4170] ? lockdep_hardirqs_off+0x70/0x100 [ 866.857453][ T4170] ? _raw_spin_lock_irq+0xab/0xe0 [ 866.863607][ T4170] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 866.870200][ T4170] ? wq_worker_running+0x97/0x170 [ 866.875855][ T4170] worker_thread+0xaa8/0x12a0 [ 866.881100][ T4170] kthread+0x436/0x520 [ 866.885621][ T4170] ? rcu_lock_release+0x20/0x20 [ 866.891144][ T4170] ? kthread_blkcg+0xd0/0xd0 [ 866.896285][ T4170] ret_from_fork+0x1f/0x30 [ 866.902435][ T4170] [ 866.936480][ T4170] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 866.954714][ T4170] Bluetooth: hci0: failed to register connection device [ 870.370490][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.378877][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.627733][T13834] loop4: detected capacity change from 0 to 128 [ 872.598765][T13843] loop9: detected capacity change from 0 to 128 [ 873.095679][ T1280] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 873.814073][T13843] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 874.173629][T13843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 877.776058][T13885] loop7: detected capacity change from 0 to 2048 [ 877.888988][T13885] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 878.286749][ T4170] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 878.303218][ T4170] CPU: 0 PID: 4170 Comm: kworker/u5:1 Not tainted 5.15.183-syzkaller #0 [ 878.313940][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 878.327863][ T4170] Workqueue: hci3 hci_rx_work [ 878.333363][ T4170] Call Trace: [ 878.337639][ T4170] [ 878.341360][ T4170] dump_stack_lvl+0x168/0x230 [ 878.348298][ T4170] ? show_regs_print_info+0x20/0x20 [ 878.354682][ T4170] ? load_image+0x3b0/0x3b0 [ 878.360256][ T4170] sysfs_create_dir_ns+0x252/0x280 [ 878.366793][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 878.372804][ T4170] ? sysfs_warn_dup+0xa0/0xa0 [ 878.377834][ T4170] ? le_conn_complete_evt+0xcbc/0x1590 [ 878.383663][ T4170] ? hci_event_packet+0xe05/0x12f0 [ 878.389321][ T4170] ? process_one_work+0x863/0x1000 [ 878.394874][ T4170] ? do_raw_spin_unlock+0x11d/0x230 [ 878.400491][ T4170] kobject_add_internal+0x662/0xd00 [ 878.406681][ T4170] kobject_add+0x152/0x210 [ 878.411796][ T4170] ? kobject_init+0x1d0/0x1d0 [ 878.417080][ T4170] ? klist_children_get+0x50/0x50 [ 878.422444][ T4170] ? get_device_parent+0x121/0x3f0 [ 878.428024][ T4170] device_add+0x483/0xfb0 [ 878.433554][ T4170] hci_conn_add_sysfs+0xd1/0x1e0 [ 878.439211][ T4170] le_conn_complete_evt+0xcbc/0x1590 [ 878.444831][ T4170] ? cs_le_create_conn+0x5e0/0x5e0 [ 878.450243][ T4170] ? __mutex_trylock_common+0x14f/0x250 [ 878.456048][ T4170] hci_le_meta_evt+0x289/0x3b80 [ 878.461028][ T4170] ? hci_event_packet+0x36d/0x12f0 [ 878.466334][ T4170] ? hci_event_packet+0x2e2/0x12f0 [ 878.472624][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 878.478691][ T4170] ? hci_remote_host_features_evt+0x280/0x280 [ 878.486429][ T4170] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 878.493522][ T4170] ? mark_lock+0x94/0x320 [ 878.499352][ T4170] ? mutex_unlock+0x10/0x10 [ 878.503970][ T4170] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 878.512127][ T4170] ? lock_chain_count+0x20/0x20 [ 878.517702][ T4170] ? __rwlock_init+0x140/0x140 [ 878.524972][ T4170] hci_event_packet+0xe05/0x12f0 [ 878.530951][ T4170] ? lockdep_hardirqs_on+0x94/0x140 [ 878.536477][ T4170] ? rcu_lock_release+0x20/0x20 [ 878.543224][ T4170] ? hci_send_to_monitor+0x9c/0x4a0 [ 878.549491][ T4170] hci_rx_work+0x255/0xa10 [ 878.554383][ T4170] process_one_work+0x863/0x1000 [ 878.563418][ T4170] ? worker_detach_from_pool+0x240/0x240 [ 878.570273][ T4170] ? lockdep_hardirqs_off+0x70/0x100 [ 878.577578][ T4170] ? _raw_spin_lock_irq+0xab/0xe0 [ 878.586449][ T4170] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 878.593090][ T4170] ? wq_worker_running+0x97/0x170 [ 878.598915][ T4170] worker_thread+0xaa8/0x12a0 [ 878.603874][ T4170] kthread+0x436/0x520 [ 878.608815][ T4170] ? rcu_lock_release+0x20/0x20 [ 878.614575][ T4170] ? kthread_blkcg+0xd0/0xd0 [ 878.619944][ T4170] ret_from_fork+0x1f/0x30 [ 878.625105][ T4170] [ 878.656129][ T4170] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 878.672359][ T4170] Bluetooth: hci3: failed to register connection device [ 878.928302][ T4170] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 878.939293][ T4170] CPU: 1 PID: 4170 Comm: kworker/u5:1 Not tainted 5.15.183-syzkaller #0 [ 878.948278][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 878.958492][ T4170] Workqueue: hci0 hci_rx_work [ 878.963369][ T4170] Call Trace: [ 878.966668][ T4170] [ 878.969860][ T4170] dump_stack_lvl+0x168/0x230 [ 878.974637][ T4170] ? show_regs_print_info+0x20/0x20 [ 878.979940][ T4170] ? load_image+0x3b0/0x3b0 [ 878.984466][ T4170] sysfs_create_dir_ns+0x252/0x280 [ 878.989589][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 878.994791][ T4170] ? sysfs_warn_dup+0xa0/0xa0 [ 878.999614][ T4170] ? le_conn_complete_evt+0xcbc/0x1590 [ 879.005122][ T4170] ? hci_event_packet+0xe05/0x12f0 [ 879.010256][ T4170] ? process_one_work+0x863/0x1000 [ 879.015483][ T4170] ? do_raw_spin_unlock+0x11d/0x230 [ 879.020753][ T4170] kobject_add_internal+0x662/0xd00 [ 879.026390][ T4170] kobject_add+0x152/0x210 [ 879.032455][ T4170] ? kobject_init+0x1d0/0x1d0 [ 879.038279][ T4170] ? klist_children_get+0x50/0x50 [ 879.045158][ T4170] ? get_device_parent+0x121/0x3f0 [ 879.051544][ T4170] device_add+0x483/0xfb0 [ 879.057606][ T4170] hci_conn_add_sysfs+0xd1/0x1e0 [ 879.064380][ T4170] le_conn_complete_evt+0xcbc/0x1590 [ 879.072627][ T4170] ? cs_le_create_conn+0x5e0/0x5e0 [ 879.078778][ T4170] ? __mutex_trylock_common+0x14f/0x250 [ 879.088202][ T4170] hci_le_meta_evt+0x289/0x3b80 [ 879.093525][ T4170] ? hci_event_packet+0x36d/0x12f0 [ 879.100554][ T4170] ? hci_event_packet+0x2e2/0x12f0 [ 879.107414][ T4170] ? __lock_acquire+0x7c60/0x7c60 [ 879.113427][ T4170] ? hci_remote_host_features_evt+0x280/0x280 [ 879.120479][ T4170] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 879.130049][ T4170] ? mark_lock+0x94/0x320 [ 879.135656][ T4170] ? mutex_unlock+0x10/0x10 [ 879.142732][ T4170] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 879.150415][ T4170] ? lock_chain_count+0x20/0x20 [ 879.157717][ T4170] ? __rwlock_init+0x140/0x140 [ 879.164202][ T4170] hci_event_packet+0xe05/0x12f0 [ 879.171968][ T4170] ? lockdep_hardirqs_on+0x94/0x140 [ 879.180585][ T4170] ? rcu_lock_release+0x20/0x20 [ 879.187133][ T4170] ? hci_send_to_monitor+0x9c/0x4a0 [ 879.195222][ T4170] hci_rx_work+0x255/0xa10 [ 879.202506][ T4170] process_one_work+0x863/0x1000 [ 879.208450][ T4170] ? worker_detach_from_pool+0x240/0x240 [ 879.216131][ T4170] ? lockdep_hardirqs_off+0x70/0x100 [ 879.222276][ T4170] ? _raw_spin_lock_irq+0xab/0xe0 [ 879.237347][ T4170] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 879.244488][ T4170] ? wq_worker_running+0x97/0x170 [ 879.249822][ T4170] worker_thread+0xaa8/0x12a0 [ 879.257331][ T4170] kthread+0x436/0x520 [ 879.261681][ T4170] ? rcu_lock_release+0x20/0x20 [ 879.269794][ T4170] ? kthread_blkcg+0xd0/0xd0 [ 879.275795][ T4170] ret_from_fork+0x1f/0x30 [ 879.281154][ T4170] [ 879.288097][ T4170] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 879.303277][ T4170] Bluetooth: hci0: failed to register connection device [ 882.426621][ T140] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 883.131163][T13923] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 884.396608][T13698] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 884.408081][T13698] CPU: 1 PID: 13698 Comm: kworker/u5:0 Not tainted 5.15.183-syzkaller #0 [ 884.417254][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 884.427991][T13698] Workqueue: hci3 hci_rx_work [ 884.433168][T13698] Call Trace: [ 884.436661][T13698] [ 884.439987][T13698] dump_stack_lvl+0x168/0x230 [ 884.445247][T13698] ? show_regs_print_info+0x20/0x20 [ 884.450711][T13698] ? load_image+0x3b0/0x3b0 [ 884.455374][T13698] sysfs_create_dir_ns+0x252/0x280 [ 884.460792][T13698] ? __lock_acquire+0x7c60/0x7c60 [ 884.466430][T13698] ? sysfs_warn_dup+0xa0/0xa0 [ 884.471302][T13698] ? le_conn_complete_evt+0xcbc/0x1590 [ 884.477141][T13698] ? hci_event_packet+0xe05/0x12f0 [ 884.483505][T13698] ? process_one_work+0x863/0x1000 [ 884.489313][T13698] ? do_raw_spin_unlock+0x11d/0x230 [ 884.495087][T13698] kobject_add_internal+0x662/0xd00 [ 884.501044][T13698] kobject_add+0x152/0x210 [ 884.507091][T13698] ? kobject_init+0x1d0/0x1d0 [ 884.512972][T13698] ? klist_children_get+0x50/0x50 [ 884.518307][T13698] ? get_device_parent+0x121/0x3f0 [ 884.523730][T13698] device_add+0x483/0xfb0 [ 884.528658][T13698] hci_conn_add_sysfs+0xd1/0x1e0 [ 884.534017][T13698] le_conn_complete_evt+0xcbc/0x1590 [ 884.540265][T13698] ? cs_le_create_conn+0x5e0/0x5e0 [ 884.546139][T13698] ? finish_task_switch+0x12f/0x640 [ 884.552491][T13698] ? __mutex_trylock_common+0x14f/0x250 [ 884.558815][T13698] hci_le_meta_evt+0x289/0x3b80 [ 884.565874][T13698] ? hci_event_packet+0x36d/0x12f0 [ 884.572088][T13698] ? hci_event_packet+0x2e2/0x12f0 [ 884.578521][T13698] ? __lock_acquire+0x7c60/0x7c60 [ 884.584245][T13698] ? mark_lock+0x94/0x320 [ 884.590539][T13698] ? hci_remote_host_features_evt+0x280/0x280 [ 884.597962][T13698] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 884.604587][T13698] ? mark_lock+0x94/0x320 [ 884.609679][T13698] ? mutex_unlock+0x10/0x10 [ 884.614687][T13698] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 884.622291][T13698] ? lock_chain_count+0x20/0x20 [ 884.627588][T13698] ? __rwlock_init+0x140/0x140 [ 884.633155][T13698] hci_event_packet+0xe05/0x12f0 [ 884.638821][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 884.645046][T13698] ? rcu_lock_release+0x20/0x20 [ 884.651127][T13698] ? hci_send_to_monitor+0x9c/0x4a0 [ 884.656832][T13698] hci_rx_work+0x255/0xa10 [ 884.662631][T13698] process_one_work+0x863/0x1000 [ 884.668564][T13698] ? worker_detach_from_pool+0x240/0x240 [ 884.675157][T13698] ? lockdep_hardirqs_off+0x70/0x100 [ 884.680721][T13698] ? _raw_spin_lock_irq+0xab/0xe0 [ 884.686546][T13698] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 884.692905][T13698] ? wq_worker_running+0x97/0x170 [ 884.698604][T13698] worker_thread+0xaa8/0x12a0 [ 884.704519][T13698] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 884.710646][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 884.716869][T13698] ? lockdep_hardirqs_on+0x94/0x140 [ 884.723032][T13698] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 884.730528][T13698] kthread+0x436/0x520 [ 884.734923][T13698] ? rcu_lock_release+0x20/0x20 [ 884.740181][T13698] ? kthread_blkcg+0xd0/0xd0 [ 884.745064][T13698] ret_from_fork+0x1f/0x30 [ 884.749891][T13698] [ 884.786171][T13698] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 884.802668][T13698] Bluetooth: hci3: failed to register connection device [ 885.066364][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 889.754286][T13971] loop4: detected capacity change from 0 to 128 [ 891.257291][T13977] ================================================================== [ 891.267877][T13977] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 891.277524][T13977] Write of size 4 at addr ffff8880224969b8 by task syz.4.2440/13977 [ 891.285541][T13977] [ 891.287899][T13977] CPU: 0 PID: 13977 Comm: syz.4.2440 Not tainted 5.15.183-syzkaller #0 [ 891.296362][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 891.307183][T13977] Call Trace: [ 891.310731][T13977] [ 891.314082][T13977] dump_stack_lvl+0x168/0x230 [ 891.319555][T13977] ? show_regs_print_info+0x20/0x20 [ 891.325708][T13977] ? load_image+0x3b0/0x3b0 [ 891.331534][T13977] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 891.337071][T13977] ? lockdep_hardirqs_on+0x94/0x140 [ 891.343122][T13977] print_address_description+0x60/0x2d0 [ 891.349538][T13977] ? ax25_dev_device_down+0x35e/0x520 [ 891.356908][T13977] kasan_report+0xdf/0x130 [ 891.361551][T13977] ? ax25_dev_device_down+0x35e/0x520 [ 891.368474][T13977] ? kfree+0xef/0x2a0 [ 891.373131][T13977] kasan_check_range+0x27b/0x290 [ 891.379167][T13977] ax25_dev_device_down+0x35e/0x520 [ 891.384945][T13977] ax25_device_event+0x4b4/0x4f0 [ 891.391285][T13977] raw_notifier_call_chain+0xcb/0x160 [ 891.396918][T13977] __dev_notify_flags+0x178/0x2d0 [ 891.403289][T13977] ? __dev_change_flags+0x6a0/0x6a0 [ 891.409134][T13977] ? __dev_change_flags+0x4bb/0x6a0 [ 891.415094][T13977] ? dev_get_flags+0x1c0/0x1c0 [ 891.420416][T13977] ? dev_ioctl+0x54e/0xe50 [ 891.426513][T13977] ? dev_ioctl+0x54e/0xe50 [ 891.431240][T13977] dev_change_flags+0xe3/0x1a0 [ 891.437432][T13977] dev_ifsioc+0x147/0xe70 [ 891.442990][T13977] ? dev_ioctl+0xe50/0xe50 [ 891.450779][T13977] ? apparmor_capable+0x12c/0x190 [ 891.456385][T13977] ? full_name_hash+0x8e/0xe0 [ 891.461314][T13977] dev_ioctl+0x55f/0xe50 [ 891.466513][T13977] ? _copy_from_user+0x111/0x170 [ 891.472124][T13977] sock_do_ioctl+0x222/0x2f0 [ 891.477643][T13977] ? sock_show_fdinfo+0xb0/0xb0 [ 891.483923][T13977] sock_ioctl+0x4ed/0x6e0 [ 891.489321][T13977] ? sock_poll+0x3f0/0x3f0 [ 891.495195][T13977] ? bpf_lsm_file_ioctl+0x5/0x10 [ 891.503656][T13977] ? security_file_ioctl+0x7c/0xa0 [ 891.511475][T13977] ? sock_poll+0x3f0/0x3f0 [ 891.516747][T13977] __se_sys_ioctl+0xfa/0x170 [ 891.522406][T13977] do_syscall_64+0x4c/0xa0 [ 891.528440][T13977] ? clear_bhb_loop+0x15/0x70 [ 891.533991][T13977] ? clear_bhb_loop+0x15/0x70 [ 891.539223][T13977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 891.546833][T13977] RIP: 0033:0x7f7b41528969 [ 891.551909][T13977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.556671][ T7417] Bluetooth: hci3: command 0x0406 tx timeout [ 891.575997][T13977] RSP: 002b:00007f7b3f390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.576136][T13977] RAX: ffffffffffffffda RBX: 00007f7b4174ffa0 RCX: 00007f7b41528969 [ 891.576154][T13977] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 891.576171][T13977] RBP: 00007f7b415aaab1 R08: 0000000000000000 R09: 0000000000000000 [ 891.576186][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.576202][T13977] R13: 0000000000000000 R14: 00007f7b4174ffa0 R15: 00007ffcac4c8c68 [ 891.576236][T13977] [ 891.576246][T13977] [ 891.576251][T13977] Allocated by task 4581: [ 891.576264][T13977] __kasan_kmalloc+0xb5/0xf0 [ 891.576293][T13977] ax25_dev_device_up+0x50/0x580 [ 891.670351][T13977] ax25_device_event+0x483/0x4f0 [ 891.676341][T13977] raw_notifier_call_chain+0xcb/0x160 [ 891.683049][T13977] __dev_notify_flags+0x178/0x2d0 [ 891.689633][T13977] dev_change_flags+0xe3/0x1a0 [ 891.695374][T13977] dev_ifsioc+0x147/0xe70 [ 891.700273][T13977] dev_ioctl+0x55f/0xe50 [ 891.705098][T13977] sock_do_ioctl+0x222/0x2f0 [ 891.710039][T13977] sock_ioctl+0x4ed/0x6e0 [ 891.714595][T13977] __se_sys_ioctl+0xfa/0x170 [ 891.719880][T13977] do_syscall_64+0x4c/0xa0 [ 891.724940][T13977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 891.732872][T13977] [ 891.737759][T13977] Freed by task 13977: [ 891.742733][T13977] kasan_set_track+0x4b/0x70 [ 891.748239][T13977] kasan_set_free_info+0x1f/0x40 [ 891.757246][T13977] ____kasan_slab_free+0xd5/0x110 [ 891.763358][T13977] slab_free_freelist_hook+0xea/0x170 [ 891.771644][T13977] kfree+0xef/0x2a0 [ 891.776987][T13977] ax25_dev_device_down+0x1c0/0x520 [ 891.782932][T13977] ax25_device_event+0x4b4/0x4f0 [ 891.789730][T13977] raw_notifier_call_chain+0xcb/0x160 [ 891.796495][T13977] __dev_notify_flags+0x178/0x2d0 [ 891.802155][T13977] dev_change_flags+0xe3/0x1a0 [ 891.807451][T13977] dev_ifsioc+0x147/0xe70 [ 891.813843][T13977] dev_ioctl+0x55f/0xe50 [ 891.818386][T13977] sock_do_ioctl+0x222/0x2f0 [ 891.823439][T13977] sock_ioctl+0x4ed/0x6e0 [ 891.828645][T13977] __se_sys_ioctl+0xfa/0x170 [ 891.833664][T13977] do_syscall_64+0x4c/0xa0 [ 891.838413][T13977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 891.845196][T13977] [ 891.847897][T13977] Last potentially related work creation: [ 891.854518][T13977] kasan_save_stack+0x35/0x60 [ 891.859602][T13977] kasan_record_aux_stack+0xb8/0x100 [ 891.865489][T13977] insert_work+0x54/0x3d0 [ 891.870444][T13977] __queue_work+0x9c5/0xd50 [ 891.875209][T13977] queue_work_on+0x11d/0x1d0 [ 891.880980][T13977] inet6addr_event+0x9c/0xc0 [ 891.885876][T13977] atomic_notifier_call_chain+0x15d/0x280 [ 891.891635][T13977] ipv6_add_addr+0xb30/0xde0 [ 891.897177][T13977] addrconf_add_linklocal+0x280/0x6b0 [ 891.903352][T13977] addrconf_addr_gen+0x4ee/0x620 [ 891.908981][T13977] addrconf_init_auto_addrs+0x6e0/0xb20 [ 891.915347][T13977] addrconf_notify+0xa6b/0xf00 [ 891.921052][T13977] raw_notifier_call_chain+0xcb/0x160 [ 891.926738][T13977] __dev_notify_flags+0x178/0x2d0 [ 891.932324][T13977] dev_change_flags+0xe3/0x1a0 [ 891.937421][T13977] do_setlink+0xc01/0x3980 [ 891.941868][T13977] rtnl_newlink+0x1419/0x17d0 [ 891.946826][T13977] rtnetlink_rcv_msg+0x9b9/0xe60 [ 891.952183][T13977] netlink_rcv_skb+0x1e0/0x430 [ 891.957171][T13977] netlink_unicast+0x77c/0x920 [ 891.963419][T13977] netlink_sendmsg+0x8ab/0xbc0 [ 891.968468][T13977] __sys_sendto+0x423/0x580 [ 891.973414][T13977] __x64_sys_sendto+0xda/0xf0 [ 891.978134][T13977] do_syscall_64+0x4c/0xa0 [ 891.983053][T13977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 891.989175][T13977] [ 891.991522][T13977] The buggy address belongs to the object at ffff888022496900 [ 891.991522][T13977] which belongs to the cache kmalloc-192 of size 192 [ 892.009332][T13977] The buggy address is located 184 bytes inside of [ 892.009332][T13977] 192-byte region [ffff888022496900, ffff8880224969c0) [ 892.024507][T13977] The buggy address belongs to the page: [ 892.031440][T13977] page:ffffea0000892580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22496 [ 892.042455][T13977] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 892.052170][T13977] raw: 00fff00000000200 ffffea00018721c0 0000000200000002 ffff888016841a00 [ 892.064882][T13977] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 892.075545][T13977] page dumped because: kasan: bad access detected [ 892.084570][T13977] page_owner tracks the page as allocated [ 892.091963][T13977] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 7, ts 14165934835, free_ts 14077009972 [ 892.110056][T13977] get_page_from_freelist+0x1b77/0x1c60 [ 892.116882][T13977] __alloc_pages+0x1e1/0x470 [ 892.123266][T13977] new_slab+0xc0/0x4b0 [ 892.127836][T13977] ___slab_alloc+0x81e/0xdf0 [ 892.132688][T13977] __kmalloc+0x1cd/0x330 [ 892.137149][T13977] usb_alloc_urb+0x3f/0x140 [ 892.142335][T13977] usb_control_msg+0x115/0x3e0 [ 892.147963][T13977] hub_ext_port_status+0x103/0x6d0 [ 892.153255][T13977] hub_activate+0x6f3/0x1910 [ 892.159256][T13977] process_one_work+0x863/0x1000 [ 892.164964][T13977] worker_thread+0xaa8/0x12a0 [ 892.169699][T13977] kthread+0x436/0x520 [ 892.174248][T13977] ret_from_fork+0x1f/0x30 [ 892.178906][T13977] page last free stack trace: [ 892.183944][T13977] free_unref_page_prepare+0x637/0x6c0 [ 892.190025][T13977] free_unref_page+0x94/0x280 [ 892.195282][T13977] __mmdrop+0xaa/0x3e0 [ 892.199742][T13977] free_bprm+0x141/0x300 [ 892.204666][T13977] kernel_execve+0x380/0x900 [ 892.209790][T13977] call_usermodehelper_exec_async+0x207/0x350 [ 892.216961][T13977] ret_from_fork+0x1f/0x30 [ 892.222231][T13977] [ 892.224725][T13977] Memory state around the buggy address: [ 892.231036][T13977] ffff888022496880: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 892.240554][T13977] ffff888022496900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 892.249381][T13977] >ffff888022496980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 892.259292][T13977] ^ [ 892.267455][T13977] ffff888022496a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 892.278217][T13977] ffff888022496a80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 892.288832][T13977] ================================================================== [ 892.298876][T13977] Disabling lock debugging due to kernel taint [ 892.392210][T13977] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 892.400721][T13977] CPU: 0 PID: 13977 Comm: syz.4.2440 Tainted: G B 5.15.183-syzkaller #0 [ 892.411244][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 892.421993][T13977] Call Trace: [ 892.425800][T13977] [ 892.428937][T13977] dump_stack_lvl+0x168/0x230 [ 892.434956][T13977] ? show_regs_print_info+0x20/0x20 [ 892.440454][T13977] ? load_image+0x3b0/0x3b0 [ 892.445575][T13977] panic+0x2c9/0x7f0 [ 892.450006][T13977] ? bpf_jit_dump+0xd0/0xd0 [ 892.455155][T13977] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 892.461773][T13977] ? _raw_spin_unlock+0x40/0x40 [ 892.467328][T13977] ? ax25_dev_device_down+0x35e/0x520 [ 892.473122][T13977] check_panic_on_warn+0x80/0xa0 [ 892.478419][T13977] ? ax25_dev_device_down+0x35e/0x520 [ 892.484364][T13977] end_report+0x6d/0xf0 [ 892.488667][T13977] kasan_report+0x102/0x130 [ 892.493997][T13977] ? ax25_dev_device_down+0x35e/0x520 [ 892.499668][T13977] ? kfree+0xef/0x2a0 [ 892.503941][T13977] kasan_check_range+0x27b/0x290 [ 892.509131][T13977] ax25_dev_device_down+0x35e/0x520 [ 892.514471][T13977] ax25_device_event+0x4b4/0x4f0 [ 892.520028][T13977] raw_notifier_call_chain+0xcb/0x160 [ 892.525942][T13977] __dev_notify_flags+0x178/0x2d0 [ 892.531537][T13977] ? __dev_change_flags+0x6a0/0x6a0 [ 892.537059][T13977] ? __dev_change_flags+0x4bb/0x6a0 [ 892.542286][T13977] ? dev_get_flags+0x1c0/0x1c0 [ 892.547266][T13977] ? dev_ioctl+0x54e/0xe50 [ 892.551747][T13977] ? dev_ioctl+0x54e/0xe50 [ 892.556368][T13977] dev_change_flags+0xe3/0x1a0 [ 892.561256][T13977] dev_ifsioc+0x147/0xe70 [ 892.566009][T13977] ? dev_ioctl+0xe50/0xe50 [ 892.570598][T13977] ? apparmor_capable+0x12c/0x190 [ 892.575770][T13977] ? full_name_hash+0x8e/0xe0 [ 892.581086][T13977] dev_ioctl+0x55f/0xe50 [ 892.585625][T13977] ? _copy_from_user+0x111/0x170 [ 892.591130][T13977] sock_do_ioctl+0x222/0x2f0 [ 892.596124][T13977] ? sock_show_fdinfo+0xb0/0xb0 [ 892.601245][T13977] sock_ioctl+0x4ed/0x6e0 [ 892.606024][T13977] ? sock_poll+0x3f0/0x3f0 [ 892.610484][T13977] ? bpf_lsm_file_ioctl+0x5/0x10 [ 892.615449][T13977] ? security_file_ioctl+0x7c/0xa0 [ 892.620672][T13977] ? sock_poll+0x3f0/0x3f0 [ 892.625427][T13977] __se_sys_ioctl+0xfa/0x170 [ 892.630122][T13977] do_syscall_64+0x4c/0xa0 [ 892.634837][T13977] ? clear_bhb_loop+0x15/0x70 [ 892.639665][T13977] ? clear_bhb_loop+0x15/0x70 [ 892.644368][T13977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 892.650625][T13977] RIP: 0033:0x7f7b41528969 [ 892.655723][T13977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.681671][T13977] RSP: 002b:00007f7b3f390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.690953][T13977] RAX: ffffffffffffffda RBX: 00007f7b4174ffa0 RCX: 00007f7b41528969 [ 892.700011][T13977] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 892.709473][T13977] RBP: 00007f7b415aaab1 R08: 0000000000000000 R09: 0000000000000000 [ 892.718846][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.728361][T13977] R13: 0000000000000000 R14: 00007f7b4174ffa0 R15: 00007ffcac4c8c68 [ 892.738456][T13977] [ 892.742141][T13977] Kernel Offset: disabled [ 892.755008][T13977] Rebooting in 86400 seconds..