last executing test programs: 7m26.862714115s ago: executing program 2 (id=472): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7b321d3}, 0x8) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 7m26.0922682s ago: executing program 2 (id=474): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x2000, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000780)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0xfffffffffffffffd, r4}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x1000, 0x0, &(0x7f0000001980)="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"}) 7m25.013758627s ago: executing program 2 (id=476): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/30, 0x1e}, {0x0}], 0x2}}], 0x1, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 7m24.666817634s ago: executing program 2 (id=479): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x20081e, &(0x7f00000002c0)={[{@nodelalloc}, {@nobarrier}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f0000001180)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x8020000, 0x0, 0x0, 0xffff, 0x0, "4a98b600786500c898dfffffff0b00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000016c0)=0xff) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x49) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x200400, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e105000700810000008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0x1c}], 0x2}, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f00009bc000/0x4000)=nil, 0x4000, 0x2, 0x80010, r4, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r6, &(0x7f0000006000)=""/29, 0x1d) 7m21.874244718s ago: executing program 2 (id=488): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x1, 0x1, 0x10, 0x1ff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x2000, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000780)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0xfffffffffffffffd, r4}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x1000, 0x0, &(0x7f0000001980)="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"}) 7m19.986330975s ago: executing program 2 (id=492): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r2, 0x0, 0x2, 0x10000000009}) 7m18.934827247s ago: executing program 32 (id=492): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r2, 0x0, 0x2, 0x10000000009}) 1m19.705696914s ago: executing program 0 (id=1409): socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0) socket(0x2a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xeffd) syz_read_part_table(0x105d, &(0x7f0000001e80)="$eJzsz71tAkEQBeB36/uxA8vFuAP34IRiuJRKCOiDXqgBgRbtnQQdAMH3BavVzBuNJrxWybk2x5raJRnbM5cMrfmVsoT++s/6s+an1GS+j9fpmpI+yW7YjimnTEt989tdhvpY8518rL99C2dM0uX/8LxDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB93QIAAP//lgcUjg==") 1m17.049932354s ago: executing program 0 (id=1415): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1m16.110211464s ago: executing program 0 (id=1421): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x12, 0x51, "cb81d4b22e8fa30b6acfdffcf376fce97756c53265da30b356a59a4124b310390477f171bb84c7bc8542c0b33d7a24981d3443319b4d4a5394d1b93535a13478763f9f5788302a58e1eef89de63651d595"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x6f}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0xaa2b70f58bf8b1f1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x100, 0x44, [0xff]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000640)={0x40, 0xb, 0x2, "8897"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "cac1"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xe}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xb0}}) 1m12.566688638s ago: executing program 0 (id=1426): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4082, &(0x7f0000000240)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESDEC, @ANYRESDEC], 0x2, 0xc2d, &(0x7f0000001900)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x2887808, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2025) 1m12.185065363s ago: executing program 0 (id=1430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xa3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet6(r0, &(0x7f0000000480), 0x1, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000003c0)="94e97e5c878bc26b2a3de4bda3c5fd24ca35f70813108b4422da58c0e50d84d5f9bdb63743edb2712e2360c24eea3ae41807e7a5e5415b32a935580e33", 0x3d}, {&(0x7f0000000400)="8ee4ae013fb343", 0x7}, {&(0x7f0000000440)="e7e4b268d4b6856af61ebd658ea19d9399446745f757ea4497d51a68815ebffc3a7a1871f9d89a6d13629a17d6ead7e4597e511927e7a7ad6dd3c55401f0cc23a07fb2ab552ff381a531b8aa8d03a7bd3deb953798", 0x55}, {&(0x7f0000000680)="dc41ba2b777073497e11b8d848653a5c93aa90b7fa4553a0ad081d7143aecbdb28cca1e03aa66d1d6ef4991be80088459f2683c421316a179cc41938b4ed239ce35eac6f46dd994775d7e3941e2a090347fd33ead88342fd3c6405bdfff566f3ee4a1c56aa80154ab90ba4db4c52ebaeb6da729f0a37a2afcdf2b63883f60948225e1b61374f09d9258d04da8f84fe8085fdaf9493", 0x95}, {&(0x7f0000000580)="cedae65044410f", 0x7}, {&(0x7f0000000740)="edacd49992adf43175db3e5e9a87442e82ce673c9564df5c4aead6c8b576b77819214113d2936ca000d251826765e2c639a52dc9a1d9e32ed5ccb7e813d5c0edbf940de542a557e9d8e736c264d491e805216a85487a0042938fa45dae4d965f0acba716b0d7037b68e034f5e0157292a228a68e0a17908c6dc2b662e1017f684144fed832511fc5794e40bc97bd840ea08cf62d530ef34d68150a028dac8c3af36195eda58609d33f1bc77e61a6c1d83c7c4e6af3399b3560ad3150fae8e18d951cd181b5175ebf6f9cbbb138bfcada99e7d1a1a822265501c021f433b3541423633333af1249ea0a067bf6b5a185b66266054c2d29ba56f114c50d", 0xfc}, {&(0x7f0000000840)="ac7afd89a4ed74247ec6b1c42e7323c944e026e6e32166edfab48819d34718e4ccb9453a917a7a218222470ea0fead7fcb89a56564ee2b5352ae85a84b401d9d26b3eb175ced019b3219", 0x4a}], 0x7, &(0x7f0000000940)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x6eb7fc48daff80af, 0xa, 0x0, 0xfa, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}}}], 0x98}}, {{&(0x7f00000005c0)={0xa, 0x4e20, 0x42, @empty, 0x401}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000a00)="4963a17dc251f38ea6f9bd45fd8333de45e581653daae2719f0ad730e4143ee87b03b4edc2b4714b530da9126bac8d9371448f61252263207c31b24b878c608b6cbad48e3fbf1716bf71e9c0aa3ad3d9d7d944959d4b4bd76223bef39e9399003226a9439e93a2019eea103ecf1140cb7e965380cca12ad82a3bc5a72a22616ee69a8aa6fc2edb7192d501db0482fef3", 0x90}, {&(0x7f0000000ac0)="7cdd41476cd8baa53e18e8200b9a2cc0f46e3d14b8582d3d09a7ccc51a4cba46da3064bcdc81825d50c006bff7685203b459640fcc29673f39894cec41589f0385cadeb98ca99d8131fca07f1c847406ac3fd816ea1d3e13e29e841c3f253229ee293f6e726675b54fae2590e223af8dfe727b1475a95814639bbcfbed956bcd27c53c513621369d1af34b1993e8108d971614ae5ed97f3fcd11f986d18ba4aa42f7d944feb816c40cf46d2cf5d5b543679477422899ca716ee244106e2cf9b102e24eb3", 0xc4}, {&(0x7f0000000bc0)="7beb4d56c60ecd386f323a23541e167eea3d544554713daf751337d82fd8614b1c6038b7f2cd619a68d536e4ffea48c7f776dfe9ed3b08cd6c2c4f1e54307252f7f50eb7d61217ba9ff72bef8a3277de369cf3ba6ed76d00310c2297f86aaa6cf34b01751771954a44ebc8a4893aa232478cc4e3cf03d78f39e7d6bf520981b2801281a130b8fb9eda950044ff3caef1ac212fa91f4aa629d96b9b6a2c6898a2e75e23bb2143f3104a85dc2bdba18c7625853fa9a037123e7644190c2f9f768447d90aae92cc8adea04702f49c04e18a7cc8e197b6", 0xd5}, {&(0x7f0000000cc0)="7dd2416031192039b65e078ae513ccaf2b11cd3c6aedfc1fb114dce8d24775ede519241f47b3073a0159d9e7d45ad2cd767353d6dc5a5e3b1b796f81340bf34f9eacdc1d95f329eeaecf51932dcf75f19c37c8a92382e50b5e880dc54b6312f0fc8df899057b1bfa127e033f7559f6dc5cacec663414a15c12a12fe291adec5c4f", 0x81}], 0x4, &(0x7f0000000dc0)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x2, 0x1c, 0x0, [@mcast1, @mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts={{0x50, 0x29, 0x37, {0x0, 0x6, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x16}}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xf0}}, {{&(0x7f0000000ec0)={0xa, 0x4e22, 0xb, @private1, 0xfffffffb}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000f00)="bb8146a162bb786861b43be15f2ebcaa574a4e58331c54e324c90a45f59e55513caed162b16e", 0x26}], 0x1, &(0x7f00000010c0)=[@rthdrdstopts={{0x158, 0x29, 0x37, {0x84, 0x27, '\x00', [@generic={0x1, 0x9c, "16d4d46ac5a0f53bb0a40cfe90fc550ec488151d1b80e7b4c08a7c6e7368bcc0c8d864b873203394100da7db98a91852f53abb2019555890043ac29e468d69f5c214aea152a7de3efa9fcbb2ea1d4760f8f6f05fe65b8e8a609895dd6b4173261a84fef751732a7ba8cf9dfbe2701be37a4e0fa2306fbe01f58cddc57a6ddfb95b9c6259830b8e85546ae2a336d6789c3c6a92ac41c3b746a7617a29"}, @hao={0xc9, 0x10, @private2}, @generic={0x8, 0x89, "21ad0442596bb84225b31f72d2aa8f6b768bc95b027898c3fdc98ffa325a0b87c7407256afeb88462264b025f72f374d83eb2287ab5a64bacac926d7c0e3f03f923f100567bd1b8f7a7a802cdd3b478837ae09dba4dd346d470564c4d80b7553f6a84ba8a15f4966e7f7304ca8ed880cc437a67bf56d9e98532814f1a49ca829c7c34aadeb30689f32"}]}}}, @hopopts_2292={{0x188, 0x29, 0x36, {0x6, 0x2d, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x40}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x81, 0x8b8, [0x2, 0x26, 0x120000000000000, 0x3, 0x5, 0x7fffffffffffffff, 0x8]}}, @hao={0xc9, 0x10, @loopback}, @generic={0x6, 0x93, "2cfdb69bfa08f9c08debe3f8d1f55836e0b77beb897f83004878a87ece187f089100fabd6d4fd15f870121b03a1a253aff78140578386d869c4c7eef45d761548352b1a69c26481269de25b11b11a0dacef9137bc0df12dc990c5bc007ded3aba3fdf9ac61feee8467128e3bd74222c183027378485d57ba9ccebd28e67365f7060a6412878902250e6ec3adaae52ef3273eef"}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x18, {0x1, 0x4, 0x93, 0x400, [0x3, 0xfa6]}}, @generic={0x7, 0x3d, "7f4c5d556aa9f96106bd7833fa5505b6453cf9e677e4fd17b10234206403cbd620d58a2643145a3ff74a1d649639c8f52364ff2888dad99d1e00c7941c"}]}}}, @hoplimit={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0xe3}}, @flowinfo={{0x14, 0x29, 0xb, 0xcc}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x8, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x390}}, {{&(0x7f0000000f80)={0xa, 0x4e21, 0x8, @private1, 0x9}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000000fc0)="84483d8462a1b5f22239c2137595ab69534e7e", 0x13}, {&(0x7f0000001480)="e9553549c653b41f9662eaa45b278bb41b758b9107", 0x15}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="d15aab3973a7f960df16c3c8d54fe2eb97d498a3daf207475439041ec15cc4a2af041f9421090a285fab5e626fd4505d8670a71e8cd3bfc82b0639fa5854db4347a8a84ac6bd4df9052885bec8d1056ad122251ca03a3c8fe46e112b6a5655eff19abe314957ec", 0x67}, {&(0x7f0000002540)="28c19bf92352e889d2d4ba7bbcb3b405b070e27470b647c2dd295bacb93aa527c94443ff3e21e5489744b1eb98b40e98f4cd011584", 0x35}, {&(0x7f0000002580)="f0ffc22ad4663f7b2641782c8e810a1ffdcf223631a2d3b530782283b3190c6bc3f8e46d8d325550f3da59ceb94a875932d4ae167bcd8d71a92c743bd55c88e45a5922d2565adb4c243605fc4320cfc4781c334f6afa03235583018063290143fdd8d3340dfba7ea85286580fd1bfae1aa1daba1c3d997a3f06dff97ca3794aba7ba0714255771a7c300be4e01c6ed7f2b757fe5df", 0x95}, {&(0x7f0000002640)="8fb7a0f76a0ffead243d260a4496f556934b24b0856f279d170a1e06d741ec8ada98bc50269469f39f6dbdbfe40d9b82bc79c92b9b1e42600d530be0b389ce756f9bb65b94003dadf8adf3371eef78691d5c0b75dc17af48074863543ad4f453285158236703fdd3e63ac3af83b611c2df094f1756b8f3332da1919f331c9dadd2e65fbf011592de7efbbb3d584a42d9f3d365391a4a32789fd5cdcd1bb09f9bd6d9a1af7f740059381fa5b41bce22fb1850787219c30363cc0d3a59e294c5cf22aa3fe7974aa6f308e0e7ba216835f40893ff9bd27e36f7eb77d4a2e6f047711ac4dd", 0xe3}], 0x7, &(0x7f00000027c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}], 0x30}}, {{&(0x7f0000002800)={0xa, 0x4e22, 0x8, @loopback, 0xffffffff}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000002840)="836d869162746e7bed06652a56590f27ccf524bc19be38b524da3c151856cad3d68ab21866b658b053afe79e3bbe6901967a5fc4073846a0a07dd68dce4b2362f42e5c160912342dd7df6f07b91b71e5cc8480b2004af6b26475b0e6b823bf5792ce06b04e3ffd7911f1225e8e392523f08674003e672522ed495fa5074752b16476f87d80c751c56e6ddf8311ea9e65b3397777f10c4ff349d548d6ef610d10a2fb828707c0d868df1ad8dfd064bc989eea0b3e68296617c81a66fdf4ef58f3628e370fc0210fec119ad6ce68a269a3c22a16195cf4", 0xd6}, {&(0x7f0000002940)="2b16b2b5dee9f9f0cfe462d53c413b4c7492969e24b39e9e123baa964a651da3e3b2a4a674522c9c7c3a2ea21aa8be3665612af0fd747af2b7bcf18b6597c3feee86c953579c0dff9f2a32b7c1a8bedd895b3a30133874f0822c75f2fe59491d5347b1d5cf6911bc9d8e841c79", 0x6d}, {&(0x7f00000029c0)="5fcbd754bbca4fd873143b540af6c4e478d7da16b7c99622f28ec449f5a08afd88263555e0c1d662b1d4ddf23bcad712cd4149f3f72cc590ad46590ddaeae19cb775fac44aa85f057057ab074f3dc16124c974844f989613a67195676a766d4f544a25ed9eaa1459054fbc5cfb1301ba373e40e2ce38a3d2619a8ef579eb46201831bcb5e8228695f42d6b2c5ecee2d27059d8e3fa81e89f7e686f639fcd113a", 0xa0}, {&(0x7f0000002a80)="fce75789cfbe9cff1274d81714ed23120b9f7eecbe44c65679b9467e6e1b55cc68a9d71e39d7d61dc368eaca69754cf974", 0x31}, {&(0x7f0000002ac0)="5ada71de59c15aa056fe8959478a4f8884d4421022ff32c382bbdef8949bdd9c99204be9696574c8c0ec9d321fa612c47994e6cee1b6783f6e872ef98855924ebc5e0576b0c285e4cb4aa22d3326df958b47afa78381abc5643a9d3f8b20b3976114c93b944aeb1d87f96b7d075cf9c23ff0724e92547a8a5e724544", 0x7c}], 0x5}}], 0x5, 0x20000000) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000410d5a538f0606ae05b9b78481dbf5f42f0f64ec6d31765d125c077b9005af5b3c7b1d0355d1db0e0786f3b61b90ed031cccae5b4ec4ec1e93dbb0d9a9c63cdba29fd41cee1fba5562e7367138c333ba61f1947ffca82396198b2a3bfb37ab085b9c094e99e7a174196dbefa6b2df853d464ea2a6962e95af269a6c64b2b8b4ca4acf21186ca07454e84bc05ea7807501a66e7719b27e15708bd16eb1c0c108b211532bca3b41f0118bf0a4523640a32d69b20636c5df2a2b8a706b28bd8ac3eb514b012"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}], 0x10) 1m11.798698366s ago: executing program 0 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f0000001040)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300c983b1723652daa72aa27ef95e7270908ef2d474fa2f3135e468e2db24358266beb30500", @ANYRES32=r5, @ANYBLOB="080026006c0900005000330050000000ffffffffffff08021100000050505050505000000000000000000000640000000406000000000000060201002d1a00"/88], 0x74}}, 0x80) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x48, 0x2}]}) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000400000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="848000411eb8975ac4707bb2aaca54d61f0090fa"], 0x0) 1m9.907149648s ago: executing program 33 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f0000001040)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300c983b1723652daa72aa27ef95e7270908ef2d474fa2f3135e468e2db24358266beb30500", @ANYRES32=r5, @ANYBLOB="080026006c0900005000330050000000ffffffffffff08021100000050505050505000000000000000000000640000000406000000000000060201002d1a00"/88], 0x74}}, 0x80) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x48, 0x2}]}) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000400000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="848000411eb8975ac4707bb2aaca54d61f0090fa"], 0x0) 46.054615479s ago: executing program 6 (id=1493): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x0) unshare(0x44040000) r3 = socket$key(0xf, 0x3, 0x2) munlock(&(0x7f0000001000/0x2000)=nil, 0x2000) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffd, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x1, 0x40, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c692401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0x20000000, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4756, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6b, 0x0, 0xfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x6, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1fb}, {0x5, 0x0, 0x6, 0x800, 0xf0, 0x4}, 0x6, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x2, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) 44.050286188s ago: executing program 7 (id=1496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r0, 0xc, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5}, {0x5}]}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x12000000, '.\x00'}}) 43.780062945s ago: executing program 6 (id=1497): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x7}}, {@noauto_da_alloc}, {@discard}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0xf0, 0x67) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x2) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000480)='7', 0x1}], 0x1, 0x26b8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000500071b48013d030100000000009500000000000000bc26000000000000bf67200000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) linkat(r2, &(0x7f0000000240)='./file2\x00', 0xffffffffffffffff, 0x0, 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'bond_slave_0\x00', 0x7}) 43.379058848s ago: executing program 1 (id=1499): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x16, &(0x7f0000000180)=@raw=[@printk={@x}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6ec3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x3, 0x6, 0x2, 0x9, 0x20, 0xfffffffffffffffc}], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x3, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x4, 0x0, 0xb}], 0x10, 0xce05, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 43.350369156s ago: executing program 7 (id=1500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000048000380050008007f000000060007004e21000014000200626174616476300000000000000000000800010002000000080003"], 0x5c}}, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1cd381, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 42.586218795s ago: executing program 1 (id=1501): r0 = socket(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x18, 0x6, @random="605a2ba300"}, 0x14) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 42.03744693s ago: executing program 7 (id=1503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB="2373460d3be373797a302e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB='b'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 41.394696206s ago: executing program 7 (id=1505): socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mlock(&(0x7f000000c000/0x3000)=nil, 0x3000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182195f5258493"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x2) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14, 0x80800) setsockopt$packet_int(r3, 0x107, 0x10, &(0x7f0000000340)=0x3, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="a7", 0x1}], 0x1}, 0x0) close(r2) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0xfff, 0x4, 0x29185047, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_skbedit={0x32, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x6, 0x6, "f9f8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4c}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x320, 0x0, 0x9, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x1}) 41.208699611s ago: executing program 1 (id=1508): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x80000, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, 0x0, 0x0) unshare(0x44040000) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devicPo '], 0x9) r4 = socket$key(0xf, 0x3, 0x2) munlock(&(0x7f0000001000/0x2000)=nil, 0x2000) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffd, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x1, 0x40, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c692401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0x20000000, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4756, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6b, 0x0, 0xfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x6, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1fb}, {0x5, 0x0, 0x6, 0x800, 0xf0, 0x4}, 0x6, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x2, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0xb7}}, 0xe8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) 38.850477082s ago: executing program 5 (id=1510): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x0) unshare(0x44040000) r3 = socket$key(0xf, 0x3, 0x2) munlock(&(0x7f0000001000/0x2000)=nil, 0x2000) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffd, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x1, 0x40, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c692401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0x20000000, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4756, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6b, 0x0, 0xfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x6, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1fb}, {0x5, 0x0, 0x6, 0x800, 0xf0, 0x4}, 0x6, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x2, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) 37.318347627s ago: executing program 7 (id=1513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x8000000000000000, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) mq_timedreceive(r1, &(0x7f00000008c0)=""/223, 0xdf, 0x2, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xffffffffffffff83, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000340)=[0x0], 0x0, 0x4e, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x4a, 0x8d, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) close(r6) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r9, 0x3048}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_STREAMOFF(r9, 0x40045613, &(0x7f0000000000)=0xfffffffe) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0xc, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) timerfd_create(0x5, 0x80800) 37.254425163s ago: executing program 5 (id=1514): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x1, 0x1, 0x10, 0x1ff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x2000, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000780)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0xfffffffffffffffd, r4}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001980)="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"}) 36.907312808s ago: executing program 5 (id=1515): socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xeffd) syz_read_part_table(0x105d, &(0x7f0000001e80)="$eJzsz71tAkEQBeB36/uxA8vFuAP34IRiuJRKCOiDXqgBgRbtnQQdAMH3BavVzBuNJrxWybk2x5raJRnbM5cMrfmVsoT++s/6s+an1GS+j9fpmpI+yW7YjimnTEt989tdhvpY8518rL99C2dM0uX/8LxDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB93QIAAP//lgcUjg==") setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@errors_remount}, {@grpquota}, {@uid}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@nodiscard}, {@usrquota}, {@uid}]}, 0x23, 0x61b6, &(0x7f00000075c0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f00000000c0)=""/55, 0x37) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) 36.838666072s ago: executing program 7 (id=1516): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet6(r0, &(0x7f0000000480), 0x1, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000410d5a538f0606ae05b9b78481dbf5f42f0f64ec6d31765d125c077b9005af5b3c7b1d0355d1db0e0786f3b61b90ed031cccae5b4ec4ec1e93dbb0d9a9c63cdba29fd41cee1fba5562e7367138c333ba61f1947ffca82396198b2a3bfb37ab085b9c094e99e7a174196dbefa6b2df853d464ea2a6962e95af269a6c64b2b8b4ca4acf21186ca07454e84bc05ea7807501a66e7719b27e15708bd16eb1c0c108b211532bca3b41f0118bf0a4523640a32d69b20636c5df2a2b8a706b28bd8ac3eb514b012"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}], 0x10) 34.541422978s ago: executing program 5 (id=1517): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 34.263075401s ago: executing program 1 (id=1518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000040)={0x8000, 0x2, 0xffffffff, 0x2, 0x0, 0x7, 0x2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='io_uring_req_failed\x00', r6}, 0x18) r7 = syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x7e05, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000500)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) sched_setaffinity(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x200}, {r0, 0x100}, {r4, 0x1404}, {r3, 0xa28}, {r0}, {r3, 0x1004}, {r0, 0xa000}, {r0, 0x2201}], 0x8, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={[0x7]}, 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) 33.88672053s ago: executing program 3 (id=1519): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xf, 0xd2, {0x5, 0xf, 0xd2, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x43, 0x4, 0x2, 0x5, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "2a97303e60494cc4f4421fe45afe395f"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xf, 0x9, 0x8}, @generic={0xa7, 0x10, 0x1, "103d8aee974e5239781941f71756dc159654d287b1112274934496e9e1ba714bf743680d113f1ec8bdad08f1f7bff1d62826964e9f3bba1ed9270d280ac1574f5af29515bb7610b9d53a1e90211d157a4d6a249dc335ef043000313cc9ebec4c466b5f6bebdee3664b098aade6f32404c87a17c66ee0dbb4b7c06af7b5fd185dde80e5bde3bf7eab6b7c5ed3ed08f8a1f1a780acfb9605720262083bfce0ccedb9fdc17f"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x8, 0x2, "9337e523", "d0605246"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x4, 0x0, 0xff, 0x7, 0x2}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x12, 0x51, "cb81d4b22e8fa30b6acfdffcf376fce97756c53265da30b356a59a4124b310390477f171bb84c7bc8542c0b33d7a24981d3443319b4d4a5394d1b93535a13478763f9f5788302a58e1eef89de63651d595"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x6f}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0xaa2b70f58bf8b1f1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x100, 0x44, [0xff]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000640)={0x40, 0xb, 0x2, "8897"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "cac1"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xe}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xb0}}) 33.622134249s ago: executing program 6 (id=1521): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback, 0x9afe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x1, 0x0, 0x15}, &(0x7f0000000740)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 33.323441445s ago: executing program 5 (id=1522): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 33.061674536s ago: executing program 5 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000240)='.\x00', &(0x7f0000000280)="3eb2db59324d5e877441a094cb071443b86807a4457ac09ef656a6b1f1ce77902a4a6fc2a45241060302193f21e367ddb09bdb742f167ece741cecd9e700c18adb9541b6135f2a81c2ccef836235ca843a9c63f0fa38f1094d70e06be5365144c609f62ec4ad6eb5b079d20d3e92cb60933c16cb7843523f81f4b1695dbd5c20a8bb98aefc7f281f36e9982a60b1a92cd7fa8d8e355816c96484dfc91c07e9b3c2fb289bfe904630592905", 0xab) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) 32.700813574s ago: executing program 6 (id=1524): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0x5, 0x2, {0x2, 0xa}}, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x4, 0x80, "740353dd", '\'p53'}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x4, 0x81, 0x8, 0x8, 0xfff7, 0x2}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x40, 0xe, 0xc1, "76ba8b8b5d3a9976e38bba0639afe0b44c8fdf46fc1031f1c043ae0691b74b4c513f94bb808973de1ae93794352c42b42efd57d33f80db703b8a1ef006264102e1bca823ee9fc6f734d57ce52ac5ec20cc940597359623384de2eb101092b877eeec1b8d11580f3313916c0cbb57a9eed3254e3135dd15205ae808b02d17577741300dc4b0b3be2c2df46fec28a29c3e6c9cfe7207b85bcdca27aefb4cecdbd1fd3e62f75b295085b5a5c696cc52d2e8e7b85c0de0e7c995783fe6b7996d0b0ceb"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xc0, 0x4}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xe}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "8d43"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x600}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8cf0"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x61}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) 32.189230776s ago: executing program 3 (id=1526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006fda9bee16c5e93f00000000000000c100000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000040b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0xffffffff}]}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0x9}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x80, 0xc, 0x88, 0x0, 0x0, 0x5}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8824}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00010000100509043300011870fd00090582020002"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x103, @local, 0xb}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0xfffffd76) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r3]) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000140)={'pim6reg\x00', 0x0, 0x4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0xffffffff}) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x81, &(0x7f0000000080)={[{@nobarrier}, {@errors_remount_ro}, {@nodiscard}, {@order_strict}, {}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xf43, &(0x7f0000001e80)="$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") mount$overlay(0x0, &(0x7f0000000300)='./file1/file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x40) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='error{=continue,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000400000010,iocharset=iso8859-2,sys_tz,keep_last_dots,sys_tz,\x00'], 0x1, 0x1548, &(0x7f0000001900)="$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") 31.866924248s ago: executing program 1 (id=1527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 31.833985943s ago: executing program 6 (id=1528): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x9, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0xff}) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000002c0), 0xfe, 0x4fb, &(0x7f0000000880)="$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") 27.213020173s ago: executing program 4 (id=1529): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@deltaction={0x1a8, 0x31, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x801c}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b4}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x84}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x42, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x3fff, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x46085}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xffa6}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 27.044963457s ago: executing program 1 (id=1530): r0 = open(0x0, 0x80000, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x9) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) 26.888837953s ago: executing program 3 (id=1531): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000007080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000002140)={[{@nogrpid}, {@nouid32}, {@discard}, {@nombcache}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@data_journal}, {@jqfmt_vfsold}, {@journal_checksum}]}, 0xee, 0x476, &(0x7f0000002a00)="$eJzs3M9vFFUcAPDvTCkgCEVEFAStorHxR0sLKgcuGk08qDHRAx5rWwhSqKE1EUKkGINHQ+LdeDTxL/CkF6OeTLwZvRsSosQENCaumdkZ2G67Sxe2jHY/n2Sy7+3M7HvfffN23szb3QB61mBE9EfEnRHxc0QMRERf8waD9Yerl89M/Hn5zEQStdrrvyWRRMSVy2cmyk2T4nFjkRlKI9IPk/rOTWZPnT42Pj09dbLIj8wdf2dk9tTpp44eHz8ydWTqxNiBA/v3jT77zNjTXYkzi+vKzvdndu146c0Lr0wcuvDWd19k9d2+u76+MY5uGcwC/72Wa173aLcLq9imhnSypsKK0JGsr2fNleb9fyD64nrjDcSLH1RaOWBFZeemda1Xz9eAVSyJqmsAVKM80WfXv+XSajDQ3/3hR+UuPVe/AMrivlos9TVr8muiaBv334uu6zs1GBGH5v/6NFtihe5DAAA0+iob/zy51Pgvje0N220u5lC2RMRdEbE1Iu6OiG0RcU9Evu29EXHfskqt1Wpn66nmqaHF45/04q3EdyPZ+O9gMbe1cPxXjv5iS1+R25TH358cPjo9tbd4T4aif12WH21Txtcv/Phxq3WN479sycovx4JFPS6uabpBNzk+N96twfilc/VGXRx/cm0mIImIHRGxs7OX3lwmjj7++a5WG904/ja6MM9U+yzisXr7z0dT/KWk/fzkyPqYnto7Uh4Vi33/w/nXWpXfMv7bNIeWtf+Ghcd/0xYDfySN87WznZdx/pePWl7T3OzxvzZ5I5+zXls899743NzJ0Yi1yct5fsHzY9f3LfPl9ln8Q3uW7v9bi32y+O+PiOwg3h0RD0TEg0XdH4qIhyNiT5v4v33+kbdvPv6VlcU/ueTn37Xjf8vC9l+cOPhqRItVeaLv2Ddftip/ee2/P08NFc/kn3830KY6CxK38t4BAADA/0Waf/c/SYevpdN0eLj+Hf5tsSGdnpmde+LwzLsnJvPfCPxTfG0gv9M10HA/dDSZL16xnh8r7hWX6/cV940/6bsjzw9PzExPVhw79LqNLfp/5te+qmsHrDi/14Le1dz/04rqAdx+zv/Qu/R/6F36P/Supfr/2aa8uQBYnZz/oXfp/9C79H/oXTfR/1fjf4FBr1nWj+Q7TZzr9gt2nvhpfZWl1xNpRFT6JqxoItL/RDUklpMo/8yjg70q/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokn8DAAD//7749Hk=") ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000004c0)={0x400, 0x320, 0x300, 0x960, 0x1, 0x0, 0xcb1c552c0402932, 0x2, {}, {0x20, 0x0, 0x1}, {0xf7ffffff, 0x4, 0x4}, {0x0, 0x8, 0xa}, 0x2, 0x100, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0x3c, 0x0, 0x1, 0x9}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a03020000000000000000020000000900020073677a30000010000900010073797a3000000000400003802c000380140001006261746164765f736c6176655f3000001400010073797a5f74756e00000000000000000008000240000000000800014000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) 20.182286907s ago: executing program 34 (id=1516): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet6(r0, &(0x7f0000000480), 0x1, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000410d5a538f0606ae05b9b78481dbf5f42f0f64ec6d31765d125c077b9005af5b3c7b1d0355d1db0e0786f3b61b90ed031cccae5b4ec4ec1e93dbb0d9a9c63cdba29fd41cee1fba5562e7367138c333ba61f1947ffca82396198b2a3bfb37ab085b9c094e99e7a174196dbefa6b2df853d464ea2a6962e95af269a6c64b2b8b4ca4acf21186ca07454e84bc05ea7807501a66e7719b27e15708bd16eb1c0c108b211532bca3b41f0118bf0a4523640a32d69b20636c5df2a2b8a706b28bd8ac3eb514b012"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}], 0x10) 20.122441133s ago: executing program 4 (id=1533): r0 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB='('], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16=0xffffffffffffffff], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220f0000000bf896e404096592f792039ef12d194d9a45d6a838e250e8b36c394ddcb692eab503587388db92cb5501679cac2c9662e086cc80e1bbd27c05f30b796aa092056c25b2be1d85b4572699155f1f4425e0dfcb8b9a4f3afa1aa36cde38f15417a0d18dd72b5c63e98f0c890e6d22bd08980000000000", @ANYRES8=r0, @ANYRESOCT=r2, @ANYRES32], 0x0}, 0x0) socket$inet6(0xa, 0x1, 0x3) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x4018480c, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x188}) 16.184447926s ago: executing program 35 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000240)='.\x00', &(0x7f0000000280)="3eb2db59324d5e877441a094cb071443b86807a4457ac09ef656a6b1f1ce77902a4a6fc2a45241060302193f21e367ddb09bdb742f167ece741cecd9e700c18adb9541b6135f2a81c2ccef836235ca843a9c63f0fa38f1094d70e06be5365144c609f62ec4ad6eb5b079d20d3e92cb60933c16cb7843523f81f4b1695dbd5c20a8bb98aefc7f281f36e9982a60b1a92cd7fa8d8e355816c96484dfc91c07e9b3c2fb289bfe904630592905", 0xab) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) 15.9414118s ago: executing program 4 (id=1535): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 14.974795568s ago: executing program 36 (id=1528): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x9, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0xff}) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000002c0), 0xfe, 0x4fb, &(0x7f0000000880)="$eJzs3V9rHGsZAPBnJrvnNG2Om6Ne6AHbYitJ0W6SxrbBi1ZB9Kqg1vsak20I2WRLsmmbUDTFDyCIqOCNXnkj+AEE6UcQoWDvRUURbfVCoTqyu7MxTXeTlG52Mfv7wZv5u/M8b5Z5Z96ZYSeAoXU+IiYjIsuy7FJElPL5aV5ip1Ua6714/mihUZLIstt/TeJcPq+9rXfz4Zn8Y6ci4mtfjvhm8nrcja3tlflqtbKeT0/VV5OXWbZ9eXl1fqmyVFmbnZ25Nnd97urcdE/qOR4RN774xx9892dfuvGrzzz43Z0/T36rVcGWvfXopVbVi83/RVshItaPI9iAFJo1bLk64FwAADhY43z/wxHxyYi4FKUYaZ7NAQAAACdJdnMsXiat+38AAADAyZRGxFgkaTl/3ncs0rRcbj3D+9E4nVZrG/VPZ6Xd6wXjUUzvLlcr0/mzA+NRTBrTM/kztu3pK/umZyPi/Yj4fmm0OV1eqFUXB3rlAwAAAIbHmX39/3+UWv1/AAAA4IQZH3QCAAAAwLHT/wcAAICTT/8fAAAATrSv3LrVKFn7/deL97c2V2r3Ly9WNlbKq5sL5YXa+r3yUq221PzNvtXDtlet1e59NtY2H07VKxv1qY2t7Turtc21+p3lV16BDQAAAPTR++eePEsiYudzo2lEZMmeZcWIbGTvyoX+5wccn/RNVv7D8eUB9N/IoBMABsYpPQyv4qATAAbusHag68M7v+59LgAAwPGY+PiTZ9G6/98sDe/ky5JBJgYcu/z+f2Jfh+Hj/j8ML/f/YHgVDzoD0CmAEy89wq7+9vf/s+yNkgIAAHpurFmStJz3A8YiTcvliPearwUoJneXq5XpiPhQRPy2VHy3MT3T/GTi8gAAAAAAAAAAAAAAAAAAAAAAAAAAHFGWJZF1Mbq7DgAAAPD/LCL9U5K//2uidHFs//WBd5J/lprDiHjw49s/fDhfr6/PNOb/bXd+/Uf5/Cv9vnoBAAAAdNLup7f78QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQSy+eP1pol37G/csXImK8U/xCnGoOT0UxIk7/PYnCns8lETHSg/g7jyPiY53iJ420YjzPYn/8NCJGBxz/TA/iwzB70mh/Pt9p/0vjfHPYef8r5OVtdW//0t32b6RL+/depw2mr8/64OkvprrGfxzxQaFz+9OOn3SJf+GIdfzG17e3uy3Lfhox0fH4k7wSayop3Jva2Nq+vLw6v1RZqqzNzs5cm7s+d3VueurucrWS/+0Y43uf+OV/Dqr/6S7xxw+p/8Uj1v/fTx8+/0hrtLhvUTF+kmWTFzoff1v//7i5P3772Pep/OtuTE+0x3da43ud/flvzp7rktvo44jFLvU/7PufPGL9L331O78/4qoAQB9sbG2vzFerlfWOI63j/MHrGDFy2Mho9DHofBy0Tvsktg/5fDsP1ce6/yvr2QYH2CgBAADH4n8n/YPOBAAAAAAAAAAAAAAAAAAAAIbXYT8DFj34ObH9MXcGU1UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAP9NwAA//9M6clU") 14.941181166s ago: executing program 3 (id=1537): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1], 0x44}}, 0x24040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 14.701331767s ago: executing program 4 (id=1538): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000007080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000002140)={[{@nogrpid}, {@nouid32}, {@discard}, {@nombcache}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@data_journal}, {@jqfmt_vfsold}, {@journal_checksum}]}, 0xee, 0x476, &(0x7f0000002a00)="$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") ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000004c0)={0x400, 0x320, 0x300, 0x960, 0x1, 0x0, 0xcb1c552c0402932, 0x2, {}, {0x20, 0x0, 0x1}, {0xf7ffffff, 0x4, 0x4}, {0x0, 0x8, 0xa}, 0x2, 0x100, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0x3c, 0x0, 0x1, 0x9}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a03020000000000000000020000000900020073677a30000010000900010073797a3000000000400003802c000380140001006261746164765f736c6176655f3000001400010073797a5f74756e00000000000000000008000240000000000800014000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 11.215838459s ago: executing program 3 (id=1539): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000007080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000002140)={[{@nogrpid}, {@nouid32}, {@discard}, {@nombcache}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@data_journal}, {@jqfmt_vfsold}, {@journal_checksum}]}, 0xee, 0x476, &(0x7f0000002a00)="$eJzs3M9vFFUcAPDvTCkgCEVEFAStorHxR0sLKgcuGk08qDHRAx5rWwhSqKE1EUKkGINHQ+LdeDTxL/CkF6OeTLwZvRsSosQENCaumdkZ2G67Sxe2jHY/n2Sy7+3M7HvfffN23szb3QB61mBE9EfEnRHxc0QMRERf8waD9Yerl89M/Hn5zEQStdrrvyWRRMSVy2cmyk2T4nFjkRlKI9IPk/rOTWZPnT42Pj09dbLIj8wdf2dk9tTpp44eHz8ydWTqxNiBA/v3jT77zNjTXYkzi+vKzvdndu146c0Lr0wcuvDWd19k9d2+u76+MY5uGcwC/72Wa173aLcLq9imhnSypsKK0JGsr2fNleb9fyD64nrjDcSLH1RaOWBFZeemda1Xz9eAVSyJqmsAVKM80WfXv+XSajDQ3/3hR+UuPVe/AMrivlos9TVr8muiaBv334uu6zs1GBGH5v/6NFtihe5DAAA0+iob/zy51Pgvje0N220u5lC2RMRdEbE1Iu6OiG0RcU9Evu29EXHfskqt1Wpn66nmqaHF45/04q3EdyPZ+O9gMbe1cPxXjv5iS1+R25TH358cPjo9tbd4T4aif12WH21Txtcv/Phxq3WN479sycovx4JFPS6uabpBNzk+N96twfilc/VGXRx/cm0mIImIHRGxs7OX3lwmjj7++a5WG904/ja6MM9U+yzisXr7z0dT/KWk/fzkyPqYnto7Uh4Vi33/w/nXWpXfMv7bNIeWtf+Ghcd/0xYDfySN87WznZdx/pePWl7T3OzxvzZ5I5+zXls899743NzJ0Yi1yct5fsHzY9f3LfPl9ln8Q3uW7v9bi32y+O+PiOwg3h0RD0TEg0XdH4qIhyNiT5v4v33+kbdvPv6VlcU/ueTn37Xjf8vC9l+cOPhqRItVeaLv2Ddftip/ee2/P08NFc/kn3830KY6CxK38t4BAADA/0Waf/c/SYevpdN0eLj+Hf5tsSGdnpmde+LwzLsnJvPfCPxTfG0gv9M10HA/dDSZL16xnh8r7hWX6/cV940/6bsjzw9PzExPVhw79LqNLfp/5te+qmsHrDi/14Le1dz/04rqAdx+zv/Qu/R/6F36P/Supfr/2aa8uQBYnZz/oXfp/9C79H/oXTfR/1fjf4FBr1nWj+Q7TZzr9gt2nvhpfZWl1xNpRFT6JqxoItL/RDUklpMo/8yjg70q/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokn8DAAD//7749Hk=") ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000004c0)={0x400, 0x320, 0x300, 0x960, 0x1, 0x0, 0xcb1c552c0402932, 0x2, {}, {0x20, 0x0, 0x1}, {0xf7ffffff, 0x4, 0x4}, {0x0, 0x8, 0xa}, 0x2, 0x100, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0x3c, 0x0, 0x1, 0x9}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a03020000000000000000020000000900020073677a30000010000900010073797a3000000000400003802c000380140001006261746164765f736c6176655f3000001400010073797a5f74756e00000000000000000008000240000000000800014000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 7.740834324s ago: executing program 37 (id=1530): r0 = open(0x0, 0x80000, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x9) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) 3.974541133s ago: executing program 4 (id=1541): socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mlock(&(0x7f000000c000/0x3000)=nil, 0x3000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182195f5258493"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x2) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14, 0x80800) setsockopt$packet_int(r3, 0x107, 0x10, &(0x7f0000000340)=0x3, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="a7", 0x1}], 0x1}, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0xfff, 0x4, 0x29185047, 0x9}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x320, 0x0, 0x9, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x1}) 840.322613ms ago: executing program 3 (id=1542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 0s ago: executing program 4 (id=1543): r0 = socket(0x1a, 0xa, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114008cdc18"], 0xdd12}], 0x1}, 0x20040051) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r8, 0x2279, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r9, 0x80045105, &(0x7f0000000140)) kernel console output (not intermixed with test programs): nt NTFS sector size (4096) and media sector size (512). [ 533.405797][ T5899] usb 4-1: config 0 descriptor?? [ 533.462388][ T5899] usb 4-1: unknown interface protocol 0x3, assuming v1 [ 533.474096][T11150] ntfs3(loop0): ino=1a, mi_enum_attr [ 533.479411][T11150] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 533.506121][ T5899] usb 4-1: cannot find UAC_HEADER [ 533.529002][T11150] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 533.539086][ T5899] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 533.932253][ T29] audit: type=1400 audit(1738823735.783:135): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11160 comm="syz.4.1091" [ 534.013270][T11144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.162565][T11166] loop3: detected capacity change from 0 to 16 [ 534.310111][T11166] erofs (device loop3): mounted with root inode @ nid 36. [ 534.520598][T11144] veth0_to_bridge: mtu less than device minimum [ 534.786929][T11168] loop5: detected capacity change from 0 to 1024 [ 534.813374][T11170] loop4: detected capacity change from 0 to 64 [ 534.820936][T11168] EXT4-fs: Ignoring removed oldalloc option [ 534.829508][ T2143] IPVS: starting estimator thread 0... [ 534.841902][T11168] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 534.893964][T11168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.029497][T11173] IPVS: using max 21 ests per chain, 50400 per kthread [ 535.135509][ T29] audit: type=1800 audit(1738823736.915:136): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1095" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 535.397450][ T5899] usb 4-1: USB disconnect, device number 28 [ 535.496277][ T29] audit: type=1804 audit(1738823737.252:137): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1094" name="/newroot/189/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 535.950040][T11187] usb usb8: usbfs: process 11187 (syz.1.1096) did not claim interface 0 before use [ 536.101474][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.308128][T11192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.352602][T11192] loop4: detected capacity change from 0 to 512 [ 536.383524][T11192] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1098: casefold flag without casefold feature [ 536.402544][T11159] loop6: detected capacity change from 0 to 32768 [ 536.446348][T11159] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1090 (11159) [ 536.478911][T11192] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1098: couldn't read orphan inode 15 (err -117) [ 536.495983][T11192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.633899][T11159] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 536.681587][T11159] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 536.690207][T11159] BTRFS info (device loop6): using free-space-tree [ 536.698381][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 536.699096][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 536.710122][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 536.721156][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 536.732301][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 536.745223][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 536.764493][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 536.776595][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 536.794365][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 536.873868][T11207] loop3: detected capacity change from 0 to 4096 [ 536.927966][T11159] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 537.170796][T11159] BTRFS error (device loop6): open_ctree failed: -12 [ 538.570327][T11191] loop0: detected capacity change from 0 to 32768 [ 538.686426][T11191] JBD2: Ignoring recovery information on journal [ 538.860614][ T47] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 539.012164][T11191] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 539.118851][ T29] audit: type=1400 audit(1738823740.629:138): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11222 comm="syz.3.1105" [ 539.964060][T11228] loop3: detected capacity change from 0 to 128 [ 540.456619][T11228] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 540.507989][T11228] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 540.566599][ T5839] ocfs2: Unmounting device (7,0) on (node local) [ 540.646052][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 540.685330][ T47] usb 6-1: config 11 has an invalid interface number: 240 but max is 0 [ 540.769636][ T47] usb 6-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 540.770869][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 540.821775][ T47] usb 6-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 540.901571][ T47] usb 6-1: config 11 has no interface number 0 [ 540.927667][ T47] usb 6-1: config 11 interface 240 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 540.989829][ T47] usb 6-1: config 11 interface 240 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 541.021561][ T47] usb 6-1: config 11 interface 240 altsetting 7 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 541.033568][ T47] usb 6-1: config 11 interface 240 altsetting 7 has a duplicate endpoint with address 0x8B, skipping [ 541.045407][ T47] usb 6-1: config 11 interface 240 altsetting 7 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 541.127421][ T8] IPVS: starting estimator thread 0... [ 541.134522][T11243] fuse: Bad value for 'fd' [ 541.145818][T11241] loop1: detected capacity change from 0 to 64 [ 541.262224][ T47] usb 6-1: config 11 interface 240 altsetting 7 endpoint 0xC has invalid maxpacket 22879, setting to 64 [ 541.285681][ T47] usb 6-1: config 11 interface 240 altsetting 7 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 541.298974][ T47] usb 6-1: config 11 interface 240 has no altsetting 0 [ 541.299157][T11242] IPVS: using max 19 ests per chain, 45600 per kthread [ 541.307902][ T47] usb 6-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice=6d.e3 [ 541.351943][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.415610][ T5915] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 541.443340][ T47] usb 6-1: Product: 睤쨃ꕲᮭছ惉릿㐪緈Ꮌʩ햋랸㢯嬙긷벧夦䬹㣱낞篕븇⮐䲐첀ᄩ첈佲ᑮ㖷⩜搅늷㨤琗᭴퀖沬辭⧠ጝ쵳䛺촾Ể崽턵䱛㋮护ຟ焒됵暝㤣ᓩ畺﨡⫝̸鑀獹촨륻 [ 541.810696][ T29] audit: type=1800 audit(1738823742.902:139): pid=11245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1110" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 541.907519][ T47] usb 6-1: Manufacturer: Ц [ 541.918049][ T47] usb 6-1: SerialNumber: 豃䌶腌瀎蒏댟ﱡِꄨ䶐ᖒ℥暞삩ㄌ郗玃ᾬ鋭砢䲸衼䌳块郭單诠㿓ࠒဪ閧펜楧ὊᜳᩎᇉꝇḨ퟈鱭傋쏳ᢓ툄鞘訿豻저‬嶺燶裾쇾ꏪꠋᆇᙇ䗝齏杝돌蒬㛇˧썩囶㝱ꪌ裫묽 [ 541.958633][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.054278][ T47] usb 6-1: can't set config #11, error -71 [ 542.087923][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 542.100224][ T47] usb 6-1: USB disconnect, device number 22 [ 542.109219][ T5915] usb 7-1: no configurations [ 542.124816][ T5915] usb 7-1: can't read configurations, error -22 [ 542.356367][ T5915] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 542.508017][T11258] loop1: detected capacity change from 0 to 4096 [ 542.538148][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 542.559057][ T5915] usb 7-1: no configurations [ 542.569829][ T5915] usb 7-1: can't read configurations, error -22 [ 542.579012][ T5915] usb usb7-port1: attempt power cycle [ 542.610162][T11265] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 542.639877][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 542.844417][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 542.865688][ T8] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 542.903490][ T8] usb 5-1: config 0 has no interface number 0 [ 542.946048][ T8] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 543.007681][ T8] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 543.032508][ T5915] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 543.051124][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 543.128521][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.129336][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 543.197416][ T8] usb 5-1: Product: syz [ 543.225317][ T8] usb 5-1: Manufacturer: syz [ 543.228542][ T5915] usb 7-1: no configurations [ 543.244137][ T5915] usb 7-1: can't read configurations, error -22 [ 543.276546][ T8] usb 5-1: SerialNumber: syz [ 543.298785][ T8] usb 5-1: config 0 descriptor?? [ 543.423339][ T5915] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 543.505360][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 543.533600][ T5915] usb 7-1: no configurations [ 543.534343][ T8] radio-si470x 5-1:0.35: this is not a si470x device. [ 543.545361][ T5915] usb 7-1: can't read configurations, error -22 [ 543.545744][ T5915] usb usb7-port1: unable to enumerate USB device [ 543.754815][ T8] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 543.794498][ T8] usb 5-1: USB disconnect, device number 19 [ 544.255194][ T29] audit: type=1400 audit(1738823745.446:140): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11281 comm="syz.1.1121" [ 545.170332][T11273] loop3: detected capacity change from 0 to 32768 [ 545.246233][T11273] JBD2: Ignoring recovery information on journal [ 545.293422][T11300] loop5: detected capacity change from 0 to 512 [ 545.316588][T11273] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 545.350444][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 545.373065][T11300] EXT4-fs: Ignoring removed bh option [ 545.414668][T11300] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 545.432381][T11284] loop6: detected capacity change from 0 to 32768 [ 545.637593][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 545.693212][ T8] usb 5-1: config 11 has an invalid interface number: 240 but max is 0 [ 545.776797][ T8] usb 5-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 545.856386][T11300] EXT4-fs (loop5): 1 orphan inode deleted [ 545.974017][ T8] usb 5-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 546.001901][T11300] EXT4-fs (loop5): 1 truncate cleaned up [ 546.063446][T11300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.130927][ T8] usb 5-1: config 11 has no interface number 0 [ 546.137126][ T8] usb 5-1: config 11 interface 240 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 546.146409][T11306] loop1: detected capacity change from 0 to 1024 [ 546.167642][T11306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.184397][ T8] usb 5-1: config 11 interface 240 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 546.194667][T11306] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 546.217212][ T8] usb 5-1: config 11 interface 240 altsetting 7 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 546.242359][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 546.263301][ T8] usb 5-1: config 11 interface 240 altsetting 7 has a duplicate endpoint with address 0x8B, skipping [ 546.274266][T11306] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 546.274555][T11306] EXT4-fs (loop1): orphan cleanup on readonly fs [ 546.278147][T11306] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.1129: Freeing blocks not in datazone - block = 0, count = 4096 [ 546.315972][ T8] usb 5-1: config 11 interface 240 altsetting 7 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 546.330856][T11294] loop0: detected capacity change from 0 to 32768 [ 546.338861][ T8] usb 5-1: config 11 interface 240 altsetting 7 endpoint 0xC has invalid maxpacket 22879, setting to 64 [ 546.346393][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.365930][ T8] usb 5-1: config 11 interface 240 altsetting 7 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 546.388780][T11306] EXT4-fs (loop1): Remounting filesystem read-only [ 546.398307][ T8] usb 5-1: config 11 interface 240 has no altsetting 0 [ 546.410882][ T8] usb 5-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice=6d.e3 [ 546.421077][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.429089][ T8] usb 5-1: Product: 睤쨃ꕲᮭছ惉릿㐪緈Ꮌʩ햋랸㢯嬙긷벧夦䬹㣱낞篕븇⮐䲐첀ᄩ첈佲ᑮ㖷⩜搅늷㨤琗᭴퀖沬辭⧠ጝ쵳䛺촾Ể崽턵䱛㋮护ຟ焒됵暝㤣ᓩ畺﨡⫝̸鑀獹촨륻 [ 546.448061][T11306] EXT4-fs (loop1): 1 truncate cleaned up [ 546.458073][T11306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 546.490395][T11294] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 546.494283][ T8] usb 5-1: Manufacturer: Ц [ 546.518400][ T8] usb 5-1: SerialNumber: 豃䌶腌瀎蒏댟ﱡِꄨ䶐ᖒ℥暞삩ㄌ郗玃ᾬ鋭砢䲸衼䌳块郭單诠㿓ࠒဪ閧펜楧ὊᜳᩎᇉꝇḨ퟈鱭傋쏳ᢓ툄鞘訿豻저‬嶺燶裾쇾ꏪꠋᆇᙇ䗝齏杝돌蒬㛇˧썩囶㝱ꪌ裫묽 [ 546.541625][T11294] (syz.0.1126,11294,1):ocfs2_get_block:148 get_block on system inode 0xffff8880782216b8 (65) [ 546.564891][T11292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 546.591105][T11294] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 546.610566][T11294] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 546.621409][T11294] OCFS2: File system is now read-only. [ 546.628695][T11294] (syz.0.1126,11294,0):ocfs2_find_leaf:1940 ERROR: status = -30 [ 546.637304][T11294] (syz.0.1126,11294,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 546.654650][T11294] (syz.0.1126,11294,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 546.676033][T11294] (syz.0.1126,11294,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 546.725342][T11314] loop3: detected capacity change from 0 to 2048 [ 546.748815][T11294] (syz.0.1126,11294,0):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff8880782216b8, block: 0 [ 546.753390][T11314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.856791][ T47] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 546.863413][T11316] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1130'. [ 547.010117][T11294] (syz.0.1126,11294,0):ocfs2_get_block:148 get_block on system inode 0xffff8880782216b8 (65) [ 547.104228][T11294] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 547.160094][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.218721][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.229211][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.277118][ T47] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.296741][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.301409][T11294] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 547.456505][ T47] usb 6-1: config 0 descriptor?? [ 547.529962][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.535622][T11294] (syz.0.1126,11294,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 547.575318][T11294] (syz.0.1126,11294,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 547.583968][T11294] (syz.0.1126,11294,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 547.593510][ T8] usb 5-1: USB disconnect, device number 20 [ 547.678419][T11294] (syz.0.1126,11294,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 547.723910][T11294] (syz.0.1126,11294,0):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff8880782216b8, block: 0 [ 547.993183][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 548.009855][ T47] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 548.106260][T11327] Cannot find del_set index 0 as target [ 548.835388][ T5915] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 548.867410][ T47] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 549.036388][ T5915] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 549.067594][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.079832][ T5899] usb 6-1: USB disconnect, device number 23 [ 549.112969][ T5915] usb 7-1: Product: syz [ 549.117150][ T5915] usb 7-1: Manufacturer: syz [ 549.128274][T11335] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20000 [ 549.149916][ T5915] usb 7-1: SerialNumber: syz [ 549.155750][T11333] loop1: detected capacity change from 0 to 4096 [ 549.177148][ T5915] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 549.183193][ T5839] ocfs2: Unmounting device (7,0) on (node local) [ 549.196781][ T47] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 549.478903][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.682022][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.682919][T11347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.710283][T11347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.484844][T11323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.492312][ T47] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 550.494039][T11323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.500306][ T47] ath9k_htc: Failed to initialize the device [ 550.863131][ T47] usb 7-1: ath9k_htc: USB layer deinitialized [ 551.135513][T11323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.281119][T11357] loop1: detected capacity change from 0 to 32768 [ 551.289479][T11357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1143 (11357) [ 551.307281][T11357] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 551.318185][T11357] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 551.321395][T11323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.327622][T11357] BTRFS info (device loop1): disk space caching is enabled [ 551.342508][T11357] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 551.404233][ T5835] usb 7-1: USB disconnect, device number 19 [ 551.498761][T11357] BTRFS info (device loop1): rebuilding free space tree [ 551.537970][T11357] BTRFS info (device loop1): disabling free space tree [ 551.545576][T11357] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 551.555947][T11357] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 552.022694][T11383] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 552.176589][ T5835] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 552.684616][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 552.703862][ T5846] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 552.715281][ T5835] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 552.767070][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.802700][ T5835] usb 7-1: config 0 descriptor?? [ 552.835999][ T5835] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 552.836626][T11355] loop4: detected capacity change from 0 to 32768 [ 552.850154][T11354] loop5: detected capacity change from 0 to 32768 [ 552.900853][T11355] JBD2: Ignoring recovery information on journal [ 553.048576][T11355] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 553.198234][T11362] loop3: detected capacity change from 0 to 32768 [ 553.502400][T11362] ocfs2: Unknown parameter 'mocalflocks' [ 553.671061][ T5835] gspca_vc032x: reg_w err -110 [ 553.872861][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 553.878191][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 553.902986][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 553.913529][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 553.925876][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 553.937303][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 553.950671][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 553.965140][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.000412][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.024634][ T5848] ocfs2: Unmounting device (7,4) on (node local) [ 554.037192][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.062215][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.092280][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.131549][T11388] loop6: detected capacity change from 0 to 4096 [ 554.148707][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.177430][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.195579][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.200891][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.210505][T11388] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 554.225390][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.230693][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 554.240103][T11388] UDF-fs: Scanning with blocksize 512 failed [ 554.260637][ T5835] gspca_vc032x: Unknown sensor... [ 554.266602][T11389] loop1: detected capacity change from 0 to 4096 [ 554.284901][ T5835] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 554.293357][T11389] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 554.313417][T11388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.353184][T11389] ntfs3(loop1): ino=1a, mi_enum_attr [ 554.381738][T11362] netlink: 'syz.3.1145': attribute type 21 has an invalid length. [ 554.384613][T11389] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 554.426986][T11389] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 554.477645][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1151'. [ 554.546857][T11400] loop0: detected capacity change from 0 to 2048 [ 554.585305][T11400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.664700][ T5835] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 554.722490][T11403] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1152'. [ 554.835947][T11404] usb usb8: usbfs: process 11404 (syz.4.1149) did not claim interface 0 before use [ 555.352433][T11362] loop3: detected capacity change from 0 to 4096 [ 555.462952][T11362] loop3: detected capacity change from 0 to 8 [ 555.507085][T11362] squashfs: Unknown parameter '' [ 555.730686][ T47] usb 7-1: USB disconnect, device number 20 [ 555.941192][T11415] loop6: detected capacity change from 0 to 256 [ 555.972300][T11415] exfat: Unknown parameter 'name}t' [ 556.945043][ T5915] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 557.496036][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.519170][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.536060][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.549493][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.575046][ T5915] usb 4-1: config 0 descriptor?? [ 557.652855][T11423] loop6: detected capacity change from 0 to 2048 [ 557.665802][T11423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.249043][ T5915] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 558.288818][ T5915] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 558.344372][ T5915] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 558.401714][ T5915] usb 4-1: USB disconnect, device number 29 [ 558.562305][T11411] loop1: detected capacity change from 0 to 32768 [ 558.595744][T11411] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1155 (11411) [ 558.640918][T11411] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 558.656573][T11411] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 558.666431][T11411] BTRFS info (device loop1): using free-space-tree [ 558.902159][T11411] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 559.062028][T11411] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 559.458489][T11411] BTRFS error (device loop1): open_ctree failed: -12 [ 559.800307][T11449] loop6: detected capacity change from 0 to 32768 [ 559.833443][T11449] (syz.6.1165,11449,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 559.857639][T11449] (syz.6.1165,11449,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 561.655851][T11460] loop6: detected capacity change from 0 to 256 [ 561.665034][T11452] loop0: detected capacity change from 0 to 8192 [ 561.687666][T11460] vfat: Unknown parameter '' [ 561.997822][T11467] loop1: detected capacity change from 0 to 2048 [ 562.011535][T11467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.193121][T11470] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1167'. [ 562.524294][T11469] loop6: detected capacity change from 0 to 512 [ 562.564415][T11469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.646991][T11469] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 562.988845][ T8609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.142736][T11479] loop0: detected capacity change from 0 to 2048 [ 563.170672][T11487] loop1: detected capacity change from 0 to 512 [ 563.198333][T11487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 563.252141][T11479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.286770][T11487] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1176: bad orphan inode 131083 [ 563.308460][T11479] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.343849][T11487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.544386][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.626889][T11499] loop4: detected capacity change from 0 to 256 [ 563.635141][T11499] exfat: Unknown parameter 'name}t' [ 563.891898][T11485] loop6: detected capacity change from 0 to 32768 [ 563.930231][T11485] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1174 (11485) [ 563.943262][ T47] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 563.961833][T11485] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.972373][T11485] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 563.981411][T11485] BTRFS info (device loop6): using free-space-tree [ 564.029317][T11501] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.1180' resets device [ 564.118159][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.184531][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 564.220490][ T47] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 564.240380][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.262484][ T47] usb 6-1: config 0 descriptor?? [ 564.330135][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.438124][T11495] loop3: detected capacity change from 0 to 32768 [ 564.526446][T11495] JBD2: Ignoring recovery information on journal [ 564.653446][T11531] loop0: detected capacity change from 0 to 512 [ 564.666581][T11531] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 564.682231][T11531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 564.695517][T11531] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1183: corrupted in-inode xattr: e_value size too large [ 564.706049][ T47] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 564.719096][ T8609] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 564.744793][ T47] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 564.752818][T11495] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 564.756822][T11531] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1183: couldn't read orphan inode 15 (err -117) [ 564.810235][T11535] loop1: detected capacity change from 0 to 2048 [ 564.836837][ T47] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 564.855462][T11535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.867227][T11531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.195696][T11536] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1185'. [ 565.290223][ T5899] usb 6-1: USB disconnect, device number 25 [ 565.524848][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 565.869966][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.048360][T11557] loop5: detected capacity change from 0 to 64 [ 567.604920][ T5899] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 567.662964][T11543] loop1: detected capacity change from 0 to 32768 [ 567.788370][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 567.812506][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.911058][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 567.987175][T11565] random: crng reseeded on system resumption [ 568.868408][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.879029][ T5899] usb 6-1: config 0 descriptor?? [ 568.886560][ T5899] hub 6-1:0.0: bad descriptor, ignoring hub [ 568.893153][ T5899] hub 6-1:0.0: probe with driver hub failed with error -5 [ 568.956340][ T5899] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 569.978506][T11575] mmap: syz.1.1197 (11575): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 570.177943][T11572] loop4: detected capacity change from 0 to 4096 [ 570.298669][T11572] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 570.375680][T11577] loop1: detected capacity change from 0 to 2048 [ 570.387649][T11577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 570.910594][T11572] ntfs3(loop4): ino=1a, mi_enum_attr [ 570.935357][T11572] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 571.001694][T11580] loop6: detected capacity change from 0 to 2048 [ 571.014599][T11580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 571.030900][T11572] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 571.155223][T11581] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1199'. [ 571.249292][ T5915] usb 6-1: USB disconnect, device number 26 [ 571.537490][T11584] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 571.562052][T11584] loop5: detected capacity change from 0 to 256 [ 571.576073][T11584] exfat: Unknown parameter '' [ 571.657395][T11587] loop3: detected capacity change from 0 to 256 [ 571.686954][T11587] MINIX-fs: mounting file system with errors, running fsck is recommended [ 572.063631][ T5831] Trying to free block not in datazone [ 572.102635][ T5831] Trying to free block not in datazone [ 572.183381][ T5831] Trying to free block not in datazone [ 572.218236][ T5831] Trying to free block not in datazone [ 572.245095][ T5831] Trying to free block not in datazone [ 572.261379][ T5899] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 572.304275][T11594] loop0: detected capacity change from 0 to 4096 [ 572.321678][ T5831] Trying to free block not in datazone [ 572.328491][ T5831] Trying to free block not in datazone [ 572.344277][ T5831] Trying to free block not in datazone [ 572.351282][ T5831] Trying to free block not in datazone [ 572.381246][ T5831] Trying to free block not in datazone [ 572.419346][ T5831] Trying to free block not in datazone [ 572.452922][ T5831] Trying to free block not in datazone [ 572.471795][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1207'. [ 572.583837][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.594244][ T5831] Trying to free block not in datazone [ 572.616462][ T5831] Trying to free block not in datazone [ 572.626557][T11599] usb usb8: usbfs: process 11599 (syz.4.1205) did not claim interface 0 before use [ 572.670422][ T5831] Trying to free block not in datazone [ 572.686283][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 572.837135][ T5831] Trying to free block not in datazone [ 572.857388][ T5899] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.859134][ T5831] Trying to free block not in datazone [ 572.866461][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.876513][ T5899] usb 2-1: config 0 descriptor?? [ 573.791491][ T5899] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 573.805989][ T5899] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 573.816507][ T5899] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 573.831504][ T5899] usb 2-1: USB disconnect, device number 20 [ 574.129658][ T8] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 574.329951][ T8] usb 7-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 574.371499][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.468796][ T8] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.514467][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.711382][ T8] usb 7-1: Product: syz [ 574.715589][ T8] usb 7-1: Manufacturer: syz [ 574.827135][T11600] loop5: detected capacity change from 0 to 32768 [ 574.865455][ T8] usb 7-1: SerialNumber: syz [ 575.251176][T11600] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 575.294156][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 575.308265][T11600] (syz.5.1208,11600,1):ocfs2_get_block:148 get_block on system inode 0xffff8880782224f8 (65) [ 575.321113][T11600] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 575.339947][T11600] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 575.350152][T11600] OCFS2: File system is now read-only. [ 575.355759][T11600] (syz.5.1208,11600,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 575.363592][T11600] (syz.5.1208,11600,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 575.373034][T11600] (syz.5.1208,11600,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 575.381025][T11600] (syz.5.1208,11600,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 575.417461][T11600] (syz.5.1208,11600,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff8880782224f8, block: 0 [ 575.545059][T11624] loop0: detected capacity change from 0 to 256 [ 575.574314][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 575.591877][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 575.624002][T11624] exfat: Deprecated parameter 'namecase' [ 575.630104][T11600] (syz.5.1208,11600,0):ocfs2_get_block:148 get_block on system inode 0xffff8880782224f8 (65) [ 575.640502][ T5915] usb 2-1: config 1 has an invalid interface number: 160 but max is 0 [ 575.640532][ T5915] usb 2-1: config 1 has no interface number 0 [ 575.640560][ T5915] usb 2-1: config 1 interface 160 has no altsetting 0 [ 575.670261][ T5915] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 575.680700][T11624] exfat: Deprecated parameter 'utf8' [ 575.695482][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.724378][ T5915] usb 2-1: Product: syz [ 575.738477][ T5915] usb 2-1: Manufacturer: syz [ 575.748876][ T5915] usb 2-1: SerialNumber: syz [ 575.755597][T11626] FAULT_INJECTION: forcing a failure. [ 575.755597][T11626] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 575.759947][T11624] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 575.808006][T11626] CPU: 1 UID: 0 PID: 11626 Comm: syz.3.1214 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 575.808039][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 575.808055][T11626] Call Trace: [ 575.808064][T11626] [ 575.808074][T11626] dump_stack_lvl+0x241/0x360 [ 575.808112][T11626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.808139][T11626] ? __pfx__printk+0x10/0x10 [ 575.808183][T11626] ? validate_mm+0x4db/0x590 [ 575.808234][T11626] should_fail_ex+0x40a/0x550 [ 575.808270][T11626] prepare_alloc_pages+0x1da/0x5b0 [ 575.808313][T11626] __alloc_frozen_pages_noprof+0x16f/0x710 [ 575.808346][T11626] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 575.808372][T11626] ? mmap_region+0x2175/0x2f80 [ 575.808399][T11626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.808435][T11626] alloc_pages_mpol+0x311/0x660 [ 575.808459][T11626] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 575.808479][T11626] ? __pfx_validate_chain+0x10/0x10 [ 575.808499][T11626] ? __pfx_mmap_region+0x10/0x10 [ 575.808516][T11626] ? unmapped_area_topdown+0x6c4/0x710 [ 575.808539][T11626] alloc_pages_noprof+0x121/0x190 [ 575.808560][T11626] pte_alloc_one+0x24/0x160 [ 575.808587][T11626] __pte_alloc+0x79/0x220 [ 575.808618][T11626] ? __pfx___pte_alloc+0x10/0x10 [ 575.808655][T11626] __handle_mm_fault+0x5ea0/0x70f0 [ 575.808701][T11626] ? __pfx___handle_mm_fault+0x10/0x10 [ 575.808724][T11626] ? lock_vma_under_rcu+0x34b/0x790 [ 575.808759][T11626] ? __pfx_reacquire_held_locks+0x10/0x10 [ 575.808785][T11626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.808817][T11626] ? mtree_range_walk+0x6fd/0x8e0 [ 575.808841][T11626] ? lock_vma_under_rcu+0x1dd/0x790 [ 575.808865][T11626] ? __pfx_lock_release+0x10/0x10 [ 575.808888][T11626] ? lock_vma_under_rcu+0x34b/0x790 [ 575.808929][T11626] ? lock_vma_under_rcu+0x1dd/0x790 [ 575.808952][T11626] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 575.808974][T11626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.809004][T11626] handle_mm_fault+0x3e5/0x8d0 [ 575.809036][T11626] exc_page_fault+0x459/0x8b0 [ 575.809064][T11626] asm_exc_page_fault+0x26/0x30 [ 575.809089][T11626] RIP: 0033:0x7f311fc4fc46 [ 575.809104][T11626] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 575.809119][T11626] RSP: 002b:00007f3120c1a4a0 EFLAGS: 00010246 [ 575.809135][T11626] RAX: 0000000000000001 RBX: 00007f3120c1a540 RCX: 0000000000000101 [ 575.809148][T11626] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f3120c1a5e0 [ 575.809160][T11626] RBP: 0000000000000102 R08: 00007f3115600000 R09: 0000000000000000 [ 575.809172][T11626] R10: 0000000000000000 R11: 00007f3120c1a550 R12: 0000000000000001 [ 575.809184][T11626] R13: 00007f311fe293e0 R14: 0000000000000000 R15: 00007f3120c1a5e0 [ 575.809209][T11626] [ 575.811024][T11626] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 576.104467][T11600] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 576.123848][T11600] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 576.135900][T11626] loop3: detected capacity change from 0 to 512 [ 576.154703][T11600] (syz.5.1208,11600,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 576.171262][T11600] (syz.5.1208,11600,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 576.203738][T11600] (syz.5.1208,11600,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 576.231469][T11600] (syz.5.1208,11600,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 576.265419][ T5915] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 576.275825][T11610] loop4: detected capacity change from 0 to 32768 [ 576.282425][T11600] (syz.5.1208,11600,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff8880782224f8, block: 0 [ 576.301225][ T5915] visor 2-1:1.160: Handspring Visor / Palm OS converter detected [ 576.340801][ T5915] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 576.381161][T11627] coredump: 633(syz.0.1213): Core dump to core aborted: cannot preserve file permissions [ 576.394960][ T5915] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 576.454464][ T5915] usb 2-1: USB disconnect, device number 21 [ 576.507306][T11630] loop3: detected capacity change from 0 to 2048 [ 576.520663][T11630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.090914][ T8] usb 7-1: 0:2 : does not exist [ 577.104297][ T8] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 577.121749][ T5915] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 577.135685][ T8] usb 7-1: USB disconnect, device number 21 [ 577.176687][ T5833] ocfs2: Unmounting device (7,5) on (node local) [ 577.189002][ T5915] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 577.250889][ T5915] visor 2-1:1.160: device disconnected [ 577.820284][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1219'. [ 577.840783][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1216'. [ 577.989398][T11636] loop1: detected capacity change from 0 to 4096 [ 578.060808][T11636] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 578.146795][T11636] ntfs3(loop1): ino=1a, mi_enum_attr [ 578.188167][T11636] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 578.236738][T11636] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 578.245345][T11647] loop5: detected capacity change from 0 to 4096 [ 578.433912][T11653] loop6: detected capacity change from 0 to 256 [ 578.463483][T11653] exfat: Unknown parameter 'name}t' [ 578.475776][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 578.485419][ T5899] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 580.126107][T11664] loop3: detected capacity change from 0 to 2048 [ 580.134700][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.142582][T11664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.231127][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.391913][ T5899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.806517][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.870019][T11669] loop1: detected capacity change from 0 to 256 [ 580.893045][ T5899] usb 5-1: config 0 descriptor?? [ 580.903986][T11669] exfat: Unknown parameter 'name}t' [ 580.974397][T11670] loop5: detected capacity change from 0 to 4096 [ 581.519898][T11677] Cannot find del_set index 0 as target [ 583.669176][ T5899] usbhid 5-1:0.0: can't add hid device: -71 [ 583.682408][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1232'. [ 583.692795][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 583.716525][ T5899] usb 5-1: USB disconnect, device number 21 [ 584.210182][ T47] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 584.702928][ T47] usb 7-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 584.761843][ T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.817572][T11703] loop3: detected capacity change from 0 to 256 [ 584.859875][ T47] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.890145][T11703] exfat: Deprecated parameter 'namecase' [ 584.911697][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.945965][T11703] exfat: Deprecated parameter 'namecase' [ 584.963376][ T47] usb 7-1: Product: syz [ 585.000153][ T47] usb 7-1: Manufacturer: syz [ 585.022465][ T47] usb 7-1: SerialNumber: syz [ 585.034511][T11707] loop0: detected capacity change from 0 to 4096 [ 585.070251][T11706] loop5: detected capacity change from 0 to 4096 [ 585.070984][T11703] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 585.107444][T11706] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 585.198157][T11706] ntfs3(loop5): ino=1a, mi_enum_attr [ 585.227452][T11706] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 585.249401][T11706] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 585.500607][ T29] audit: type=1326 audit(1738823783.872:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 585.532059][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1240'. [ 586.306446][ T29] audit: type=1326 audit(1738823783.872:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 586.329840][ T29] audit: type=1326 audit(1738823783.872:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 586.354730][T11709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1239'. [ 586.392604][ T29] audit: type=1326 audit(1738823783.872:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 586.569226][ T29] audit: type=1326 audit(1738823783.872:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 586.600946][ T29] audit: type=1326 audit(1738823783.872:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 586.699852][ T29] audit: type=1326 audit(1738823783.872:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 587.070220][ T29] audit: type=1326 audit(1738823783.872:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 587.301278][ T29] audit: type=1326 audit(1738823783.872:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 587.333000][T11687] loop1: detected capacity change from 0 to 32768 [ 587.480486][T11723] Cannot find del_set index 0 as target [ 588.499268][ T29] audit: type=1326 audit(1738823783.872:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f311fd8cde9 code=0x7ffc0000 [ 588.533553][T11721] loop3: detected capacity change from 0 to 2048 [ 588.618943][T11721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 589.810889][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 589.819279][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.382114][T11739] loop3: detected capacity change from 0 to 512 [ 590.405886][T11741] loop5: detected capacity change from 0 to 256 [ 590.433794][T11741] exfat: Unknown parameter 'name}t' [ 590.482998][T11739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.499542][T11739] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.641114][T11746] loop1: detected capacity change from 0 to 256 [ 590.693862][ T47] usb 7-1: 0:2 : does not exist [ 590.731134][ T47] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 590.785540][ T5899] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 590.911718][T11746] exfat: Unknown parameter 'name}t' [ 590.937128][ T47] usb 7-1: USB disconnect, device number 22 [ 590.947477][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.220948][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.998478][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.080792][ T5899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.115063][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.135226][ T5899] usb 4-1: config 0 descriptor?? [ 592.516777][ T5915] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 592.777921][T11760] loop0: detected capacity change from 0 to 512 [ 592.814650][T11760] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1250: bg 0: block 248: padding at end of block bitmap is not set [ 592.830429][T11760] __quota_error: 20 callbacks suppressed [ 592.830447][T11760] Quota error (device loop0): write_blk: dquota write failed [ 592.844295][T11760] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 592.854958][T11760] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1250: Failed to acquire dquot type 1 [ 592.876061][T11760] EXT4-fs (loop0): 1 truncate cleaned up [ 592.883636][T11760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.896865][T11760] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.913361][T11760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.160752][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.186664][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.955927][ T5915] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.009773][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.051092][ T5915] usb 7-1: config 0 descriptor?? [ 594.796029][T11776] loop0: detected capacity change from 0 to 4096 [ 594.842809][ T5915] usbhid 7-1:0.0: can't add hid device: -71 [ 594.854915][ T5915] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 594.903726][ T5915] usb 7-1: USB disconnect, device number 23 [ 594.926323][T11755] loop1: detected capacity change from 0 to 32768 [ 594.984266][T11782] loop5: detected capacity change from 0 to 4096 [ 595.017393][T11782] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 595.087647][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 595.117744][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 595.121054][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.141702][T11782] ntfs3(loop5): ino=1a, mi_enum_attr [ 595.170168][ T5899] usb 4-1: USB disconnect, device number 30 [ 595.177748][T11782] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 595.239790][T11782] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 595.266285][T11755] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,norecovery,reconstruct_alloc [ 595.318105][T11755] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 595.332797][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1255'. [ 595.333217][T11755] bcachefs (loop1): Version upgrade required: [ 595.333217][T11755] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 595.333217][T11755] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 595.333217][T11755] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 595.417426][T11755] bcachefs (loop1): dropping and reconstructing all alloc info [ 595.474587][T11755] bcachefs (loop1): accounting_read... done [ 595.528381][T11755] bcachefs (loop1): alloc_read... done [ 595.542146][T11755] bcachefs (loop1): stripes_read... done [ 595.547863][T11755] bcachefs (loop1): snapshots_read... done [ 595.573850][T11755] bcachefs (loop1): done starting filesystem [ 595.632930][ T5846] bcachefs (loop1): shutting down [ 595.711447][ T5846] bcachefs (loop1): shutdown complete [ 595.927390][ T5915] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 596.108948][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 596.124557][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.159778][ T5915] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 596.179873][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.203302][ T5915] usb 7-1: config 0 descriptor?? [ 596.217254][T11799] loop3: detected capacity change from 0 to 32768 [ 596.224939][ T5915] hub 7-1:0.0: bad descriptor, ignoring hub [ 596.239598][ T5915] hub 7-1:0.0: probe with driver hub failed with error -5 [ 596.279583][ T5915] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 596.299058][T11799] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 596.325216][T11797] (syz.3.1256,11797,1):ocfs2_get_block:148 get_block on system inode 0xffff8880259cddf8 (65) [ 596.330377][T11803] loop4: detected capacity change from 0 to 32768 [ 596.356195][T11797] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 596.393888][T11797] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 596.433742][T11797] OCFS2: File system is now read-only. [ 596.472939][T11797] (syz.3.1256,11797,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 596.487932][T11797] (syz.3.1256,11797,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 596.501747][T11797] (syz.3.1256,11797,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 596.515155][T11797] (syz.3.1256,11797,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 596.523955][T11797] (syz.3.1256,11797,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff8880259cddf8, block: 0 [ 596.545754][T11797] (syz.3.1256,11797,1):ocfs2_get_block:148 get_block on system inode 0xffff8880259cddf8 (65) [ 596.559030][T11797] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 596.583909][T11797] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 596.601599][T11797] (syz.3.1256,11797,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 596.610028][T11797] (syz.3.1256,11797,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 596.627857][T11797] (syz.3.1256,11797,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 596.640557][T11797] (syz.3.1256,11797,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 596.691785][T11797] (syz.3.1256,11797,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff8880259cddf8, block: 0 [ 596.745114][ T5835] IPVS: starting estimator thread 0... [ 596.749136][T11811] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 596.763091][T11811] loop5: detected capacity change from 0 to 64 [ 596.770672][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 596.852957][T11812] IPVS: using max 20 ests per chain, 48000 per kthread [ 596.937406][ T29] audit: type=1800 audit(1738823794.723:171): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1262" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 597.687694][T11822] loop3: detected capacity change from 0 to 256 [ 597.709433][T11822] exfat: Unknown parameter 'name}t' [ 597.843297][T11819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1264'. [ 598.041638][T11827] netlink: 'syz.0.1266': attribute type 39 has an invalid length. [ 598.238464][T11829] loop5: detected capacity change from 0 to 4096 [ 600.168503][T11839] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 600.179004][T11839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1268'. [ 600.335572][ T5906] usb 7-1: USB disconnect, device number 24 [ 600.735731][T11853] loop5: detected capacity change from 0 to 256 [ 600.744057][T11853] exfat: Unknown parameter 'name}t' [ 601.020827][T11856] loop4: detected capacity change from 0 to 2048 [ 601.031899][T11856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.043163][T11860] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1274'. [ 602.320505][ T5899] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 602.623753][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 602.642970][ T5899] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 602.667360][ T5899] usb 2-1: config 0 has no interface number 0 [ 602.694828][ T5899] usb 2-1: config 0 interface 12 has no altsetting 0 [ 602.718394][ T5899] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 602.748322][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.756325][ T5899] usb 2-1: Product: syz [ 602.766594][ T5899] usb 2-1: Manufacturer: syz [ 602.780287][ T5899] usb 2-1: SerialNumber: syz [ 602.800173][ T5899] usb 2-1: config 0 descriptor?? [ 603.783024][T11890] loop6: detected capacity change from 0 to 1024 [ 603.844310][T11890] EXT4-fs: Ignoring removed oldalloc option [ 603.874793][T11890] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 604.215961][ T5899] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 604.224224][ T5899] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 604.242820][ T5899] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 604.280663][ T5899] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 604.296923][T11890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.334055][ T5899] usb 2-1: USB disconnect, device number 22 [ 604.400441][ T29] audit: type=1804 audit(1738823801.701:172): pid=11890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1288" name="/newroot/118/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 604.442607][T11901] loop5: detected capacity change from 0 to 256 [ 604.809754][ T8609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.156648][T11921] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 605.163596][ T5899] IPVS: starting estimator thread 0... [ 605.241239][T11921] loop3: detected capacity change from 0 to 64 [ 605.506805][T11922] IPVS: using max 21 ests per chain, 50400 per kthread [ 606.024254][T11926] loop1: detected capacity change from 0 to 8192 [ 606.579881][T11927] loop1: p1 p2 p3 p4 [ 606.583932][T11927] loop1: partition table partially beyond EOD, truncated [ 606.591172][T11927] loop1: p1 size 108922248 extends beyond EOD, truncated [ 606.605333][T11927] loop1: p2 start 861536256 is beyond EOD, truncated [ 606.612369][T11927] loop1: p3 start 851968 is beyond EOD, truncated [ 606.619102][T11927] loop1: p4 start 393216 is beyond EOD, truncated [ 606.672663][T11926] loop1: p1 p2 p3 p4 [ 606.676679][T11926] loop1: partition table partially beyond EOD, truncated [ 606.684258][T11926] loop1: p1 size 108922248 extends beyond EOD, truncated [ 606.715369][T11926] loop1: p2 start 861536256 is beyond EOD, truncated [ 606.722107][T11926] loop1: p3 start 851968 is beyond EOD, truncated [ 606.729060][T11926] loop1: p4 start 393216 is beyond EOD, truncated [ 606.880117][ T29] audit: type=1800 audit(1738823804.021:173): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1296" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 607.674051][T11937] loop6: detected capacity change from 0 to 4096 [ 607.674077][T11939] loop1: detected capacity change from 0 to 2048 [ 607.811407][T11939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.087445][T11947] Cannot find del_set index 0 as target [ 608.927832][ T8] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 609.106056][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 609.192183][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 609.233646][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 609.262022][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 609.272316][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.281091][ T8] usb 4-1: Product: syz [ 609.290421][ T8] usb 4-1: Manufacturer: syz [ 609.299070][ T8] usb 4-1: SerialNumber: syz [ 609.546617][ T8] usb 4-1: config 0 descriptor?? [ 609.560519][ T8] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 609.579561][ T8] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 609.597566][T11931] loop5: detected capacity change from 0 to 32768 [ 609.606834][T11931] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1298 (11931) [ 609.620691][T11952] loop6: detected capacity change from 0 to 4096 [ 609.633888][T11952] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 609.648349][T11931] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 609.661879][T11931] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 609.679102][T11952] NILFS (loop6): mounting unchecked fs [ 609.700659][T11955] loop1: detected capacity change from 0 to 256 [ 609.741136][T11952] NILFS (loop6): recovery complete [ 609.759862][T11962] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 609.765037][T11955] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 609.866879][T11931] BTRFS info (device loop5): rebuilding free space tree [ 609.936166][T11931] BTRFS info (device loop5): disabling free space tree [ 609.974020][T11931] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 610.059421][T11931] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 610.153052][T11931] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 610.301960][ T8] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 610.326255][ T8] em28xx 4-1:0.0: Config register raw data: 0x56 [ 610.533118][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.547659][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.574648][ T8] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 610.590811][ T8] em28xx 4-1:0.0: No AC97 audio processor [ 610.612840][ T8] usb 4-1: USB disconnect, device number 31 [ 610.630635][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 610.656482][ T8] em28xx 4-1:0.0: Freeing device [ 610.856449][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 612.927361][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 613.147632][T12006] loop1: detected capacity change from 0 to 2048 [ 613.166156][T12006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 613.984302][ T5900] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 613.998870][T12011] loop5: detected capacity change from 0 to 4096 [ 615.084758][ T5900] usb 4-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 615.106598][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.141805][ T5900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.159277][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.459729][ T5900] usb 4-1: Product: syz [ 615.483114][ T5900] usb 4-1: Manufacturer: syz [ 615.493934][ T5900] usb 4-1: SerialNumber: syz [ 615.526859][T11997] loop4: detected capacity change from 0 to 32768 [ 615.642675][T11997] JBD2: Ignoring recovery information on journal [ 615.891139][T11997] JBD2: journal reset failed [ 615.895892][T11997] (syz.4.1313,11997,1):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 616.004879][T11997] (syz.4.1313,11997,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 617.115208][T12043] loop5: detected capacity change from 0 to 512 [ 617.128486][T12043] EXT4-fs: quotafile must be on filesystem root [ 617.184100][T12043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.226860][T12043] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1320'. [ 617.796391][ T5900] usb 4-1: 0:2 : does not exist [ 617.807890][ T5900] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 618.017714][ T5900] usb 4-1: USB disconnect, device number 32 [ 618.350832][T12056] loop3: detected capacity change from 0 to 256 [ 618.410020][T12056] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 618.812240][T12065] loop5: detected capacity change from 0 to 4096 [ 621.427255][T12084] loop4: detected capacity change from 0 to 1024 [ 621.434184][T12084] hfsplus: Unknown parameter '' [ 623.399382][T12103] Cannot find del_set index 0 as target [ 625.106694][T12112] loop0: detected capacity change from 0 to 512 [ 625.113991][T12112] EXT4-fs: quotafile must be on filesystem root [ 625.124427][T12112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.697041][T12116] Cannot find del_set index 0 as target [ 628.550230][T12146] Cannot find del_set index 0 as target [ 629.966157][T12148] loop5: detected capacity change from 0 to 8192 [ 630.887080][T12156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.077535][T12169] loop5: detected capacity change from 0 to 1024 [ 633.131737][T12169] EXT4-fs: Ignoring removed oldalloc option [ 633.160454][T12169] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 633.276507][T12169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.686399][ T29] audit: type=1804 audit(1738823829.089:174): pid=12182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1363" name="/newroot/238/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 633.964892][T12160] loop4: detected capacity change from 0 to 32768 [ 634.170734][T12160] JBD2: Ignoring recovery information on journal [ 634.177289][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.387007][T12160] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 634.471125][T12192] loop3: detected capacity change from 0 to 64 [ 635.119920][T12195] loop1: detected capacity change from 0 to 1024 [ 635.126845][T12195] hfsplus: Unknown parameter ' [ 635.126845][T12195] ' [ 635.806903][T12174] loop0: detected capacity change from 0 to 32768 [ 636.271961][ T5848] ocfs2: Unmounting device (7,4) on (node local) [ 636.303049][T12203] loop1: detected capacity change from 0 to 1024 [ 636.336140][T12174] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 636.361775][T12203] EXT4-fs: Ignoring removed oldalloc option [ 636.368806][T12203] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 636.380751][T12174] (syz.0.1366,12174,1):ocfs2_get_block:148 get_block on system inode 0xffff8880259cec38 (65) [ 636.572499][T12210] loop5: detected capacity change from 0 to 2048 [ 636.649152][T12203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.684276][T12210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.692506][T12174] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 636.759981][T12214] Cannot find del_set index 0 as target [ 637.001622][ T29] audit: type=1804 audit(1738823832.148:175): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1372" name="/newroot/211/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 637.023400][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.229239][T12174] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 637.464296][T12174] OCFS2: File system is now read-only. [ 637.534962][T12174] (syz.0.1366,12174,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 637.550159][T12174] (syz.0.1366,12174,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 637.568868][T12174] (syz.0.1366,12174,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 637.587681][T12174] (syz.0.1366,12174,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 637.611207][T12174] (syz.0.1366,12174,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff8880259cec38, block: 0 [ 637.655286][T12174] (syz.0.1366,12174,1):ocfs2_get_block:148 get_block on system inode 0xffff8880259cec38 (65) [ 637.691354][T12174] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 637.744967][T12174] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 637.757996][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.775518][T12174] (syz.0.1366,12174,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 637.784317][T12174] (syz.0.1366,12174,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 637.793381][T12174] (syz.0.1366,12174,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 637.801757][T12174] (syz.0.1366,12174,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 637.810974][T12174] (syz.0.1366,12174,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff8880259cec38, block: 0 [ 637.846067][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.125321][ T5839] ocfs2: Unmounting device (7,0) on (node local) [ 638.333792][T12233] loop4: detected capacity change from 0 to 2048 [ 638.345662][T12233] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.812497][T12247] Cannot find del_set index 0 as target [ 641.151752][T12253] loop5: detected capacity change from 0 to 1024 [ 641.158629][T12253] hfsplus: Unknown parameter ' [ 641.158629][T12253] ' [ 641.287564][T12261] loop3: detected capacity change from 0 to 512 [ 641.297067][T12261] EXT4-fs: quotafile must be on filesystem root [ 641.324900][T12261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 642.801313][T12265] loop1: detected capacity change from 0 to 2048 [ 642.998753][T12265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.061823][T12265] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.132304][T12265] fs-verity: sha512 using implementation "sha512-avx2" [ 643.201568][T12265] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1390: bg 0: block 345: padding at end of block bitmap is not set [ 643.222092][T12279] loop0: detected capacity change from 0 to 256 [ 643.295322][T12265] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0 [ 643.295917][T12279] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 643.358164][T12265] fs-verity (loop1, inode 13): Error -117 building Merkle tree [ 643.509415][T12283] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 644.205359][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.450353][T12288] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 644.700773][T12269] loop3: detected capacity change from 0 to 32768 [ 644.773667][T12269] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 644.839777][T12269] (syz.3.1392,12269,1):ocfs2_get_block:148 get_block on system inode 0xffff888054f00878 (65) [ 644.891168][T12269] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 644.959850][T12269] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 645.026952][T12269] OCFS2: File system is now read-only. [ 645.054485][T12269] (syz.3.1392,12269,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 645.108418][T12269] (syz.3.1392,12269,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 645.318633][T12269] (syz.3.1392,12269,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 645.326500][T12269] (syz.3.1392,12269,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 645.496916][T12301] Cannot find del_set index 0 as target [ 645.513484][T12269] (syz.3.1392,12269,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff888054f00878, block: 0 [ 646.498260][T12269] (syz.3.1392,12269,0):ocfs2_get_block:148 get_block on system inode 0xffff888054f00878 (65) [ 646.830376][T12269] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 647.136942][T12305] Cannot find del_set index 0 as target [ 647.541843][T12307] loop5: detected capacity change from 0 to 2048 [ 647.542656][T12269] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 647.560310][T12307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.650167][T12269] (syz.3.1392,12269,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 647.667999][T12269] (syz.3.1392,12269,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 647.686930][T12308] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1403'. [ 647.703062][T12269] (syz.3.1392,12269,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 647.762160][T12269] (syz.3.1392,12269,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 647.847576][T12269] (syz.3.1392,12269,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff888054f00878, block: 0 [ 648.491419][T12310] loop5: detected capacity change from 0 to 2048 [ 648.503262][T12310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 648.677321][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 650.920282][T12332] loop0: detected capacity change from 0 to 8192 [ 651.956550][T12335] usb usb8: usbfs: process 12335 (syz.3.1406) did not claim interface 0 before use [ 652.178528][T12342] loop1: detected capacity change from 0 to 2048 [ 652.250955][T12342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.355927][T12344] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1417'. [ 652.828337][T12346] netlink: 'syz.0.1415': attribute type 33 has an invalid length. [ 652.844588][T12346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1415'. [ 653.423009][T12357] Cannot find del_set index 0 as target [ 654.525132][T12365] Cannot find del_set index 0 as target [ 655.392569][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 655.399238][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.479189][T12367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.974533][T12349] loop3: detected capacity change from 0 to 32768 [ 656.067052][T12349] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 656.113542][T12349] (syz.3.1418,12349,1):ocfs2_get_block:148 get_block on system inode 0xffff888054d6c178 (65) [ 656.130409][T12349] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 656.150716][T12349] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 656.161609][T12349] OCFS2: File system is now read-only. [ 656.167226][T12349] (syz.3.1418,12349,0):ocfs2_find_leaf:1940 ERROR: status = -30 [ 656.175879][T12349] (syz.3.1418,12349,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 656.185228][T12349] (syz.3.1418,12349,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 656.194179][T12349] (syz.3.1418,12349,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 656.207160][T12349] (syz.3.1418,12349,0):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff888054d6c178, block: 0 [ 656.219723][T12349] (syz.3.1418,12349,0):ocfs2_get_block:148 get_block on system inode 0xffff888054d6c178 (65) [ 656.230928][T12349] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 656.250527][T12349] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 656.261412][T12349] (syz.3.1418,12349,0):ocfs2_find_leaf:1940 ERROR: status = -30 [ 656.269886][T12349] (syz.3.1418,12349,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 656.391214][T12349] (syz.3.1418,12349,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 656.478677][T12349] (syz.3.1418,12349,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 656.487351][T12349] (syz.3.1418,12349,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff888054d6c178, block: 0 [ 656.503357][T12373] fuse: Bad value for 'group_id' [ 656.519204][T12373] fuse: Bad value for 'group_id' [ 656.665195][T12376] loop0: detected capacity change from 0 to 2048 [ 656.698546][T12376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 656.727017][T12378] xt_TCPMSS: Only works on TCP SYN packets [ 656.778040][T10464] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 656.908651][ T5839] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 656.934439][ T5839] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 656.973852][T10464] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 656.988338][T10464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.019911][T10464] usb 6-1: Product: syz [ 657.027324][T10464] usb 6-1: Manufacturer: syz [ 657.047500][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 657.171835][T10464] usb 6-1: SerialNumber: syz [ 657.180024][T10464] usb 6-1: config 0 descriptor?? [ 657.265779][T12387] loop4: detected capacity change from 0 to 2048 [ 657.278730][T12387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.413541][T12388] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1432'. [ 657.655701][T10018] usb 6-1: USB disconnect, device number 27 [ 658.115279][ T29] audit: type=1400 audit(1738823851.838:176): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12389 comm="syz.1.1433" [ 659.516616][T12402] fuse: Bad value for 'group_id' [ 659.558373][T12402] fuse: Bad value for 'group_id' [ 660.805643][T12415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 660.828206][T12415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 660.852528][T12415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 660.870495][T12415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 660.898578][T12415] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 660.906914][T12415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 660.940888][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 660.966039][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 660.988444][T12410] usb usb8: usbfs: process 12410 (syz.1.1442) did not claim interface 0 before use [ 660.997912][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 661.018827][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 661.033751][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 661.041108][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 661.277168][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 661.583647][T12414] chnl_net:caif_netlink_parms(): no params data found [ 661.747146][T12397] loop5: detected capacity change from 0 to 40427 [ 661.756244][T12397] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 661.764083][T12397] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 661.784550][T12397] F2FS-fs (loop5): Found nat_bits in checkpoint [ 661.847211][T12397] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 661.854288][T12397] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 661.909913][T12419] loop4: detected capacity change from 0 to 32768 [ 661.968081][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.038101][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.045437][T12414] bridge_slave_0: entered allmulticast mode [ 662.114601][T12414] bridge_slave_0: entered promiscuous mode [ 662.152830][T12419] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,norecovery,reconstruct_alloc [ 662.189337][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.196678][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.215503][T12414] bridge_slave_1: entered allmulticast mode [ 662.243792][T12414] bridge_slave_1: entered promiscuous mode [ 662.298819][T12419] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 662.317247][T12419] bcachefs (loop4): Version upgrade required: [ 662.317247][T12419] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 662.317247][T12419] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 662.317247][T12419] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 662.403530][T12414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.409072][T12419] bcachefs (loop4): dropping and reconstructing all alloc info [ 662.450926][T12419] bcachefs (loop4): accounting_read... done [ 662.551599][T12414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.551710][T12419] bcachefs (loop4): alloc_read... done [ 662.615434][T12419] bcachefs (loop4): stripes_read... done [ 663.032067][T12419] bcachefs (loop4): snapshots_read... done [ 663.068142][T12443] usb usb8: usbfs: process 12443 (syz.3.1446) did not claim interface 0 before use [ 663.096195][T12419] bcachefs (loop4): done starting filesystem [ 663.123791][T12414] team0: Port device team_slave_0 added [ 663.146822][T12414] team0: Port device team_slave_1 added [ 663.220196][T12448] loop1: detected capacity change from 0 to 64 [ 663.242960][T12414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.256731][T12415] Bluetooth: hci2: command tx timeout [ 663.276800][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.458591][ T29] audit: type=1800 audit(1738823856.946:177): pid=12449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1448" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 663.488175][ T5848] bcachefs (loop4): shutting down [ 663.501858][T12414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.555548][T12414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.575908][ T5848] bcachefs (loop4): shutdown complete [ 663.587458][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.616036][T12414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.713627][ T29] audit: type=1400 audit(1738823857.179:178): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12450 comm="syz.3.1450" [ 663.819338][T12414] hsr_slave_0: entered promiscuous mode [ 663.831918][T12414] hsr_slave_1: entered promiscuous mode [ 663.848264][T12414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.857336][T12414] Cannot create hsr debugfs directory [ 664.083251][T12454] loop5: detected capacity change from 0 to 4096 [ 664.140968][T12454] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 664.174505][T12460] loop3: detected capacity change from 0 to 64 [ 664.225733][T12462] fuse: Bad value for 'group_id' [ 664.243452][T12462] fuse: Bad value for 'group_id' [ 664.245317][T12460] minix: Unknown parameter 'i/tJ5PlP9'' [ 664.298509][T12454] ntfs3(loop5): ino=1a, mi_enum_attr [ 664.303852][T12454] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 664.337595][T12454] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 664.405520][T12454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1447'. [ 664.508488][T12414] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 664.547787][T12414] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 664.567366][T12414] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 664.595236][T12414] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 664.956143][T12414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.101345][T12473] pimreg: entered allmulticast mode [ 665.162172][T12414] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.197741][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.204877][ T6246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.228608][T12472] pimreg: left allmulticast mode [ 665.484084][T12415] Bluetooth: hci2: command tx timeout [ 666.715604][T12470] loop5: detected capacity change from 0 to 32768 [ 666.764480][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.771624][ T6246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.954667][T12470] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 666.992791][T12470] (syz.5.1456,12470,0):ocfs2_get_block:148 get_block on system inode 0xffff88804ecbb338 (65) [ 667.051320][T12414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 667.063009][T12470] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 667.094499][T12414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 667.136003][T12470] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 667.228311][T12470] OCFS2: File system is now read-only. [ 667.267189][T12492] loop3: detected capacity change from 0 to 1024 [ 667.274046][T12492] hfsplus: Unknown parameter ' [ 667.274046][T12492] ' [ 667.316317][T12470] (syz.5.1456,12470,0):ocfs2_find_leaf:1940 ERROR: status = -30 [ 667.597172][T12470] (syz.5.1456,12470,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 667.684272][T12470] (syz.5.1456,12470,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 667.704239][T12415] Bluetooth: hci2: command tx timeout [ 667.739190][T12470] (syz.5.1456,12470,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 667.807715][T12470] (syz.5.1456,12470,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff88804ecbb338, block: 0 [ 667.989929][T12470] (syz.5.1456,12470,0):ocfs2_get_block:148 get_block on system inode 0xffff88804ecbb338 (65) [ 668.047244][T12470] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 668.093206][T12414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.132542][T12470] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 668.196700][T12470] (syz.5.1456,12470,0):ocfs2_find_leaf:1940 ERROR: status = -30 [ 668.218916][T12504] loop1: detected capacity change from 0 to 2048 [ 668.292002][T12470] (syz.5.1456,12470,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 668.300832][T12470] (syz.5.1456,12470,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 668.330311][T12504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.353436][T12470] (syz.5.1456,12470,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 668.373671][T12504] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.409408][T12470] (syz.5.1456,12470,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff88804ecbb338, block: 0 [ 668.459403][T12510] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 668.539514][T12504] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0 [ 668.564161][T12504] fs-verity (loop1, inode 13): Error -117 building Merkle tree [ 668.721496][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.817950][ T5833] ocfs2: Unmounting device (7,5) on (node local) [ 669.211224][T12520] Cannot find del_set index 0 as target [ 669.459312][T12414] veth0_vlan: entered promiscuous mode [ 669.803690][T12414] veth1_vlan: entered promiscuous mode [ 669.927759][T12415] Bluetooth: hci2: command tx timeout [ 670.167494][T12414] veth0_macvtap: entered promiscuous mode [ 670.240399][T12414] veth1_macvtap: entered promiscuous mode [ 670.307209][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.354074][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.413942][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.620932][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.632289][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.643598][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.654506][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.683406][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.801815][T12532] Cannot find del_set index 0 as target [ 671.559018][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.587165][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.630670][T12414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.832019][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.881263][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.929742][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.989120][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.193820][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.204306][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.262790][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.305915][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.511610][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.522440][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.547992][T12414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.635645][T12544] overlayfs: failed to resolve './file0': -2 [ 673.473942][T12414] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.525964][T12414] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.559265][T12414] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.671236][T12414] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.841210][ T47] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 674.047497][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.084083][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.119129][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 674.354876][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.385666][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 674.397158][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.530422][T12555] loop3: detected capacity change from 0 to 1024 [ 675.304981][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.349407][ T47] usb 5-1: config 0 descriptor?? [ 675.378020][ T6260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.424322][ T6260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.781598][T12560] loop5: detected capacity change from 0 to 512 [ 675.790373][T12559] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 675.805868][ T47] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 676.644472][ T47] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 676.668225][ T47] usb 5-1: USB disconnect, device number 22 [ 677.046507][ T5900] IPVS: starting estimator thread 0... [ 677.055516][T12568] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 677.176258][T12569] IPVS: using max 27 ests per chain, 64800 per kthread [ 677.382314][T12576] loop4: detected capacity change from 0 to 1024 [ 677.408384][T12576] EXT4-fs: Ignoring removed oldalloc option [ 677.423922][T12576] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 677.677463][T12576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.843435][T12584] loop5: detected capacity change from 0 to 512 [ 677.854710][T12584] EXT4-fs: quotafile must be on filesystem root [ 677.883345][T12584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 678.012675][T12585] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1479'. [ 678.778590][T12588] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 678.801769][ T29] audit: type=1804 audit(1738823871.295:179): pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1478" name="/newroot/253/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 678.806687][T12588] team0: Port device netdevsim0 added [ 679.176562][T12598] loop3: detected capacity change from 0 to 128 [ 679.216820][T12598] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 679.231512][T12598] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 679.271937][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.493125][T12606] usb usb8: usbfs: process 12606 (syz.5.1484) did not claim interface 0 before use [ 679.913346][ T5900] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 680.019154][T12608] usb usb8: usbfs: process 12608 (syz.4.1485) did not claim interface 0 before use [ 680.084505][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 680.092346][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.125482][ T5900] usb 4-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 680.192058][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.298317][ T5900] usb 4-1: config 0 descriptor?? [ 680.532660][ T47] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 680.543082][ T5900] wacom 0003:056A:0044.000F: Unknown device_type for 'HID 056a:0044'. Assuming pen. [ 680.567110][ T5900] wacom 0003:056A:0044.000F: hidraw0: USB HID v0.00 Device [HID 056a:0044] on usb-dummy_hcd.3-1/input0 [ 680.591758][ T5900] input: Wacom Intuos2 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0044.000F/input/input45 [ 680.677577][T12612] loop5: detected capacity change from 0 to 4096 [ 680.743837][T12598] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 680.755842][T12598] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 680.759622][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.795742][ T8] usb 4-1: USB disconnect, device number 33 [ 680.813679][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 681.369016][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 682.296063][ T47] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 682.347006][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.411207][ T47] usb 2-1: config 0 descriptor?? [ 682.594078][T12627] loop5: detected capacity change from 0 to 2048 [ 682.759648][T12632] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 682.919061][ T47] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 682.992259][T12634] loop3: detected capacity change from 0 to 4096 [ 683.044471][ T47] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 683.117899][ T47] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 684.220457][ T5900] usb 2-1: USB disconnect, device number 23 [ 684.490351][T12651] FAULT_INJECTION: forcing a failure. [ 684.490351][T12651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.506449][T12651] CPU: 0 UID: 0 PID: 12651 Comm: syz.5.1494 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 684.506486][T12651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 684.506502][T12651] Call Trace: [ 684.506513][T12651] [ 684.506524][T12651] dump_stack_lvl+0x241/0x360 [ 684.506558][T12651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.506580][T12651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.506622][T12651] ? __wake_up_klogd+0xcc/0x110 [ 684.506652][T12651] should_fail_ex+0x40a/0x550 [ 684.506680][T12651] _copy_from_user+0x2d/0xb0 [ 684.506702][T12651] do_tcp_setsockopt+0x29e/0x2540 [ 684.506740][T12651] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 684.506771][T12651] ? __pfx_aa_sk_perm+0x10/0x10 [ 684.506799][T12651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.506826][T12651] ? aa_sock_opt_perm+0x79/0x120 [ 684.506856][T12651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.506883][T12651] ? tcp_setsockopt+0x3e/0xf0 [ 684.506911][T12651] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 684.506939][T12651] do_sock_setsockopt+0x3b1/0x720 [ 684.506979][T12651] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 684.507012][T12651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.507040][T12651] ? __fget_files+0x395/0x410 [ 684.507060][T12651] ? __fget_files+0x2a/0x410 [ 684.507086][T12651] __x64_sys_setsockopt+0x1ee/0x280 [ 684.507122][T12651] do_syscall_64+0xf3/0x230 [ 684.507152][T12651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.507183][T12651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.507209][T12651] RIP: 0033:0x7f54c3b8cde9 [ 684.507227][T12651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.507243][T12651] RSP: 002b:00007f54c19d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 684.507264][T12651] RAX: ffffffffffffffda RBX: 00007f54c3da6080 RCX: 00007f54c3b8cde9 [ 684.507278][T12651] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 684.507289][T12651] RBP: 00007f54c19d5090 R08: 00000000000000d8 R09: 0000000000000000 [ 684.507301][T12651] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 684.507314][T12651] R13: 0000000000000000 R14: 00007f54c3da6080 R15: 00007ffe286e3368 [ 684.507344][T12651] [ 685.747700][T12666] bond_slave_0: mtu less than device minimum [ 685.813499][T12668] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1500'. [ 685.836465][ T8] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 686.022395][T12670] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 686.434655][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 686.442640][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.455774][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.490906][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.509524][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.538724][ T8] usb 6-1: Product: syz [ 686.546268][ T8] usb 6-1: Manufacturer: syz [ 686.559696][ T8] usb 6-1: SerialNumber: syz [ 687.036861][ T8] usb 6-1: cannot find UAC_HEADER [ 687.064174][ T8] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 687.083781][ T8] usb 6-1: USB disconnect, device number 28 [ 687.196068][T12677] loop1: detected capacity change from 0 to 4096 [ 687.247055][T12677] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 687.314183][T12680] overlayfs: failed to resolve './file0': -2 [ 687.384567][T12682] kAFS: No cell specified [ 687.421336][T12682] 9pnet: p9_errstr2errno: server reported unknown error @b [ 687.441421][T12677] ntfs3(loop1): ino=1a, mi_enum_attr [ 687.448846][T12677] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 687.476230][T12677] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 687.511766][T12684] dvmrp0: entered allmulticast mode [ 687.523293][T12684] pimreg: entered allmulticast mode [ 687.570344][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1501'. [ 687.995438][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 688.963808][ T29] audit: type=1400 audit(1738823880.162:180): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12690 comm="syz.4.1507" [ 689.029746][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.088082][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.097233][T12695] 0: reclassify loop, rule prio 0, protocol 800 [ 689.115500][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 689.159517][T12695] 0: reclassify loop, rule prio 0, protocol 800 [ 689.201393][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 689.236778][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.725025][T12695] 0: reclassify loop, rule prio 0, protocol 800 [ 689.823445][ T8] usb 8-1: config 0 descriptor?? [ 689.962647][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 690.289930][ T8] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 690.422226][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 690.446493][ T8] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 690.588724][T10018] usb 8-1: USB disconnect, device number 2 [ 691.394247][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 691.482750][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.489761][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.496322][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.502879][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.509261][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.515672][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.522066][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.528527][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.534938][T12714] 0: reclassify loop, rule prio 0, protocol 800 [ 691.843232][ T5906] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 691.974428][ T29] audit: type=1326 audit(1738823883.623:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12726 comm="syz.7.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828178cde9 code=0x7ffc0000 [ 692.169081][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.208591][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 692.218192][ T29] audit: type=1326 audit(1738823883.623:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12726 comm="syz.7.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828178cde9 code=0x7ffc0000 [ 692.291783][ T5906] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.320951][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.389265][ T5906] usb 5-1: config 0 descriptor?? [ 693.334139][T12739] loop5: detected capacity change from 0 to 8192 [ 693.872330][ T5906] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 693.883499][ T5906] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 693.933648][T12741] usb usb8: usbfs: process 12741 (syz.7.1516) did not claim interface 0 before use [ 693.945410][ T5906] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 693.973265][T12740] loop5: p1 p2 p3 p4 [ 693.977270][T12740] loop5: partition table partially beyond EOD, truncated [ 693.986087][T12740] loop5: p1 size 108922248 extends beyond EOD, truncated [ 693.996682][T12740] loop5: p2 start 861536256 is beyond EOD, truncated [ 694.004037][T12740] loop5: p3 start 851968 is beyond EOD, truncated [ 694.010472][T12740] loop5: p4 start 393216 is beyond EOD, truncated [ 694.020937][T12739] loop5: p1 p2 p3 p4 [ 694.025077][T12739] loop5: partition table partially beyond EOD, truncated [ 694.032235][T12739] loop5: p1 size 108922248 extends beyond EOD, truncated [ 694.040652][T12739] loop5: p2 start 861536256 is beyond EOD, truncated [ 694.047517][T12739] loop5: p3 start 851968 is beyond EOD, truncated [ 694.054006][T12739] loop5: p4 start 393216 is beyond EOD, truncated [ 694.776227][ T5906] usb 5-1: USB disconnect, device number 23 [ 694.871434][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.489527][ T5900] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 695.585652][ T5906] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 695.660790][T12746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.666755][T12746] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 695.675955][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 695.683773][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.704772][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.784787][ T5900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.811452][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.819458][ T5900] usb 4-1: Product: syz [ 695.850858][ T5900] usb 4-1: Manufacturer: syz [ 695.890647][ T5900] usb 4-1: SerialNumber: syz [ 696.004194][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 696.037470][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 696.066128][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 696.123975][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.140342][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 696.148833][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 696.164899][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 696.172404][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 696.180983][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 696.192793][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 696.202361][ T5900] usb 4-1: cannot find UAC_HEADER [ 696.225737][ T5900] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 696.257010][ T5906] usb 2-1: config 0 descriptor?? [ 696.258300][ T5900] usb 4-1: USB disconnect, device number 34 [ 696.311659][ T5906] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 696.388157][ T5906] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 696.429116][ T5906] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 696.465859][ T5906] usb 2-1: media controller created [ 696.683250][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.802400][ T5906] set interface failed [ 696.803004][ T5906] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 696.847903][ T5906] error writing reg: 0xff, val: 0x00 [ 696.953381][ C0] net_ratelimit: 1018 callbacks suppressed [ 696.953405][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 696.994887][ T5906] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 697.029027][ T5900] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 697.050435][ T5906] usb 2-1: USB disconnect, device number 24 [ 697.205838][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.249139][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.290978][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 697.326287][ T5900] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 697.336269][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 697.356913][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.387178][ T5900] usb 5-1: config 0 descriptor?? [ 697.509981][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 697.522276][ T8] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 697.531963][ T8] usb 4-1: config 0 has no interface number 0 [ 697.547000][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 697.556212][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.623981][ T8] usb 4-1: Product: syz [ 697.634788][ T8] usb 4-1: Manufacturer: syz [ 697.647779][ T8] usb 4-1: SerialNumber: syz [ 697.659158][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 697.681400][ T8] usb 4-1: config 0 descriptor?? [ 697.706553][ T8] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 697.834114][ T5900] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 697.844836][ T5900] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 697.910251][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 697.942448][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 697.959067][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 697.980521][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.038146][ T5906] usb 2-1: Product: syz [ 698.042372][ T5906] usb 2-1: Manufacturer: syz [ 698.105450][ T5906] usb 2-1: SerialNumber: syz [ 698.147909][ T8] usb 5-1: USB disconnect, device number 24 [ 698.219459][ T5906] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 698.255970][T10464] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 698.437288][T12774] loop3: detected capacity change from 0 to 4096 [ 698.549259][T12774] NILFS (loop3): mounting unchecked fs [ 698.576549][T12774] NILFS (loop3): recovery required for readonly filesystem [ 698.619669][T12774] NILFS (loop3): write access will be enabled during recovery [ 698.662107][T12774] NILFS (loop3): invalid segment: Checksum error in segment payload [ 698.696829][T12774] NILFS (loop3): trying rollback from an earlier position [ 698.779719][T12774] NILFS (loop3): recovery complete [ 698.838880][ T6246] 0: reclassify loop, rule prio 0, protocol 800 [ 702.125487][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 702.135536][ T5899] usb 4-1: USB disconnect, device number 35 [ 702.181903][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 702.258256][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 702.323804][ T5899] quatech2 4-1:0.51: device disconnected [ 704.308886][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 706.402944][ T0] sched: DL replenish lagged too much [ 708.714316][ T6259] 0: reclassify loop, rule prio 0, protocol 800 [ 708.767670][ T8] 0: reclassify loop, rule prio 0, protocol 800 [ 710.100973][T12794] loop3: detected capacity change from 0 to 512 [ 710.109109][T12794] EXT4-fs: quotafile must be on filesystem root [ 710.746841][T12794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.643383][ T5899] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 711.880550][T12794] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1531'. [ 713.091352][ T5899] usb 5-1: device descriptor read/all, error -71 [ 714.444335][T10464] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 714.574072][ T6329] 0: reclassify loop, rule prio 0, protocol 800 [ 715.684739][T12805] loop4: detected capacity change from 0 to 512 [ 715.697224][T12805] EXT4-fs: quotafile must be on filesystem root [ 716.266446][T12805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 717.298527][T12807] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1538'. [ 718.106255][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 718.924108][T12812] loop3: detected capacity change from 0 to 512 [ 718.931117][T12812] EXT4-fs: quotafile must be on filesystem root [ 719.361006][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 719.730503][T12812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.553218][T12813] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1539'. [ 720.640469][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 721.223413][T12415] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 721.224749][T10018] 0: reclassify loop, rule prio 0, protocol 800 [ 721.224953][T10018] 0: reclassify loop, rule prio 0, protocol 800 [ 721.250888][ T6329] 0: reclassify loop, rule prio 0, protocol 800 [ 721.254508][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.254575][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.592598][T12817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 721.601412][T12817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 721.602299][T12817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 721.603798][T12817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 721.604440][T12817] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 721.681691][T12817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 721.696250][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 721.745997][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 721.753893][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 721.762625][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 721.771156][ T5853] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 721.779369][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 722.019083][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 722.038633][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 722.047477][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 722.064736][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 722.073222][ T5853] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 722.082078][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 722.804338][T12817] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 722.813707][T12817] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 722.836536][T12817] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 722.844437][T12817] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 722.852945][T12817] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 722.861201][T12817] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 722.922062][T12815] chnl_net:caif_netlink_parms(): no params data found [ 723.587298][T12415] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 723.600208][T12415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 723.608992][T12415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 723.618404][T12415] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 723.625982][T12415] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 723.634105][T12415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 723.644553][T10464] ath9k_htc: Failed to initialize the device [ 724.175686][T12415] Bluetooth: hci7: command tx timeout [ 724.324362][T12415] Bluetooth: hci8: command tx timeout [ 725.097098][T12415] Bluetooth: hci9: command tx timeout [ 725.884550][T12415] Bluetooth: hci6: command tx timeout [ 726.139591][T10018] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 726.301515][T10018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.335179][T10018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.351309][T10018] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 726.374837][T12415] Bluetooth: hci7: command tx timeout [ 726.383517][T10018] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 726.404494][T10018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.433169][T10018] usb 5-1: config 0 descriptor?? [ 726.545793][T12415] Bluetooth: hci8: command tx timeout [ 726.888903][ T6246] 0: reclassify loop, rule prio 0, protocol 800 [ 727.007881][T10018] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 727.030843][T10018] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 728.189532][T12415] Bluetooth: hci9: command tx timeout [ 728.196018][ T5840] Bluetooth: hci6: command tx timeout [ 728.311718][T10018] usb 5-1: USB disconnect, device number 27 [ 728.605291][T12415] Bluetooth: hci7: command tx timeout [ 728.748121][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 728.774881][T12415] Bluetooth: hci8: command tx timeout [ 728.966825][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 728.993969][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.031322][ T8] usb 4-1: Product: syz [ 729.035514][ T8] usb 4-1: Manufacturer: syz [ 729.062696][ T8] usb 4-1: SerialNumber: syz [ 729.088106][ T8] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 730.062964][T10018] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 732.211497][T12415] Bluetooth: hci9: command tx timeout [ 732.216943][T12415] Bluetooth: hci6: command tx timeout [ 733.157739][T12415] Bluetooth: hci7: command tx timeout [ 736.957717][T10018] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 736.964754][T10018] ath9k_htc: Failed to initialize the device [ 740.314900][T12415] Bluetooth: hci8: command tx timeout [ 740.322303][T12415] Bluetooth: hci6: command tx timeout [ 740.691912][ T5853] Bluetooth: hci9: command tx timeout [ 748.782028][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 788.800770][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 789.629067][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 863.941135][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 863.948119][ C0] rcu: (detected by 0, t=10502 jiffies, g=52161, q=259 ncpus=2) [ 863.955844][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 2365 (4295019092-4295016727), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 863.969138][ C0] rcu: rcu_preempt kthread starved for 2365 jiffies! g52161 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 863.980263][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 863.990246][ C0] rcu: RCU grace-period kthread stack dump: [ 863.996148][ C0] task:rcu_preempt state:R running task stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 864.009696][ C0] Call Trace: [ 864.012986][ C0] [ 864.015934][ C0] __schedule+0x190e/0x4c90 [ 864.020466][ C0] ? mark_lock+0x9a/0x360 [ 864.024843][ C0] ? __pfx___schedule+0x10/0x10 [ 864.029724][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.035389][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 864.040615][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.046299][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 864.051435][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 864.057177][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 864.063547][ C0] irqentry_exit+0x5e/0x90 [ 864.067988][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 864.073994][ C0] RIP: 0010:lockdep_init_map_type+0xa4/0x910 [ 864.080000][ C0] Code: f2 f2 48 89 04 19 66 c7 44 19 09 f3 f3 48 89 4c 24 10 c6 44 19 0b f3 48 83 c7 08 ba 10 00 00 00 31 f6 e8 ef 6a 8b 00 48 89 da <48> c7 c0 80 09 40 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 dd 05 00 [ 864.099623][ C0] RSP: 0018:ffffc900001679e0 EFLAGS: 00000202 [ 864.105713][ C0] RAX: ffffc90000167b50 RBX: dffffc0000000000 RCX: 0000000000000000 [ 864.113702][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc90000167b60 [ 864.121690][ C0] RBP: ffffc90000167aa8 R08: ffffc90000167b5f R09: ffffc90000167b50 [ 864.129679][ C0] R10: dffffc0000000000 R11: fffff5200002cf6c R12: ffffc90000167b48 [ 864.137663][ C0] R13: 0000000000000000 R14: ffffffff8c0cd800 R15: ffffffff9a4449a0 [ 864.145680][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 864.151516][ C0] ? __pfx_process_timeout+0x10/0x10 [ 864.156827][ C0] ? __pfx_process_timeout+0x10/0x10 [ 864.162133][ C0] init_timer_on_stack_key+0xde/0x110 [ 864.167532][ C0] schedule_timeout+0x131/0x290 [ 864.172405][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 864.177796][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.183462][ C0] ? __pfx_process_timeout+0x10/0x10 [ 864.188784][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 864.193663][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 864.198896][ C0] ? rcu_gp_init+0x1256/0x1630 [ 864.203697][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 864.208659][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 864.214849][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 864.220162][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 864.226086][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.231758][ C0] ? finish_swait+0xd4/0x1e0 [ 864.236381][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 864.241610][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 864.246233][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 864.251458][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 864.257379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.263043][ C0] ? __kthread_parkme+0x169/0x1d0 [ 864.268096][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 864.273325][ C0] kthread+0x7ab/0x920 [ 864.277421][ C0] ? __pfx_kthread+0x10/0x10 [ 864.282039][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 864.287267][ C0] ? __pfx_kthread+0x10/0x10 [ 864.291907][ C0] ? __pfx_kthread+0x10/0x10 [ 864.296556][ C0] ? __pfx_kthread+0x10/0x10 [ 864.301187][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 864.306423][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.312101][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 864.317341][ C0] ? __pfx_kthread+0x10/0x10 [ 864.321978][ C0] ret_from_fork+0x4d/0x80 [ 864.326432][ C0] ? __pfx_kthread+0x10/0x10 [ 864.331062][ C0] ret_from_fork_asm+0x1a/0x30 [ 864.335878][ C0] [ 864.338915][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 864.345247][ C0] CPU: 0 UID: 0 PID: 12415 Comm: kworker/u9:0 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 864.356216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 864.366308][ C0] Workqueue: hci9 hci_cmd_sync_work [ 864.371564][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 864.378112][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 fe 78 2d f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c3 0f 95 f5 65 8b 05 d4 58 0b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 864.397757][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00000206 [ 864.403864][ C0] RAX: b116e34e17c36100 RBX: 1ffff92000000f1c RCX: ffffffff819b316a [ 864.411871][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0aa680 RDI: 0000000000000001 [ 864.419885][ C0] RBP: ffffc90000007950 R08: ffffffff942f9927 R09: 1ffffffff285f324 [ 864.427895][ C0] R10: dffffc0000000000 R11: fffffbfff285f325 R12: dffffc0000000000 [ 864.435905][ C0] R13: 1ffff92000000f18 R14: ffffc900000078e0 R15: 0000000000000246 [ 864.443924][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 864.452899][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.459529][ C0] CR2: 0000001b3041bff8 CR3: 000000005bc5a000 CR4: 0000000000350ef0 [ 864.467541][ C0] Call Trace: [ 864.470846][ C0] [ 864.473710][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 864.480095][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 864.485799][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 864.491683][ C0] ? timekeeping_advance+0x5e8/0x770 [ 864.497033][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.502729][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 864.509026][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 864.514459][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 864.520145][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.525844][ C0] ? update_process_times+0x242/0x2f0 [ 864.531264][ C0] ? tick_nohz_handler+0x37c/0x500 [ 864.536422][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 864.541924][ C0] ? __hrtimer_run_queues+0x553/0xd30 [ 864.547345][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 864.553392][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 864.559170][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.564855][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.570542][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 864.576678][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 864.581870][ C0] ? __sysvec_apic_timer_interrupt+0x112/0x420 [ 864.588080][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 864.593935][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 864.600152][ C0] ? mark_lock+0x9a/0x360 [ 864.604554][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 864.610511][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 864.616871][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 864.622094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.627767][ C0] dummy_timer+0x44d6/0x4620 [ 864.632383][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.638057][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 864.643736][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.649430][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 864.654400][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 864.659365][ C0] __hrtimer_run_queues+0x59d/0xd30 [ 864.664595][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 864.670621][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 864.676406][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.682099][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.687787][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 864.693920][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 864.699078][ C0] handle_softirqs+0x2d6/0x9b0 [ 864.703879][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.709573][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 864.714394][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 864.719737][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.725431][ C0] ? irqtime_account_irq+0xd1/0x1d0 [ 864.730687][ C0] __irq_exit_rcu+0xf7/0x220 [ 864.735320][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 864.740570][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.746260][ C0] irq_exit_rcu+0x9/0x30 [ 864.750540][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 864.756218][ C0] [ 864.759167][ C0] [ 864.762119][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 864.768146][ C0] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 864.774088][ C0] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 05 b0 96 f5 e8 e0 46 d0 f5 fb bf 01 00 00 00 25 ab ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 95 1b 2f f6 48 [ 864.793733][ C0] RSP: 0018:ffffc900034a7400 EFLAGS: 00000286 [ 864.799848][ C0] RAX: b116e34e17c36100 RBX: 1ffff92000694e88 RCX: ffffffff819b316a [ 864.807859][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0aa680 RDI: 0000000000000001 [ 864.815872][ C0] RBP: ffffc900034a74c0 R08: ffffffff942f9927 R09: 1ffffffff285f324 [ 864.823885][ C0] R10: dffffc0000000000 R11: fffffbfff285f325 R12: 1ffff92000694e80 [ 864.831893][ C0] R13: 1ffff92000694e84 R14: ffffc900034a7420 R15: dffffc0000000000 [ 864.839911][ C0] ? mark_lock+0x9a/0x360 [ 864.844299][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 864.850070][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.855779][ C0] irqentry_exit+0x5e/0x90 [ 864.860245][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 864.866295][ C0] RIP: 0010:queue_work_on+0x269/0x380 [ 864.871736][ C0] Code: 75 19 e8 ea f2 37 00 eb 18 e8 e3 f2 37 00 e8 3e 4e 6e 0a 48 83 7c 24 10 00 74 e7 e8 d1 f2 37 00 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 04 37 00 00 00 00 43 c7 44 37 09 00 00 00 00 66 43 c7 44 37 [ 864.891390][ C0] RSP: 0018:ffffc900034a7580 EFLAGS: 00000293 [ 864.897498][ C0] RAX: ffffffff81876b4f RBX: 0000000000000000 RCX: ffff88805a141e00 [ 864.905503][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 864.913566][ C0] RBP: ffffc900034a7670 R08: ffffffff81876b1f R09: 1ffffffff285f324 [ 864.921574][ C0] R10: dffffc0000000000 R11: fffffbfff285f325 R12: 0000000002400001 [ 864.929578][ C0] R13: 0000000000000046 R14: 1ffff92000694eb4 R15: dffffc0000000000 [ 864.937594][ C0] ? queue_work_on+0x22f/0x380 [ 864.942408][ C0] ? queue_work_on+0x25f/0x380 [ 864.947227][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 864.952387][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.958069][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 864.963997][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 864.970363][ C0] ? __asan_memcpy+0x40/0x70 [ 864.974995][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 864.980670][ C0] ? skb_queue_tail+0x36/0x120 [ 864.985473][ C0] __hci_cmd_sync_sk+0x67f/0xf70 [ 864.990465][ C0] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 864.995969][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 865.001644][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 865.007329][ C0] ? mark_lock+0x9a/0x360 [ 865.011706][ C0] ? __lock_acquire+0x1397/0x2100 [ 865.016775][ C0] hci_disconnect_sync+0x210/0x3d0 [ 865.021923][ C0] ? __pfx_hci_disconnect_sync+0x10/0x10 [ 865.027598][ C0] hci_abort_conn_sync+0x14a/0x11f0 [ 865.032836][ C0] ? hci_conn_valid+0x1f/0x210 [ 865.037640][ C0] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 865.043318][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 865.048389][ C0] ? hci_conn_valid+0x1f/0x210 [ 865.053199][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 865.058873][ C0] ? hci_conn_valid+0x1f4/0x210 [ 865.063767][ C0] ? __pfx_abort_conn_sync+0x10/0x10 [ 865.069098][ C0] hci_cmd_sync_work+0x22d/0x400 [ 865.074080][ C0] ? process_scheduled_works+0x976/0x1840 [ 865.079831][ C0] process_scheduled_works+0xa68/0x1840 [ 865.085438][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 865.091466][ C0] ? assign_work+0x364/0x3d0 [ 865.096096][ C0] worker_thread+0x870/0xd30 [ 865.100721][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 865.106399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 865.112068][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 865.118006][ C0] ? __kthread_parkme+0x169/0x1d0 [ 865.123069][ C0] ? __pfx_worker_thread+0x10/0x10 [ 865.128212][ C0] kthread+0x7ab/0x920 [ 865.132317][ C0] ? __pfx_kthread+0x10/0x10 [ 865.136954][ C0] ? __pfx_worker_thread+0x10/0x10 [ 865.142099][ C0] ? __pfx_kthread+0x10/0x10 [ 865.146721][ C0] ? __pfx_kthread+0x10/0x10 [ 865.151355][ C0] ? __pfx_kthread+0x10/0x10 [ 865.155983][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 865.161214][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 865.166890][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 865.172128][ C0] ? __pfx_kthread+0x10/0x10 [ 865.176760][ C0] ret_from_fork+0x4d/0x80 [ 865.181207][ C0] ? __pfx_kthread+0x10/0x10 [ 865.185846][ C0] ret_from_fork_asm+0x1a/0x30 [ 865.190665][ C0]