last executing test programs: 23m16.300483293s ago: executing program 32 (id=16): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000030000000500", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x18}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r6, 0x3, 0x5, [0x0, 0x3, 0x9, 0x6e39, 0xb078]}, &(0x7f00000001c0)=0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xb}, {0x3, 0x3}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x4044058}, 0x2004c815) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 9m47.838236321s ago: executing program 33 (id=2548): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006e80)="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", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x90, 0x0, 0x54, {0x0, 0x2, 0x7, 0x3, 0x8, 0x7e0, {0x0, 0x3d727124, 0x7ff, 0x7ff, 0x653, 0xd9c, 0x0, 0x1d3, 0xfffffff7, 0x6000, 0x8, 0x0, 0x0, 0x5, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x7fffffffffffffff, {0x2, 0x3, 0x80000000, 0x10000, 0x0, 0x0, {0x2, 0xfffffffffffffff9, 0x3, 0xeb, 0x1, 0x400, 0x2, 0x1, 0x7f, 0x4000, 0xffffb96d, 0x0, 0x0, 0xa0000000, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) 9m32.562285326s ago: executing program 0 (id=2583): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x12) epoll_create1(0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0xa, 0x3, 0xff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 9m32.037195961s ago: executing program 0 (id=2584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000000000001"], 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 9m26.272818174s ago: executing program 0 (id=2591): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in=@empty, 0xfffe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000}, {}, 0x0, 0x6e6bb8}, {{@in=@rand_addr=0x64010101, 0x0, 0x2b}, 0x0, @in=@private=0xa010100, 0x40000000}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000280)=0xfffffffe, 0xf) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x701}}, 0x24) connect$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) close_range(r3, r5, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) close(r3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 9m20.97253676s ago: executing program 0 (id=2610): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x19}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x503, &(0x7f0000000a00)="$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") r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 9m19.873093293s ago: executing program 0 (id=2613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m18.760847953s ago: executing program 0 (id=2617): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 9m18.290094967s ago: executing program 34 (id=2617): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 6m22.004831425s ago: executing program 8 (id=3066): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6m16.78857803s ago: executing program 8 (id=3078): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000240)={0x20, 0x11, 0x1, "fb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6m11.401456954s ago: executing program 8 (id=3090): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6m4.02106429s ago: executing program 8 (id=3112): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ac02000000000000080000000900000000000000fd45aacbdefff5d5a27717825ed6136f7c728db226da36b8fe0e0521132b950091801c82f3bf617171d7c49325b207b70216dffc07b383f91852904e200d7f655dc7b7a3ee4a5531e69e4c8c7d6ee7ec143a8e7e3dc2a75fb608610000b8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) 6m2.418713618s ago: executing program 8 (id=3119): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaab3aaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbf60200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5m59.468530791s ago: executing program 8 (id=3125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 5m44.412567345s ago: executing program 35 (id=3125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4m25.929266883s ago: executing program 2 (id=3286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x10, 0x1) 4m23.438110279s ago: executing program 2 (id=3291): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$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") close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xc4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 4m21.355463923s ago: executing program 2 (id=3294): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0}) 4m15.707538359s ago: executing program 2 (id=3302): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m15.044421073s ago: executing program 2 (id=3306): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$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") close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xc4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 4m14.420796971s ago: executing program 2 (id=3308): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9b}], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x5, &(0x7f0000000340)=""/5, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0xd4, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r4, r3, 0x1, r4, r3, r3, r4, r3, r3], &(0x7f00000009c0)=[{0x4, 0x3, 0xd, 0x5}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 4m13.496093828s ago: executing program 36 (id=3308): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9b}], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x5, &(0x7f0000000340)=""/5, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0xd4, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r4, r3, 0x1, r4, r3, r3, r4, r3, r3], &(0x7f00000009c0)=[{0x4, 0x3, 0xd, 0x5}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 2m58.719250819s ago: executing program 6 (id=3461): syz_usb_connect$uac1(0x2, 0xa8, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x7, 0x24, 0x6, 0x1, 0x4, 0x0, [], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0xe, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x85, 0x4, [0x1, 0x2, 0xa, 0x9], 0x1}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "039f254079"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x7]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x80, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0xfffffffffffffcde, 0x0}) 2m56.911748045s ago: executing program 6 (id=3467): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x20080d1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x313, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m56.077147408s ago: executing program 6 (id=3469): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 2m55.746064965s ago: executing program 6 (id=3470): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, r2, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)="6e0a6c97", 0x4}], 0x1) dup3(r0, r3, 0x6700000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m55.43823358s ago: executing program 6 (id=3471): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r3, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) 2m49.849042s ago: executing program 6 (id=3482): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303337372c757466382c696f636861727365743d6d616363656c26e207df7469632c6572726f72733d636f6e74696e75652c6e616d6563617365"], 0x1, 0x14f7, &(0x7f0000001580)="$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") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mlock(&(0x7f000049d000/0x4000)=nil, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 2m49.66764267s ago: executing program 4 (id=3483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x121840, 0x0) r7 = syz_io_uring_setup(0x4e5b, &(0x7f0000000600)={0x0, 0x0, 0x10100, 0x3, 0x3}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000180)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) unshare(0x22020400) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x206000, 0x0) preadv2(r10, 0x0, 0x0, 0x0, 0x4, 0x1) r11 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r12 = dup(r11) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) 2m47.833919161s ago: executing program 4 (id=3486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 2m42.620207998s ago: executing program 4 (id=3495): openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @dev, 0x0, 0x0, 'bridge_slave_0\x00', 'macsec0\x00', {}, {}, 0x32, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x1}, {0x0, 0x0, 0x3}, {0x0, 0x6, 0x4}, 0x2000000, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, 0x0) pipe(&(0x7f0000000000)) io_uring_enter(r1, 0x2217, 0xcf74, 0x16, 0x0, 0x0) 2m41.432162603s ago: executing program 4 (id=3500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x11, 0x8000a, 0x300, &(0x7f0000000000)) 2m39.787449877s ago: executing program 4 (id=3503): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 2m39.357176776s ago: executing program 4 (id=3504): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) userfaultfd(0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x19, @void}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00'], 0x0}, 0x0) 2m34.425119483s ago: executing program 37 (id=3482): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303337372c757466382c696f636861727365743d6d616363656c26e207df7469632c6572726f72733d636f6e74696e75652c6e616d6563617365"], 0x1, 0x14f7, &(0x7f0000001580)="$eJzs3AuUzlXbMPB97b3/jGnS3SSHYV/7+nOnwTZJkkNCDkmSJElOCUmTJAmJIaekIQk5TpLDEJLDNCaN8/mQc9LkkSZJQnIK+1t6nvf1PF/P+/a+39P3Wuud67fWXrOv2fe172vPNWvu//9ea+4feo6q16J+7WZEJP4l8NcvKUKIGCHEMCHEDUKIQAhRKb5S/JX1AgpS/rUnYX+uR9OvdQXsWuL+523c/7yN+5+3cf/zNu5/3sb9z9u4/3kb95+xvGz7nGI38si7g9//z8v49f9/kdzyk7/ZWP7mXv+NFO5/3sb9z9u4/3kb9z9v4/7nbdz///1q/Sdr3P+8jfvPWF52rd9/5nFtx7X+/WOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxljec81dpIcS/za91XYwxxhhjjDHGGPvz+PzXugLGGGOMMcYYY4z9/wdCCiW0CEQ+kV/EiAIiVlwn4sT1oqC4QUTEjSJe3CQKiZtFYVFEFBXFRIIoLkoII1BYQSIUJUUpERW3iNLiVpEoyoiyopxworxIEreJCuJ2UVHcISqJO0VlcZeoIqqKaqK6uFvUEPeImqKWqC3uFXVEXVFP1Bf3iQbiftFQPCAaiQdFY/GQaCIeFk3FI6KZeFQ0F4+JFuJx0VI8IVqJ1qKNaCva/T/lvyL6ildFP9FfpIgBYqB4TQwSg8UQMVQME6+L4eINMUK8KVLFSDFKvCVGi7fFGPGOGCvGifHiXTFBTBSTxGQxRUwVaeI9MU28L6aLD8QMMVPMErNFupgj5ooPxTwxXywQH4mF4mOxSCwWS8RSkSE+EZlimcgSn4rl4jORLVaIlWKVWC3WiLVinVgvNoiNYpPYLLaIrWKb2C4+FzvETrFL7BZ7xF6xT3wh9osvxQHxlcgRX/8388/+X/m9QIAACRI0aMgH+SAGYiAWYiEO4qAgFIQIRCAe4qEQFILCUBiKQlFIgAQoASUAAYGAoCSUhChEoTSUhkRIhLJQFhw4SIIkqAC3Q0WoCJWgElSGylAFqkJVqA7VoQbUgJpQE2pDbagDdaAe1IP74D64HxpCQ2gEjaAxNIYm0ASaQlNoBs2gOTSHFtACWkJLaAWtoA20gXbQDtpDe+gAHaATdILO0Bm6QBdIhmToCl2hG3SD7tAdekAP6Ak9oRf0ht7wCrwCr8Kr0B/qyAEwEAbCIBgEQ2AoDIXXYTi8AW/Am5AKI2EUvAVvwdswBs7AWBgH42E81JATYRJMBpJTIQ3SYBpMg+kwHWbATJgJsyEd5sBcmAvzYD7Mh49gIXwMH8NiWAxLIQMyIBOWQRZkwXI4C9mwAlbCKlgNa2A1rIP1sA42wibYCFtgC2yDbfA5fA47YSfsht2wF/bCF/AFfAlfQirkQA4chINwCA7BYTgMuZALR+AIHIWjcAyOwXE4DifgJJyCk3AaTsMZOAvn4BxcgAtwEV5K+K753jIbUoW8Qkst88l8MkbGyFgZK+NknCwoC8qIjMh4GS8LyUKysCwsi8qiMkEmyBKyhESJkmQoS8qSMiqjsrQsLRNloiwry0onnUySSbKCrCAryoqykrxTVpZ3ySqyquzoqsvqsobs5GrKWrK2rC3ryLqynqwv68sGsoFsKBvKRrKRbCwbyybyYdlUDoAh8Ki80pkWciS0lKOglWwt28i28m14UraXY6CD7Cg7yaflOBgLXWR7lyyfk13lJOgmX5CT4UXZQ06FnvJl2Uv2ln3kK7Kv7OD6yf5yBgyQA+VsGCQHyyFyqJwHdeWVjtWTb8pUOVKOkm/JpfC2HCPfkWPlODlevisnyIlykpwsp8ipMk2+J6fJ9+V0+YGcIWfKWXK2TJdz5Fz5oZwn58sF8iO5UH4sF8nFcolcKjPkJzJTLpNZ8lO5XH4ms+UKuVKukqvlGrlWrpPr5Qa5UW6Sm+UWuVVuk9vl53KH3Cl3yd1yj9wr98kv5H75pTwgv5I58mt5UP5FHpLfyMPyW5krv5NH5PfyqPxBHpM/yuPyJ3lCnpSn5M/ytPxFnpFn5Tl5Xl6Qv8qL8pK8LL0UCpRUSmkVqHwqv4pRBVSsuk7FqetVQXWDiqgbVby6SRVSN6vCqogqqoqpBFVclVBGobKKVKhKqlIqqm5RpdWtKlGVUWVVOeVUeZWkblMV1O2qorpDVVJ3qsrqLlVFVVXVVHV1t6qh7lE1VS1VW92r6qi6qp6qr+5TDdT9qqF6QDVSD6rG6iHVRD2smqpHVDP1qGquHlMt1OOqpXpCtVKtVRvVVrVTT6r26inVQXVUndTTqrN6RnVRz6pk9Zzqqp5X3dQLqrt6UfVQL6me6mXVS/VWfdQldVl51U/1VylqgBqoXlOD1GA1RA1Vw9Trarh6Q41Qb6pUNVKNUm+p0eptNUa9o8aqcWq8eldNUBPVJDVZTVFTVZp6T01T76vp6gM1Q81Us9Rsla7mqCF/22nBfyH//X+SP+K3Z9+mtqvP1Q61U+1Su9UetVftU/vUfrVfHVAHVI7KUQfVQXVIHVKH1WGVq3LVEXVEHVVH1TF1TB1Xx9UJdVKdVz+r0+oXdUadVWfVeXVBXVAX//YzEBq01EprHeh8Or+O0QV0rL5Ox+nrdUF9g47oG3W8vkkX0jfrwrqILqqL6QRdXJfQRqO2mnSoS+pSOqpv0aX1rTpRl9FldTntdHmdpG/7l/P/qL52up1ur9vrDrqD7qQ76c66s+6iu+hknay76q66m+6mu+vuuofuoXvqnrqX7qX76D66r+6r++l+OkWn6IH6NT1ID9ZD9FA9TL+uh+vheoQeoVN1qh6lR+nRerQeo8fosXqsHq/H6wl6gp6kJ+kpeopO02l6mp6mp+vpeoaeoWfpWTpdp+u5eq6ep+fpBXqBXqgX6kV6kV6il+gMnaEzdabO0ll6uV6us/UKvUKv0qv0Gr1Gr9Pr9Aa9QW/Sm/QWvUVn6+16u96hd+hdepfeo/fofXqf3q/36wP6gM7ROfqgPqgP6UP6sD6sc3WuPqKP6KP6qD6mj+nj+rg+oU/oU/qUPq1P6zP6jD6nz+kL+oK+qC/qy/rylcu+QAYy0IEO8gX5gpggJogNYoO4IC4oGBQMIkEkiA/ig0LBzUHhoEhQNCgWJATFgxKBCTCwAQVhUDIoFUSDW4LSwa1BYlAmKBuUC1xQPkgKbgsqBLcHFYM7gkrBnUHl4K6gSlA1qBZUD+4OagT3BDWDWkHt4N6gTlA3qBfUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjwaNA8eC1oEjwctgyeCVkHroE3QNmj3p+7v/ZkiT7l+pr9JMQPMQPOaGWQGmyFmqBlmXjfDzRtmhHnTpJqRZpR5y4w2b5sx5h0z1owz4827ZoKZaCaZyWaKmWrSzHtmmnnfTDcfmBlmppllZpt0M8fMNR+aeWa+WWA+MgvNx2aRWWyWmKUmw3xiMs0yk2U+NcvNZybbrDArzSqz2qwxa806s95sMBvNJrPZbDFbzTaz3XxudpidZpfZbfaYvWaf+cLsN1+aA+Yrk2O+NgfNX8wh8405bL41ueY7c8R8b46aH8wx86M5bn4yJ8xJc8r8bE6bX8wZc9acM+fNBfOruWgumcvGX7m4v/Lyjho15sN8GIMxGIuxGIdxWBALYgQjGI/xWAgLYWEsjEWxKCZgApbAEngFIWFJLIlRjGJpLI2JmIhlsSw6dJiESVgBK2BFrIiVsBJWxspYBatgNayGd+PdeA/eg7WwFt6L92JdrIv1sT42wAbYEBtiI2yEjbExNsEm2BSbYjNshs2xObbAFtgSW2IrbIVtsA22w3bYHttjB+yAnbATdsbO2AW7YDImY1fsit2wG3bH7tgDe2BP7Im9sBf2wT7YF/tiP+yHKZiCA3EgDsJBOASH4DAchsNxOI7AEZiKqTgKR+FoHI1jcAyOxXE4Ht/FCTgRJ+FknIJTMQ3TcBpOw+k4HWfgDJyFszAd03EuzsV5OA8X4AJciAtxES7CJbgEMzADMzETszALl+NyzMZsXIkrcTWuxrW4FtfjetyIG3EzbsatuBW343bcgTtwF+7CPbgH9+E+3I/78QAewBzMwYN4EA/hITyMhzEXc/EIHsGjeBSP4TE8jsfxBJ7AU3gKT+NpPINn8Byewwv4K17ES3gZPcZYKWLtdTbOXm8L2htsjC1g/z4uaovZBFvclrDGFrZF/iFGa22iLWPL2nLW2fI2yd72u7iKrWqr2er2blvD3mNr/i5uYO+3De0DtpF90Na39/1D3Ng+ZJvYx21T+4RtZlvb5ratbWEfty3tE7aVbW3b2La2s33GdrHP2mT7nO1qn/9dnGmX2fV2g91oN9n99kt7zp63R+0P9oL91faz/e0w+7odbt+wI+ybNtWO/F083r5rJ9iJdpKdbKfYqb+LZ9nZNt3OsXPth3aenf+7OMN+YhfaLLvILrZL7NLf4is1ZdlP7XL7mc22K+xKu8qutmvsWrvu32tdZbfYrXab3We/sDvsTrvL7rZ77N7f4ivnOGC/sjn2a3vEfm8P2W/sYXvM5trvfouvnO+Y/dEetz/ZE/akPWV/tqftL/aMPfvb+a+c/Wd7yV623goCkqRIU0D5KD/FUAGKpesojq6ngnQDRehGiqebqBDdTIWpCBWlYpRAxakEGUKyRBRSSSpFUbqFStOtlEhlqCyVI0flKYluowp0O1WkO6gS3UmV6S6qQlWpGlWnu6kG3UM1qRbVpnupDtWlelSf7qMGdD81pAeoET1IjekhakIPU1N6hJrRo9ScHqMW9Di1pCeoFbWmNtSW2tGT1J6eog7UkTrR09SZnqEu9Cwl03PUlZ6nbvQCdacXqQe9RD3pZepFvakPvUJ96VXqR/0phQbQQHqNBtFgGkJDaRi9TsPpDRpBb1IqjaRR9BaNprdpDL1DY2kcjad3aQJNpEk0mabQVEqj92gavU/T6QOaQTNpFs2mdJpDc+lDmkfzaQF9RAvpY1pEi2kJLaUM+oQyaRll0ae0nD6jbFpBK2kVraY1tJbW0XraQBtpE22mLbSVttF2+px20E7aRbtpD+2lffQF7acv6QB9RTn0NR2kv9Ah+oYO07eUS9/REfqejtIPdIx+pOP0E52gk3SKfqbT9AudobN0js7TBfqVLtIlukyeRAihDFWowyDMF+YPY8ICYWx4XRgXXh8WDG8II+GNYXx4U1govDksHBYJi4bFwoSweFgiNCGGNqQwDEuGpcJoeEtYOrw1TAzLhGXDcqELy4dJ4W1hhfD2sGJ4R1gpvDOsHN4VVgmrho8/WD28O6wR3hPWDGuFtcN7wzph3bBeWD+8L2wQ3h82DB8IG4UPhhXDh8Im4cNh0/CRsFn4aNg8fCxsET4etgyfCFuFrcM2YduwXfhk2D58KuwQdgw7hU+HncNnwi7hs2Fy+FzYNXz+D9dTwgHhwPC18LXQ+wfUkujSaEb0k2hmdFk0K/ppdHn0s2h2dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a3Rb1Pv6+YUDJ51y2gUun8vvYlwBF+uuc3HuelfQ3eAi7kYX725yhdzNrrAr4oq6Yi7BFXclnHHorCMXupKulIu6W1xpd6tLdGVcWVfOOVfeJbm2rp1r59q7p1wH19F1ck+7p90z7hn3rHvWPee6uuddN/eC6+5edD3cS+4l97Lr5Xq7Pu4V19e96vq5/i7FpbiBbqAb5Aa5IW6IG+aGueFuuBvhRrhUl+pGuVFutBvtxrgxbqwb68a78W6Cm+AmuUluipvi0lyam+amueluupvhZrhZbpZLd+lurpvr5rl5boFb4BYmLnSL3CK3xC1xGS7DZbpMl+Wy3HK33GW7bLfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa3w+1wu9wut8ftcfvcPrff7XcH3AGX43LcQXfQHXKH3GH3rct137kj7nt31P3gjrkf3XH3kzvhTrpT7md32v3izriz7pw77y64X91Fd8lddt6lRd6LTIu8H5ke+SAyIzIzMisyO5IemROZG/kwMi8yP7Ig8lFkYeTjyKLI4siSyNJIRuSTSGZkWSQr8mlkeeSzSHZkRWRlZFVkdWRNxPviO0Jf0pfyUX+LL+1v9Ym+jC/ry3nny/skf5uv4G/3Ff0dvpK/01f2d/kqvqqv5p/wrXxr38a39e38k769f8p38B19J/+07+yf8V38sz7ZP+e7+ud9N/+C7+5f9D38S76nf9n38r19H/+K7+tf9f18f5/iB/iB/jU/yA/2Q/xQP8y/7of7N/wI/6ZP9SP9KP+WH+3f9mP8O36sH+fH+3f9BD/RT/KT/RQ/1af59/w0/76f7j/wM/xMP8vP9ul+jp/rP/Tz/Hy/wH/kF/qP/SK/2C/xS32G/8Rn+mU+y3/ql/vPfLZf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX67/9zv8Dv9Lr/b7/F7/T7/hd/vv/QH/Fc+x3/tD/q/+EP+G3/Yf+tz/Xf+iP/eH/U/+GP+R3/c/+RP+JP+lP/Zn/a/+DP+rD/nz/sL/ld/0V/yl/l/1hhjjDHG/kvS/mB9wD/5nvzbuGKgEOL6ncVy/35dCSE2F/7rfLBM6BwRQjzXv+ej/zbq1ElJSfnbY7OVCEotFkJErubnE1fjFaKTeEYki46iwj+tb7DsfYH+YP/onULE/l1OjLgaX93/9v9g/yefHp9ZOTwX/5/sv1iIxFJXcwqIq/HV/Sv+B/sXaf8H9Rf4Jk2IDn+XEyeuxlf3TxJPiedF8j88kjHGGGOMMcYY+6vBslr3P7p/vnJ/nqCv5uQXV+M/uj9njDHGGGOMMcbYtfdi7z7PPpmc3LE7T3jCE578++Ra/2VijDHGGGOM/dmuXvRf60oYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLG863/i48Su9RkZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxa+3/BAAA//8P0TzQ") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mlock(&(0x7f000049d000/0x4000)=nil, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 11.329147445s ago: executing program 9 (id=3846): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x86100, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) setregid(0xee00, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) pwrite64(r0, &(0x7f0000000480)='2', 0x20000, 0x8080c64) 10.678128607s ago: executing program 7 (id=3850): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8d40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 10.271685859s ago: executing program 7 (id=3852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) syz_read_part_table(0x4011, &(0x7f0000004040)="$eJzszC0KQkEYBdA7Lxi0mN2ExawYXYrFJlgsbsXkMgSLC3EdCjJpwDSY3jnp8v3c2eu2TVKWx8P+lMaQ5P1NmyEpSVZ1U9rTEXom63uS6X/q5z/m50sNk5723XXx6PkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEMAAAAgDB/6zzaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBDAQAA//+lNQn4") 9.40871239s ago: executing program 3 (id=3854): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf1e95b6314116e264003a0d20bdc553bdbf5627282ef79d3998280d0008cebb1741badf2d9bebce95cdeea7e2bdfd51a6c0964f56cb3d5e3185e28efc649332d4945428597c56f2eede2a9d083b78291820c6287505351ec32fa37f3a4ff54feb7b60ac0d87ebeb34312b1b590e1698e0334507e583071dd0aef59fdbac78b7c113bc36a80be28864fe2d85", @ANYRES32, @ANYBLOB="0a00060008021100000000000400130006001000af0000000600ab0009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000044) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) 9.161089577s ago: executing program 1 (id=3855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x22, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @broadcast}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8a) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 9.045139464s ago: executing program 3 (id=3856): syz_emit_ethernet(0x66, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 8.914103702s ago: executing program 7 (id=3857): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x25, 0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZHOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZndk1uyayWXH382n24Xl+33meJxmySZEnH74823+Qx6OnX/wSWZZEbxzjOExiFL1ofBUnjL8JAOD/7LAo4vdiYZ1cEhHZ5pYFAGzQav//+23zp0tZFgCwQffffe/tnd3du+9kkcW92dcHk/KTffl3Mb7zKD6OaTyM12IYRxHV+4T6g3/ZvlcUxbyfl0ZxazY/mJTJ2QfP6uvv/BZR5bdjGKPjWPVuo8q/tXt3u4rng05+Xq7j+Xr+cZm/E8N48Th8In9nkc+7+Zik8eornfXfjmH8/FF8EtN4UC2izX+5nedvFt/+8fn75fLKfDI/mAyqulaxdZnPCwAAAAAAAAAAAAAAAAAAAAAAV9vtvDl8J78Zt2ZlV33+ztZRWtfUJaM2VY4vWknT1TkfqDQv4vvOkYJ5URe25/v046V+92BBAAAAAAAAAAAAAAAAAAAAuL6efPrZ/t50+vDxhTSa0wD6EfHn/Yh/e51xp+dmnF88qOfcm057dfNEzbO02xNbTU0Sce4yyk1c0MPyT43nTq+5afzwY7nBdS6YdXpeX77BG5vfV3N37e8ly+caRNOT1TfJd2lEW5PGinOlZw0Vsc7tly4dGq699/SFqjE/s6Y5B+Os67zx62K87klO7yKtHtWls9+oG534qXtjpec9skX8768VSXVax2BDr0QAAAAAAAAAAAAAAAAAAED77d8lg0/PjfYKXwUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ipof/9/jca8Dq9QnMbjJ//xFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgG/goAAP///CFRHg==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)="5ff55e", 0x3}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 7.442406024s ago: executing program 1 (id=3858): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() unshare(0x22020600) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 7.332323811s ago: executing program 3 (id=3859): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1, 0xc34, &(0x7f0000001bc0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) time(0xfffffffffffffffc) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x571, &(0x7f0000000f00)="$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") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000500)={0x50, 0x0, 0x6, {0x7, 0x29, 0x0, 0xffffffffc04180f0, 0x1, 0x40, 0x80000414, 0x8000, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) 7.2732173s ago: executing program 7 (id=3861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}}, 0x0, 0x8, 0x8a, &(0x7f00000001c0)=""/138, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2}, 0x94) 6.261215406s ago: executing program 5 (id=3862): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}]}) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x5, 0x7424}, {0x81, 0x2}]}, 0x14, 0x1) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 6.260675871s ago: executing program 7 (id=3863): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8) sendto$inet(r0, &(0x7f0000000200)="25d7196cdf3006d1ed5b6155b965d6ba9f00bbf73b65", 0x16, 0x4000054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) close(0x3) 6.141133791s ago: executing program 3 (id=3864): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x7, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.112952976s ago: executing program 1 (id=3865): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0x1, 0x122e, &(0x7f0000002580)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3f}}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@norecovery}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000009000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)={0x78, 0xfffffffffffffff5, 0x6, {0x100, 0x1, 0x0, {0x0, 0xffffffff00000001, 0x5, 0x2, 0x100000001, 0x7fffffff, 0x7, 0xa, 0x6, 0x2000, 0x62c2, 0x0, 0x0, 0x1, 0x40000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) 5.997280464s ago: executing program 9 (id=3866): process_vm_readv(0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/119, 0x77}, {&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000600)=""/97, 0x61}], 0x8, &(0x7f0000001c00)=[{&(0x7f0000000700)=""/36, 0x24}, {0x0}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000001840)=""/57, 0x39}, {&(0x7f0000001880)=""/227, 0xe3}, {&(0x7f0000001980)=""/180, 0xb4}, {&(0x7f0000001a40)=""/197, 0xc5}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/108, 0x6c}], 0x9, 0x0) 5.966356236s ago: executing program 7 (id=3867): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) close(r1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(r5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000003dd60000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 4.700043725s ago: executing program 5 (id=3868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 3.952697367s ago: executing program 3 (id=3869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendto$inet(0xffffffffffffffff, &(0x7f00000020c0)="f72bacc3ca1a9edf08e239411cbcf4b2ef918084f500db36e20f4f509b2d142d7f20570bec6d2d7f", 0x28, 0x0, 0x0, 0x0) 3.277122963s ago: executing program 9 (id=3870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x22, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @broadcast}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8a) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 2.043369085s ago: executing program 9 (id=3871): syz_emit_ethernet(0x66, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 1.989375796s ago: executing program 5 (id=3872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000005", @ANYRES32], 0x38}}, 0x0) 1.933170575s ago: executing program 1 (id=3873): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf1e95b6314116e264003a0d20bdc553bdbf5627282ef79d3998280d0008cebb1741badf2d9bebce95cdeea7e2bdfd51a6c0964f56cb3d5e3185e28efc649332d4945428597c56f2eede2a9d083b78291820c6287505351ec32fa37f3a4ff54feb7b60ac0d87ebeb34312b1b590e1698e0334507e583071dd0aef59fdbac78b7c113bc36a80be28864fe2d85", @ANYRES32, @ANYBLOB="0a00060008021100000000000400130006001000af0000000600ab0009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000044) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) 1.737947241s ago: executing program 9 (id=3874): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) 1.675578414s ago: executing program 5 (id=3875): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001b700)=ANY=[], 0x118c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x6, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) dup(r2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) 1.589015985s ago: executing program 1 (id=3876): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1, 0xc34, &(0x7f0000001bc0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) time(0xfffffffffffffffc) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x571, &(0x7f0000000f00)="$eJzs3U9rXFUbAPDnTpL+f9+mUIqKSKALK7WTJkGt4KIuRYsF3dchuQ0lk07JTEoTC7YLu3EjRRCxIO5177L4BfwUBS0UKUEXbiJ3cidNk5lk0kyTqff3g1vOmXNnznnuvef03Dk3TACFNZL9U4p4OSK+TiKORkSSlw1GXjiyst/S45uT2ZbE8vInfybN/bJ867Na7zucZ16KiF+/jDhd2lhvfWFxplKtpnN5frQxe220vrB45spsZTqdTq+OT0yce2ti/N133u5ZrG9c/Pu7j+9/cO6rk0vf/vzw2N0kzseRvGxtHDtwa21mJEbyYzIU59ftONaDyvpJsknZ/3exHWzPQN7PhyIbA47GQN7rgf++LyJiGSioRP+HgmrNA1r39h3vg4/s5qxk9zx6f+UGaGP8gyvfjcSB5r3RoaXkqTuj7H53uAf1Z3X88se9u9kW2/se4kAPqgcK7NbtiDg7OLhx/Evy8e/Zne1in/V19Oh7WKAL97P5z5vt5j+l1flPtJn/HG7Td5/F1v2/9LAH1XSUzf/eazv/XV20Gh7Ic/9rzvmGkstXqunZfF3jVAztz/KbreecW3qw3Kls7fwv27L6W3PBvB0PB/c//Z6pSqOyk5jXenQ74pW2899k9fwnbc5/djwudlnHifTea53Kto7/+Vr+MeL1tuf/yYpWsvn65GjzehhtXRUb/XXnxG+d6t9O/Pt2Hu4G2fk/tHn8w8na9dr69uv44cA/aaeyp+KP7q//fcmnzXTrmNyoNBpzYxH7ko82vj7+5L2tfGv/LP5TJzcf/9pd/wcj4rMu479z/KdXu4p/D67/LP6pbZ3/7ScefPj5953q7278Wzmbp/JXuhn/um3gTo4dAAAAAAAA9JtS89HepFReTZdK5fLK8x3H41CpWqs3Tl+uzV+dWnkEeDiGSq2V7qNrnocYy5+HbeXH1+UnIuJYRHwzcLCZL0/WqlN7HTwAAAAAAAAAAAAAAAAAAAD0icMd/v4/8/vAXrcOeO785DcU15b9vxe/9AT0Jf//Q3Hp/1Bc+j8Ul/4PxaX/Q3Hp/1Bc+j8Ul/4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXXxwoVsW156fHMyy09dX5ifqV0/M5XWZ8qz85PlydrctfJ0rTZdTcuTtdmtPq9aq10bG4/5G6ONtN4YrS8sXpqtzV9tXLoyW5lOL6VDuxIVAAAAAAAAAAAAAAAAAAAAvFjqC4szlWo1ndvrRNaYPmjGi5PY3x/NWBjsj2ZI9Dix1yMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzxbwAAAP//jts1hw==") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000500)={0x50, 0x0, 0x6, {0x7, 0x29, 0x0, 0xffffffffc04180f0, 0x1, 0x40, 0x80000414, 0x8000, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) 1.312560316s ago: executing program 9 (id=3877): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7aba, 0x100, 0x22, 0x352}, &(0x7f0000000080), &(0x7f0000000100)) 591.180818ms ago: executing program 1 (id=3878): openat$random(0xffffffffffffff9c, 0x0, 0x86100, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000480)='2', 0x20000, 0x8080c64) 413.226524ms ago: executing program 5 (id=3879): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 9.124621ms ago: executing program 5 (id=3880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 0s ago: executing program 3 (id=3881): process_vm_readv(0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/119, 0x77}, {&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000600)=""/97, 0x61}], 0x8, &(0x7f0000001c00)=[{&(0x7f0000000700)=""/36, 0x24}, {0x0}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000001840)=""/57, 0x39}, {&(0x7f0000001880)=""/227, 0xe3}, {&(0x7f0000001980)=""/180, 0xb4}, {&(0x7f0000001a40)=""/197, 0xc5}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/108, 0x6c}], 0x9, 0x0) kernel console output (not intermixed with test programs): 3] team0: Port device team_slave_0 added [ 1263.341820][T16733] team0: Port device team_slave_1 added [ 1263.677894][T16733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.705524][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.759787][T16733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.772322][T11897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1263.782170][T11897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1263.790469][T11897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1263.800123][T11897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1263.809133][T11897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1263.822927][T16733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.833528][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.860042][T16733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.037046][ T4551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.180680][T16936] binder: 16934:16936 ioctl c0306201 0 returned -14 [ 1265.346894][ T4551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.409449][T16733] hsr_slave_0: entered promiscuous mode [ 1265.429843][T16733] hsr_slave_1: entered promiscuous mode [ 1265.562015][T16941] tipc: Enabling of bearer rejected, already enabled [ 1265.695590][T16948] loop7: detected capacity change from 0 to 512 [ 1265.941127][ T5151] Bluetooth: hci1: command tx timeout [ 1266.597465][T16952] loop6: detected capacity change from 0 to 512 [ 1266.605925][ T4551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.644354][T16952] EXT4-fs: inline encryption not supported [ 1266.668176][T16952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1266.728871][T16952] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1266.785229][T16952] EXT4-fs (loop6): blocks per group (39) and clusters per group (32768) inconsistent [ 1266.850167][T16958] loop7: detected capacity change from 0 to 256 [ 1267.839631][T16958] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1267.851861][T16956] vlan0: entered promiscuous mode [ 1267.914171][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1267.914187][ T30] audit: type=1326 audit(1753830742.506:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16963 comm="syz.6.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489dd8e9a9 code=0x7ffc0000 [ 1268.068670][ T30] audit: type=1326 audit(1753830742.506:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16963 comm="syz.6.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489dd8e9a9 code=0x7ffc0000 [ 1268.099491][ T5151] Bluetooth: hci1: command tx timeout [ 1268.241193][ T30] audit: type=1326 audit(1753830742.506:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16963 comm="syz.6.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f489dd8e9a9 code=0x7ffc0000 [ 1268.858798][ T30] audit: type=1326 audit(1753830742.506:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16963 comm="syz.6.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489dd8e9a9 code=0x7ffc0000 [ 1269.016055][ T30] audit: type=1326 audit(1753830742.506:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16963 comm="syz.6.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f489dd8e9a9 code=0x7ffc0000 [ 1269.039502][ T30] audit: type=1326 audit(1753830742.506:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16963 comm="syz.6.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489dd8e9a9 code=0x7ffc0000 [ 1269.096768][T16968] loop6: detected capacity change from 0 to 512 [ 1269.106545][T16968] EXT4-fs: quotafile must be on filesystem root [ 1269.727721][T16973] loop6: detected capacity change from 0 to 2048 [ 1270.261664][ T5151] Bluetooth: hci1: command tx timeout [ 1272.340627][ T5151] Bluetooth: hci1: command tx timeout [ 1272.382838][T16973] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 1273.139818][T16985] binder: 16984:16985 ioctl c0306201 0 returned -14 [ 1274.278822][T16991] loop4: detected capacity change from 0 to 128 [ 1274.561772][T16991] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1274.580701][T16991] ext4 filesystem being mounted at /568/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1275.365319][ T5838] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1275.486968][T17006] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3333'. [ 1276.760433][T17018] fuse: blksize only supported for fuseblk [ 1278.158677][ T4551] bond0 (unregistering): Released all slaves [ 1278.638465][T16926] chnl_net:caif_netlink_parms(): no params data found [ 1278.676275][ T4551] tipc: Left network mode [ 1280.434120][T17026] loop4: detected capacity change from 0 to 40427 [ 1280.561555][T16926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.568682][T16926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.604054][T16926] bridge_slave_0: entered allmulticast mode [ 1280.610237][T17026] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1280.618856][T16926] bridge_slave_0: entered promiscuous mode [ 1280.642483][T17026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1280.721604][ T4551] hsr_slave_0: left promiscuous mode [ 1280.744682][ T4551] hsr_slave_1: left promiscuous mode [ 1280.986370][ T4551] veth1_macvtap: left promiscuous mode [ 1280.993878][ T4551] veth0_macvtap: left promiscuous mode [ 1281.000301][ T4551] veth1_vlan: left promiscuous mode [ 1281.324326][T17026] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1281.350018][T17026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1281.815227][T17059] loop6: detected capacity change from 0 to 256 [ 1281.856589][T17059] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1283.224707][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1283.290831][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1285.113801][T16926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.126495][T16926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.134873][T16926] bridge_slave_1: entered allmulticast mode [ 1285.153026][T16926] bridge_slave_1: entered promiscuous mode [ 1285.448963][T16926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.470352][T16926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.483155][T16733] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1285.647039][T16733] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1286.142663][T16733] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1286.835760][T16926] team0: Port device team_slave_0 added [ 1286.855854][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1286.876394][T16926] team0: Port device team_slave_1 added [ 1286.965172][T16733] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1287.988791][T16926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.030628][T11897] Bluetooth: hci6: command 0x1003 tx timeout [ 1288.038206][ T5151] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1288.038459][T16926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.167398][T16926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.258588][T16926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.300571][T16926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.375839][T16926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.986149][T16926] hsr_slave_0: entered promiscuous mode [ 1289.019555][T16926] hsr_slave_1: entered promiscuous mode [ 1289.037295][T16926] debugfs: 'hsr0' already exists in 'hsr' [ 1289.044293][T16926] Cannot create hsr debugfs directory [ 1290.002529][T17136] netlink: 'syz.4.3366': attribute type 3 has an invalid length. [ 1291.928688][T16733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.114496][T16733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.228286][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.235497][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.481640][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.488771][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.602515][T17144] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1292.614860][T17144] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1293.542768][T17147] overlayfs: failed to resolve './file0': -2 [ 1293.685583][T17149] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3371'. [ 1294.215420][T11897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1294.234112][T11897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1294.256392][T11897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1294.271963][T11897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1294.288493][T11897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1294.631400][T17165] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1295.939490][T17157] chnl_net:caif_netlink_parms(): no params data found [ 1295.975619][T16926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1296.084871][T16926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1296.232596][T16926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1296.292227][T16926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1296.340879][ T5151] Bluetooth: hci0: command tx timeout [ 1296.584464][T17186] loop7: detected capacity change from 0 to 128 [ 1296.603702][T17186] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1296.675616][T17186] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1296.737813][T17186] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.791431][ T5823] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1296.808373][T17193] loop6: detected capacity change from 0 to 256 [ 1296.818167][T17193] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1296.855400][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.886522][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.910451][T17157] bridge_slave_0: entered allmulticast mode [ 1296.937823][T17157] bridge_slave_0: entered promiscuous mode [ 1296.942797][T17186] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1296.959176][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.970153][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.979246][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 1296.999770][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1297.021969][T17157] bridge_slave_1: entered allmulticast mode [ 1297.041760][ T5823] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1297.053166][T17157] bridge_slave_1: entered promiscuous mode [ 1297.071400][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.089875][ T5823] usb 2-1: Product: syz [ 1297.098022][ T5823] usb 2-1: Manufacturer: syz [ 1297.114695][ T5823] usb 2-1: SerialNumber: syz [ 1297.122419][T14261] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1297.149552][ T5823] usb 2-1: config 0 descriptor?? [ 1297.333943][T17203] fuse: Unknown parameter '0x0000000000000004' [ 1297.462792][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.511190][T17208] loop7: detected capacity change from 0 to 256 [ 1297.586544][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.743930][ T5945] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1297.762381][T17157] team0: Port device team_slave_0 added [ 1298.348977][T17212] loop4: detected capacity change from 0 to 1024 [ 1298.365683][T17212] EXT4-fs: Ignoring removed nobh option [ 1298.426692][ T5151] Bluetooth: hci0: command tx timeout [ 1298.530182][T17157] team0: Port device team_slave_1 added [ 1298.622101][ T6635] bridge_slave_1: left allmulticast mode [ 1298.662123][ T6635] bridge_slave_1: left promiscuous mode [ 1298.697410][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.738041][ T6635] bridge_slave_0: left allmulticast mode [ 1298.747990][T17212] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1298.809619][T17212] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.3387: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1298.828200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.831008][ T5945] usb 7-1: Using ep0 maxpacket: 16 [ 1298.836763][T17212] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3387: couldn't read orphan inode 11 (err -117) [ 1298.842875][ T5945] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1298.942856][T17212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.159589][ T6635] bridge_slave_0: left promiscuous mode [ 1299.363727][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.512385][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.524100][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.689207][T14488] usb 2-1: USB disconnect, device number 65 [ 1299.820280][ T5945] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1299.838022][ T5945] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1299.847321][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.855404][ T5945] usb 7-1: Product: syz [ 1299.859610][ T5945] usb 7-1: Manufacturer: syz [ 1299.864420][ T5945] usb 7-1: SerialNumber: syz [ 1300.146425][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.337829][ T5945] usb 7-1: 0:2 : does not exist [ 1300.363729][ T5945] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1300.407110][ T5945] usb 7-1: USB disconnect, device number 71 [ 1300.486651][T12312] udevd[12312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.510601][ T5151] Bluetooth: hci0: command tx timeout [ 1300.870653][T17230] loop7: detected capacity change from 0 to 128 [ 1300.903820][ T30] audit: type=1800 audit(1753830775.506:405): pid=17230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3393" name="file2" dev="loop7" ino=1048643 res=0 errno=0 [ 1300.942531][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1300.987205][T17230] FAT-fs (loop7): Filesystem has been set read-only [ 1301.017849][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1301.033619][ T30] audit: type=1800 audit(1753830775.536:406): pid=17230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3393" name="file2" dev="loop7" ino=1048643 res=0 errno=0 [ 1301.087036][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1301.142615][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1301.171079][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1301.196170][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1301.219428][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1301.248994][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1301.290650][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1301.370600][T17230] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 1302.230843][ T6635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.367618][ T6635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.476153][ T6635] bond0 (unregistering): Released all slaves [ 1302.580693][ T5151] Bluetooth: hci0: command tx timeout [ 1302.879580][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.933060][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.077112][T17243] input: syz0 as /devices/virtual/input/input35 [ 1303.256919][T17244] loop4: detected capacity change from 0 to 512 [ 1303.328309][T17244] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1303.425736][T17244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 1303.465021][T17244] EXT4-fs error (device loop4): ext4_iget_extra_inode:5030: inode #15: comm syz.4.3395: corrupted in-inode xattr: e_value size too large [ 1303.488514][T17244] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3395: couldn't read orphan inode 15 (err -117) [ 1303.524563][T17244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1303.911951][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.924786][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.931796][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.177379][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.446916][ T6635] hsr_slave_0: left promiscuous mode [ 1304.513359][ T6635] hsr_slave_1: left promiscuous mode [ 1304.546671][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.592683][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.148328][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.422890][ T6635] team0 (unregistering): Port device team_slave_1 removed [ 1305.506916][ T6635] team0 (unregistering): Port device team_slave_0 removed [ 1306.480903][T17255] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3399'. [ 1307.297800][T17157] hsr_slave_0: entered promiscuous mode [ 1307.319974][T17157] hsr_slave_1: entered promiscuous mode [ 1307.592580][T16926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.489901][T16926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.778411][T14600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.785660][T14600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.030215][T14600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.037404][T14600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.724559][T17290] loop7: detected capacity change from 0 to 2048 [ 1310.799619][T17290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1311.199065][T17157] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1312.105273][T17157] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1312.156059][T14261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.175726][T17157] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1312.215779][T17157] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1312.300180][ T30] audit: type=1326 audit(1753830786.896:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1312.431447][T17308] loop7: detected capacity change from 0 to 512 [ 1312.447762][ T30] audit: type=1326 audit(1753830786.926:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1312.473044][ T30] audit: type=1326 audit(1753830786.926:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1312.495619][ T30] audit: type=1326 audit(1753830786.926:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1312.545065][T17308] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 1312.550689][ T30] audit: type=1326 audit(1753830786.936:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1312.615660][T16926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.639220][T17318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1313.234458][ T30] audit: type=1326 audit(1753830786.936:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1313.283173][ T30] audit: type=1326 audit(1753830786.936:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1313.339518][ T30] audit: type=1326 audit(1753830786.946:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1313.495320][ T30] audit: type=1326 audit(1753830786.946:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1313.552617][ T30] audit: type=1326 audit(1753830786.946:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz.7.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8a6c18e9a9 code=0x7ffc0000 [ 1313.675133][T16926] veth0_vlan: entered promiscuous mode [ 1313.779259][T17157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.978712][T17317] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1314.073596][T17157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.143476][T16926] veth1_vlan: entered promiscuous mode [ 1314.168715][ T2211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.175945][ T2211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.217027][T17333] loop4: detected capacity change from 0 to 256 [ 1314.226482][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.233669][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.341305][T17333] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1314.624168][T16926] veth0_macvtap: entered promiscuous mode [ 1315.376825][T17157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1315.405368][T17157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1315.483658][T16926] veth1_macvtap: entered promiscuous mode [ 1316.550726][T16926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.615314][T16926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.727116][T16926] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.762319][T16926] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.787627][T16926] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.825591][T16926] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.246448][T14600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.282097][T14600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.413654][T17157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.473757][ T6644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.529861][ T6644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.878207][T17365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1318.937230][T17377] loop6: detected capacity change from 0 to 128 [ 1318.956904][T17377] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1319.633966][T17377] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1322.219833][T17397] input: syz0 as /devices/virtual/input/input36 [ 1322.379467][T17398] loop7: detected capacity change from 0 to 512 [ 1323.440616][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1323.440636][ T30] audit: type=1326 audit(1753830798.036:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25a38e9a9 code=0x7ffc0000 [ 1323.471509][T17398] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1324.003670][T17398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 1324.019013][T17398] EXT4-fs error (device loop7): ext4_iget_extra_inode:5030: inode #15: comm syz.7.3436: corrupted in-inode xattr: e_value size too large [ 1324.038585][T17398] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3436: couldn't read orphan inode 15 (err -117) [ 1324.868085][T17401] loop6: detected capacity change from 0 to 1024 [ 1324.884419][T17401] EXT4-fs: Ignoring removed nobh option [ 1325.018177][T17401] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1325.032901][ T30] audit: type=1326 audit(1753830798.636:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fd25a38e9a9 code=0x7ffc0000 [ 1325.226191][T17398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.029733][T17401] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1326.029815][T17401] EXT4-fs: failed to create workqueue [ 1326.044827][T17401] EXT4-fs (loop6): mount failed [ 1326.825461][T14261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.858510][ T30] audit: type=1326 audit(1753830798.636:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25a38e9a9 code=0x7ffc0000 [ 1326.881094][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.248871][T17157] veth0_vlan: entered promiscuous mode [ 1327.268257][T17157] veth1_vlan: entered promiscuous mode [ 1327.319896][T17417] loop4: detected capacity change from 0 to 1024 [ 1327.327134][T17417] EXT4-fs: Ignoring removed nobh option [ 1327.339016][T17417] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1327.383097][T17157] veth0_macvtap: entered promiscuous mode [ 1327.393983][T17157] veth1_macvtap: entered promiscuous mode [ 1327.425595][T17417] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.3443: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1327.447238][T17417] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3443: couldn't read orphan inode 11 (err -117) [ 1327.462422][T17417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.558163][T17157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.590790][T17421] ksmbd: Unknown IPC event: 3, ignore. [ 1327.772257][T17157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.960923][T17157] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.970621][T17157] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.982111][T17157] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.990906][T17157] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.030288][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.039768][ T5926] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1328.221770][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 1328.318714][T14592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.367695][T14592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.545535][ T5926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1328.569126][ T5926] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1328.588601][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.604478][ T5926] usb 2-1: Product: syz [ 1328.609327][ T5926] usb 2-1: Manufacturer: syz [ 1329.319484][ T5926] usb 2-1: SerialNumber: syz [ 1329.331945][ T5926] usb 2-1: config 0 descriptor?? [ 1329.612816][T14592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.668884][T14592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.844999][ T5926] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1332.971018][ T5926] usb 2-1: USB disconnect, device number 66 [ 1333.182940][T17445] loop7: detected capacity change from 0 to 256 [ 1333.319645][T17445] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1333.401680][T17445] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1333.482635][T17445] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1334.139512][T17456] input: syz0 as /devices/virtual/input/input37 [ 1334.348274][T17457] loop9: detected capacity change from 0 to 512 [ 1334.405698][T17457] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1334.493197][T17457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 1334.524207][T17457] EXT4-fs error (device loop9): ext4_iget_extra_inode:5030: inode #15: comm syz.9.3454: corrupted in-inode xattr: e_value size too large [ 1334.558962][T17457] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3454: couldn't read orphan inode 15 (err -117) [ 1334.596463][T17457] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.824551][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.626225][T17475] loop9: detected capacity change from 0 to 1024 [ 1337.639707][T17475] EXT4-fs: Ignoring removed nobh option [ 1337.677293][T11897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1337.694838][T11897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1337.703772][T11897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1337.717040][T11897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1337.725489][T17475] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1337.742684][T11897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1337.760341][T17475] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3457: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1337.780352][T17475] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3457: couldn't read orphan inode 11 (err -117) [ 1337.794306][T17475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.940801][ T5823] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1338.121554][ T5823] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1338.145170][ T5823] usb 7-1: not running at top speed; connect to a high speed hub [ 1338.165730][ T5823] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1338.324993][ T5823] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1338.352044][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.365001][ T5823] usb 7-1: Product: syz [ 1338.372651][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.393835][ T5823] usb 7-1: Manufacturer: syz [ 1338.398942][ T5823] usb 7-1: SerialNumber: syz [ 1338.661788][ T5823] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1338.670816][ T5926] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1338.682083][ T5823] usb 7-1: unit 2 not found! [ 1338.687111][T17493] loop3: detected capacity change from 0 to 512 [ 1338.740195][T17493] EXT4-fs error (device loop3): ext4_iget_extra_inode:5030: inode #15: comm syz.3.3465: corrupted in-inode xattr: invalid ea_ino [ 1338.780881][T17493] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3465: couldn't read orphan inode 15 (err -117) [ 1338.828697][ T5823] usb 7-1: USB disconnect, device number 72 [ 1338.861771][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1338.880780][ T6059] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1338.892272][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1338.926948][T17493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.944187][ T5926] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1339.007049][T12312] udevd[12312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.025101][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.195831][T17493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.210600][ T5926] usb 5-1: Product: syz [ 1339.210789][ T6059] usb 10-1: Using ep0 maxpacket: 32 [ 1339.221830][ T5926] usb 5-1: Manufacturer: syz [ 1339.226444][ T5926] usb 5-1: SerialNumber: syz [ 1339.236020][ T6059] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1339.249928][ T6059] usb 10-1: config 0 has no interface number 0 [ 1339.269861][ T6059] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1339.281504][ T5926] usb 5-1: config 0 descriptor?? [ 1339.482106][ T6059] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1339.526617][T17476] chnl_net:caif_netlink_parms(): no params data found [ 1339.591770][ T6059] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1339.616042][ T6059] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.639420][T17505] loop6: detected capacity change from 0 to 128 [ 1339.676634][ T6059] usb 10-1: Product: syz [ 1339.707091][ T30] audit: type=1326 audit(1753830814.306:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1339.734356][ T5926] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1339.745372][ T6059] usb 10-1: Manufacturer: syz [ 1339.750075][ T6059] usb 10-1: SerialNumber: syz [ 1339.768618][ T30] audit: type=1326 audit(1753830814.306:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1339.828710][ T30] audit: type=1326 audit(1753830814.306:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1339.864484][ T6059] usb 10-1: config 0 descriptor?? [ 1339.881153][ T5151] Bluetooth: hci6: command tx timeout [ 1339.889321][ T30] audit: type=1326 audit(1753830814.336:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1339.890336][T17495] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1339.912953][ T30] audit: type=1326 audit(1753830814.346:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1339.950577][ T30] audit: type=1326 audit(1753830814.346:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1339.974870][ T30] audit: type=1326 audit(1753830814.346:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1340.117765][ T30] audit: type=1326 audit(1753830814.366:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1340.203504][T17476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.242011][ T30] audit: type=1326 audit(1753830814.366:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1340.260892][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.270544][T14218] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1340.285520][T17476] bridge_slave_0: entered allmulticast mode [ 1340.328977][T17476] bridge_slave_0: entered promiscuous mode [ 1340.370611][ T30] audit: type=1326 audit(1753830814.366:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2fe238e9a9 code=0x7ffc0000 [ 1340.417462][ T5945] usb 5-1: USB disconnect, device number 67 [ 1340.430238][ T6059] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1340.455427][ T5845] syz_tun (unregistering): left promiscuous mode [ 1340.458234][ T6059] ipheth 10-1:0.196: probe with driver ipheth failed with error -22 [ 1340.530928][T14218] usb 4-1: Using ep0 maxpacket: 32 [ 1340.542269][T14218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.560976][T14218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.583979][T17476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.616265][T14218] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1340.626598][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.635609][ T6059] usb 10-1: USB disconnect, device number 2 [ 1340.659268][T14218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.666965][T17476] bridge_slave_1: entered allmulticast mode [ 1340.697047][T14218] usb 4-1: config 0 descriptor?? [ 1340.720420][T17476] bridge_slave_1: entered promiscuous mode [ 1340.734394][T14218] hub 4-1:0.0: USB hub found [ 1340.850060][T17476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.878028][T17476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.939022][T14218] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1340.990284][T14218] usbhid 4-1:0.0: can't add hid device: -71 [ 1341.015017][T14218] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1341.091294][T14218] usb 4-1: USB disconnect, device number 2 [ 1341.131771][T17521] loop4: detected capacity change from 0 to 512 [ 1341.164239][T17521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1341.940638][ T5151] Bluetooth: hci6: command tx timeout [ 1342.091917][T17521] EXT4-fs (loop4): 1 truncate cleaned up [ 1342.099573][T17521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1342.707920][T17476] team0: Port device team_slave_0 added [ 1342.832786][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.439181][T17533] loop9: detected capacity change from 0 to 1024 [ 1343.535445][T17476] team0: Port device team_slave_1 added [ 1343.608478][T17535] loop7: detected capacity change from 0 to 1024 [ 1343.616022][T17535] EXT4-fs: Ignoring removed nobh option [ 1343.654355][T17535] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1343.678112][T17535] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.3476: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1343.698470][T17535] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3476: couldn't read orphan inode 11 (err -117) [ 1343.712704][T17535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.117875][ T5151] Bluetooth: hci6: command tx timeout [ 1344.298514][T14261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.393653][T17476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.416543][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.522833][T17476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.556181][T17545] loop7: detected capacity change from 0 to 1024 [ 1344.570948][T17476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.586473][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.636474][T17545] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1344.676959][T17476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.699877][T17545] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1344.734390][T17545] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1344.919670][T17545] __quota_error: 26 callbacks suppressed [ 1344.919690][T17545] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1344.997996][T17545] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1345.223274][T17476] hsr_slave_0: entered promiscuous mode [ 1345.329734][T17545] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3479: Failed to acquire dquot type 0 [ 1345.484159][T17476] hsr_slave_1: entered promiscuous mode [ 1345.633428][T17545] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1345.647810][T17476] debugfs: 'hsr0' already exists in 'hsr' [ 1345.729271][T17476] Cannot create hsr debugfs directory [ 1345.971878][T17545] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1346.091991][T17545] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3479: Failed to acquire dquot type 0 [ 1346.136437][T17553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.194042][ T5151] Bluetooth: hci6: command tx timeout [ 1346.200945][T17545] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3479: Freeing blocks not in datazone - block = 0, count = 4096 [ 1346.268199][T17545] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1346.279297][T17545] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1346.289393][T17545] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3479: Failed to acquire dquot type 0 [ 1346.324017][T17545] EXT4-fs (loop7): 1 orphan inode deleted [ 1346.594560][T17557] loop6: detected capacity change from 0 to 256 [ 1346.682391][T17557] exfat: Deprecated parameter 'utf8' [ 1346.742936][T17557] exfat: Deprecated parameter 'namecase' [ 1346.769375][T17557] exfat: Bad value for 'namecase' [ 1347.049746][T17543] loop3: detected capacity change from 0 to 40427 [ 1347.185112][T17545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1347.190001][T17543] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 1347.436646][T17543] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1347.455051][T17545] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.3479: iget: bad extended attribute block 6 [ 1347.573041][T17543] F2FS-fs (loop3): invalid crc value [ 1347.633115][T17543] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 1348.476656][T14261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.724177][T17476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.067271][T17476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.090689][T17577] loop7: detected capacity change from 0 to 8192 [ 1350.589861][T17476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.518352][T17476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.141595][ T5926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1352.164275][T17476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1352.238406][T17476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1352.302964][T17476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1352.364415][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 1352.405509][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.619400][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.630638][ T5926] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1352.639701][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.661373][ T5926] usb 4-1: config 0 descriptor?? [ 1352.664951][T17476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1353.575277][T17608] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3493'. [ 1353.653353][T17610] loop9: detected capacity change from 0 to 512 [ 1353.667853][ T5926] koneplus 0003:1E7D:2D51.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 1353.777140][T17610] EXT4-fs error (device loop9): ext4_iget_extra_inode:5030: inode #15: comm syz.9.3494: corrupted in-inode xattr: invalid ea_ino [ 1353.855836][ T5926] koneplus 0003:1E7D:2D51.0018: couldn't init struct koneplus_device [ 1353.865793][T17476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.895458][ T30] audit: type=1326 audit(1753830828.496:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17614 comm="syz.4.3495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bfbd8e9a9 code=0x0 [ 1353.930940][ T5926] koneplus 0003:1E7D:2D51.0018: couldn't install mouse [ 1353.937636][T17476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.945350][T17610] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3494: couldn't read orphan inode 15 (err -117) [ 1353.975073][ T5926] koneplus 0003:1E7D:2D51.0018: probe with driver koneplus failed with error -71 [ 1353.982357][T17610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.018100][ T5926] usb 4-1: USB disconnect, device number 3 [ 1354.037546][T14594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.044739][T14594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.086672][T17610] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1354.096576][T14594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.103731][T14594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.198020][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.840036][T17476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.238309][T17476] veth0_vlan: entered promiscuous mode [ 1357.389843][T17476] veth1_vlan: entered promiscuous mode [ 1357.401052][T14218] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1357.539726][T17476] veth0_macvtap: entered promiscuous mode [ 1357.609498][T17476] veth1_macvtap: entered promiscuous mode [ 1357.629929][T14218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.650956][T14218] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1357.660013][T14218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.678867][T17652] loop9: detected capacity change from 0 to 512 [ 1357.698664][T17652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1357.725181][T17654] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3507'. [ 1357.728906][T17476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.750149][T17652] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1357.754262][T14218] usb 5-1: config 0 descriptor?? [ 1357.797637][T17652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 1357.814272][T17476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.847648][T17652] System zones: 2-12, 7-7 [ 1357.853414][T17656] pim6reg1: entered promiscuous mode [ 1357.908113][T17656] pim6reg1: entered allmulticast mode [ 1357.917130][T17652] EXT4-fs (loop9): 1 truncate cleaned up [ 1357.954125][T17652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.961283][T17476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.990874][T17476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.006298][T17476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.038267][T17476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.256569][T14218] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 1358.321837][T14218] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 1358.354543][T14218] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 1359.197894][T14218] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 1359.250537][T14218] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 1359.293999][T14218] lg-g15 0003:046D:C222.0019: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 1359.370637][T14218] usb 5-1: USB disconnect, device number 68 [ 1359.403936][T14602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.462750][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.490769][T14602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.628252][T14600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.663833][T14600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.697428][T17668] fido_id[17668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1361.212147][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.218785][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.846409][T17682] pim6reg1: entered promiscuous mode [ 1361.897384][T17682] pim6reg1: entered allmulticast mode [ 1363.118542][T11897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1363.131792][T11897] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1363.158325][T11897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1363.169187][T11897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1363.178145][T11897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1363.204875][T17704] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1363.321301][T11897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1363.332134][T11897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1363.340228][T11897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1363.350076][T11897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1363.410242][T11897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1363.600550][T17582] bridge0: port 1(syz_tun) entered disabled state [ 1363.668105][T17582] syz_tun (unregistering): left allmulticast mode [ 1363.702119][T17582] syz_tun (unregistering): left promiscuous mode [ 1363.729199][T17582] bridge0: port 1(syz_tun) entered disabled state [ 1365.879872][T11897] Bluetooth: hci2: command tx timeout [ 1365.879935][ T5151] Bluetooth: hci5: command tx timeout [ 1365.920044][ T6643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.054088][ T6643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1366.189436][T17725] loop9: detected capacity change from 0 to 1024 [ 1366.290036][T17725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.624692][ T6643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.644488][ T6643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1366.904503][ T6643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.947516][ T6643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1367.266427][ T6643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.317564][ T6643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1367.529129][T17751] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3534'. [ 1368.413347][ T5151] Bluetooth: hci5: command tx timeout [ 1368.418809][ T5151] Bluetooth: hci2: command tx timeout [ 1369.866835][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.189675][T17700] chnl_net:caif_netlink_parms(): no params data found [ 1370.250101][T17771] loop7: detected capacity change from 0 to 256 [ 1370.275058][T17771] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1370.501767][T17115] Bluetooth: hci2: command tx timeout [ 1370.507722][T17115] Bluetooth: hci5: command tx timeout [ 1371.295746][T17706] chnl_net:caif_netlink_parms(): no params data found [ 1372.620956][ T5151] Bluetooth: hci5: command tx timeout [ 1372.626603][ T5151] Bluetooth: hci2: command tx timeout [ 1375.222426][ T6643] bond0 (unregistering): Released all slaves [ 1375.854473][T17827] loop9: detected capacity change from 0 to 1024 [ 1375.863721][T17827] EXT4-fs: Ignoring removed nobh option [ 1376.394174][T17827] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1376.496932][T17827] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1376.518102][T17827] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3554: couldn't read orphan inode 11 (err -117) [ 1376.607142][T17827] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.597516][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1377.784604][ T6643] tipc: Left network mode [ 1377.995201][T17700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.023501][T17700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.049996][T17700] bridge_slave_0: entered allmulticast mode [ 1378.070389][T17700] bridge_slave_0: entered promiscuous mode [ 1378.460203][T17700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.478532][T17700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.488839][T17700] bridge_slave_1: entered allmulticast mode [ 1378.507226][T17700] bridge_slave_1: entered promiscuous mode [ 1378.540674][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.571274][T17706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.578543][T17706] bridge_slave_0: entered allmulticast mode [ 1378.622054][T17706] bridge_slave_0: entered promiscuous mode [ 1378.986480][T17706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.231703][T17706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.640093][T17706] bridge_slave_1: entered allmulticast mode [ 1379.648872][T17706] bridge_slave_1: entered promiscuous mode [ 1379.919272][T17700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.974936][T17700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.206443][ T6643] hsr_slave_0: left promiscuous mode [ 1380.777659][T17873] loop7: detected capacity change from 0 to 1024 [ 1380.793893][T17873] EXT4-fs: Ignoring removed nobh option [ 1381.452554][ T6643] hsr_slave_1: left promiscuous mode [ 1381.460911][T17873] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1382.119990][T17873] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.3566: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1382.209876][T17873] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3566: couldn't read orphan inode 11 (err -117) [ 1382.235804][T17873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.821398][ T6643] veth1_macvtap: left promiscuous mode [ 1382.832724][ T6643] veth0_macvtap: left promiscuous mode [ 1382.838409][ T6643] veth1_vlan: left promiscuous mode [ 1382.856907][T14261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.190665][T17700] team0: Port device team_slave_0 added [ 1387.209492][T17706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.244212][T17700] team0: Port device team_slave_1 added [ 1387.258313][T17706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.539274][T17700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.559265][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.612484][T17700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.837235][T17706] team0: Port device team_slave_0 added [ 1388.423774][T17706] team0: Port device team_slave_1 added [ 1388.580700][T17115] Bluetooth: hci1: command 0x0406 tx timeout [ 1388.746260][T17925] loop7: detected capacity change from 0 to 1024 [ 1388.756861][T17925] EXT4-fs: Ignoring removed nobh option [ 1389.025024][T17700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.034289][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.912215][ T6059] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1389.950774][T17700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.151871][ T6059] usb 2-1: Using ep0 maxpacket: 8 [ 1390.158785][ T6059] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.203484][ T6059] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1390.229282][ T6059] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1390.270480][ T6059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.381567][T17925] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1390.413852][T17925] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.3579: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1390.436105][T17925] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3579: couldn't read orphan inode 11 (err -117) [ 1390.455455][T17925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1390.494025][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3580'. [ 1390.543929][ T5945] usb 2-1: USB disconnect, device number 67 [ 1390.604683][T17706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.634911][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.674675][T17706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.787449][T17706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.812695][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.832952][T14261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.839582][T17706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.973916][T17700] hsr_slave_0: entered promiscuous mode [ 1391.012869][T17700] hsr_slave_1: entered promiscuous mode [ 1391.019292][T17700] debugfs: 'hsr0' already exists in 'hsr' [ 1391.101874][T17700] Cannot create hsr debugfs directory [ 1391.563890][T17706] hsr_slave_0: entered promiscuous mode [ 1391.581444][T17706] hsr_slave_1: entered promiscuous mode [ 1391.606433][T17706] debugfs: 'hsr0' already exists in 'hsr' [ 1391.616250][T17706] Cannot create hsr debugfs directory [ 1392.512701][T10511] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.959445][T10511] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.090259][T17974] vlan2: entered promiscuous mode [ 1394.095433][T17974] bridge0: entered promiscuous mode [ 1394.101235][T17974] vlan2: entered allmulticast mode [ 1394.114250][T17974] bridge0: entered allmulticast mode [ 1394.263478][T17985] loop7: detected capacity change from 0 to 128 [ 1394.274082][T17981] bridge_slave_0: left allmulticast mode [ 1394.314673][T17981] bridge_slave_0: left promiscuous mode [ 1395.001049][T17981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.867562][T17981] bridge_slave_1: left allmulticast mode [ 1395.901101][ T5945] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1395.904306][T17981] bridge_slave_1: left promiscuous mode [ 1395.926301][T17981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.001525][T17981] bond0: (slave bond_slave_0): Releasing backup interface [ 1396.069898][T17981] bond0: (slave bond_slave_1): Releasing backup interface [ 1396.074447][T17995] loop7: detected capacity change from 0 to 256 [ 1396.109456][T17981] team0: Port device team_slave_0 removed [ 1396.126539][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 1396.136914][T17981] team0: Port device team_slave_1 removed [ 1396.139272][ T5945] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1396.145267][T17981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.161668][T17981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.168971][ T5945] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.183557][T17981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.191909][ T5945] usb 2-1: config 179 has no interface number 0 [ 1396.200977][ T5945] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1396.213215][ T5945] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1396.213900][T17981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.226926][ T5945] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1396.226958][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.400770][T12177] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1396.684919][T12177] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1396.691280][ T5945] usb 2-1: USB disconnect, device number 68 [ 1396.793199][T12177] usb 4-1: not running at top speed; connect to a high speed hub [ 1396.841892][T12177] usb 4-1: config 4 has an invalid interface number: 156 but max is 0 [ 1396.880523][T12177] usb 4-1: config 4 has no interface number 0 [ 1396.899923][T12177] usb 4-1: config 4 interface 156 has no altsetting 0 [ 1396.913401][T12177] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1396.923495][T12177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.932353][T12177] usb 4-1: Product: syz [ 1396.948125][T10511] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.959477][T12177] usb 4-1: Manufacturer: syz [ 1396.964676][T12177] usb 4-1: SerialNumber: syz [ 1397.136912][T10511] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.243955][T12177] usb 4-1: USB disconnect, device number 4 [ 1397.256779][T18002] loop7: detected capacity change from 0 to 128 [ 1398.924805][T18026] loop7: detected capacity change from 0 to 128 [ 1400.830548][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 1403.255439][T10511] bond0 (unregistering): Released all slaves [ 1403.345996][T18044] vlan3: entered promiscuous mode [ 1403.371777][T18044] bridge0: entered promiscuous mode [ 1403.394539][T18044] vlan3: entered allmulticast mode [ 1403.428282][T18044] bridge0: entered allmulticast mode [ 1403.476296][T18047] bridge_slave_0: left allmulticast mode [ 1403.486128][T18047] bridge_slave_0: left promiscuous mode [ 1403.496176][T18047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.681501][T18047] bridge_slave_1: left allmulticast mode [ 1403.687198][T18047] bridge_slave_1: left promiscuous mode [ 1403.728363][T18047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.853079][T18047] bond0: (slave bond_slave_0): Releasing backup interface [ 1404.200317][T18047] bond0: (slave bond_slave_1): Releasing backup interface [ 1404.321431][T18047] team0: Port device team_slave_0 removed [ 1404.385346][T18047] team0: Port device team_slave_1 removed [ 1404.532117][T18047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.539643][T18047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.573922][T18047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.696913][T18069] loop9: detected capacity change from 0 to 512 [ 1404.720142][T18047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.761290][T18069] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1404.826472][T18069] EXT4-fs (loop9): 1 truncate cleaned up [ 1404.847209][T18069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.357041][T10511] tipc: Disabling bearer [ 1406.687828][T10511] tipc: Left network mode [ 1406.713251][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.942065][T18082] loop9: detected capacity change from 0 to 128 [ 1408.097596][T18100] loop9: detected capacity change from 0 to 1024 [ 1410.756945][T10511] hsr_slave_0: left promiscuous mode [ 1410.779563][T10511] hsr_slave_1: left promiscuous mode [ 1410.817270][T10511] veth1_macvtap: left promiscuous mode [ 1410.833772][T10511] veth0_macvtap: left promiscuous mode [ 1410.846603][T10511] veth1_vlan: left promiscuous mode [ 1411.734104][T18109] loop7: detected capacity change from 0 to 32768 [ 1411.753801][T18109] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3630 (18109) [ 1411.814505][T18109] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1411.850731][T18109] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1411.870967][T18109] BTRFS info (device loop7): using free-space-tree [ 1412.117731][T18109] BTRFS info (device loop7): rebuilding free space tree [ 1412.364819][T18137] loop9: detected capacity change from 0 to 1024 [ 1413.022637][T18139] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3630'. [ 1413.106274][ T5151] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 1413.204977][ T5151] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 1413.497804][T18148] loop9: detected capacity change from 0 to 128 [ 1413.539288][T18148] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1413.559932][T18148] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.619057][T18148] fscrypt: Adiantum using implementation "adiantum(xchacha12-x86_64,aes-aesni,nhpoly1305-avx2)" [ 1413.687820][T18148] fscrypt: loop9: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1413.747914][T17157] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1414.276705][T18161] loop9: detected capacity change from 0 to 128 [ 1414.285827][T18161] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1415.144527][T18161] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1417.224287][ T5151] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1417.235829][ T5151] Bluetooth: hci3: Injecting HCI hardware error event [ 1417.244259][ T5151] Bluetooth: hci3: hardware error 0x00 [ 1417.537842][T18164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3641'. [ 1417.652739][T17700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1417.682000][T14261] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1417.742320][T17700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1417.781010][T17830] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1417.866827][T17700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1417.929616][T17700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1417.944077][T18166] loop9: detected capacity change from 0 to 256 [ 1417.970681][T17830] usb 4-1: Using ep0 maxpacket: 16 [ 1417.984197][T17830] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1418.037028][T17830] usb 4-1: config 0 has no interface number 0 [ 1418.048164][T18166] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1418.102320][T17830] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1418.142761][T18166] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1418.152479][T17830] usb 4-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1418.166582][T17830] usb 4-1: Product: syz [ 1418.173120][T17830] usb 4-1: Manufacturer: syz [ 1418.197478][T18166] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1418.231540][T17830] usb 4-1: SerialNumber: syz [ 1418.238713][T17706] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1418.269381][T17830] usb 4-1: config 0 descriptor?? [ 1418.298932][T17830] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1418.779041][T17706] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1418.893292][T17706] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1418.925754][T17830] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 1418.997114][T17830] usb 4-1: USB disconnect, device number 5 [ 1419.025243][T17706] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1419.066123][T17831] udevd[17831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1419.321548][T11897] Bluetooth: hci0: command 0x0406 tx timeout [ 1419.352407][ T5151] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1420.330889][T17700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.391687][T17700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.522817][T17706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.647793][T17706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.774803][T10511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.782071][T10511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.834479][ T2144] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1420.894615][ T2144] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1420.960309][T10511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.967558][T10511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.345337][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.352435][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.855580][T18221] loop7: detected capacity change from 0 to 256 [ 1428.912062][T18221] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1429.010854][T18221] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1429.112075][T18221] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1430.353132][T18237] loop9: detected capacity change from 0 to 1024 [ 1430.360980][T18237] EXT4-fs: Ignoring removed nobh option [ 1430.425653][T18237] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1430.441530][T17115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1430.452977][T17115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1430.461665][T17115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1430.471750][T17115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1430.479795][T17115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1430.512752][T18237] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3657: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1430.534248][T18237] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3657: couldn't read orphan inode 11 (err -117) [ 1430.548754][T18237] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.261196][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1431.301172][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1431.316880][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1431.325293][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1431.441576][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1432.281639][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.584356][ T5151] Bluetooth: hci2: command tx timeout [ 1432.622575][T18256] loop7: detected capacity change from 0 to 2048 [ 1432.884727][T18258] loop9: detected capacity change from 0 to 128 [ 1432.896056][T18256] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1432.947150][T18256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1433.029675][T18258] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1433.070109][T18258] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1433.175486][T18258] fscrypt: loop9: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1433.392244][T17157] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1434.261183][ T5151] Bluetooth: hci4: command tx timeout [ 1434.742816][ T5151] Bluetooth: hci2: command tx timeout [ 1435.308287][T17660] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1435.453526][T18283] loop9: detected capacity change from 0 to 256 [ 1435.497435][T17660] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1435.507263][T18235] chnl_net:caif_netlink_parms(): no params data found [ 1436.412190][ T5151] Bluetooth: hci4: command tx timeout [ 1436.603687][ T4551] bridge_slave_1: left allmulticast mode [ 1436.629976][ T4551] bridge_slave_1: left promiscuous mode [ 1436.665572][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.757559][ T4551] bridge_slave_0: left allmulticast mode [ 1436.787203][ T4551] bridge_slave_0: left promiscuous mode [ 1436.811465][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.820634][ T5151] Bluetooth: hci2: command tx timeout [ 1437.918424][T18297] loop9: detected capacity change from 0 to 256 [ 1438.212009][T18302] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3674'. [ 1438.420931][ T5151] Bluetooth: hci4: command tx timeout [ 1438.519972][T14488] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1438.667149][T18300] loop7: detected capacity change from 0 to 32768 [ 1438.701090][T14488] usb 10-1: Using ep0 maxpacket: 16 [ 1438.708330][T14488] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1438.721764][T14488] usb 10-1: config 0 has no interface number 0 [ 1438.737669][T14488] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1438.760494][T14488] usb 10-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1438.768698][T14488] usb 10-1: Product: syz [ 1438.788389][T14488] usb 10-1: Manufacturer: syz [ 1438.810994][T14488] usb 10-1: SerialNumber: syz [ 1438.832298][T14488] usb 10-1: config 0 descriptor?? [ 1438.854826][T14488] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1438.911206][ T5151] Bluetooth: hci2: command tx timeout [ 1438.952920][T14488] snd-usb-audio 10-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 1438.994438][ T4551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.027026][ T4551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.052601][T18282] udevd[18282]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1439.081252][T14488] usb 10-1: USB disconnect, device number 3 [ 1439.082371][ T4551] bond0 (unregistering): Released all slaves [ 1439.493585][ T4551] hsr_slave_0: left promiscuous mode [ 1439.518487][ T4551] hsr_slave_1: left promiscuous mode [ 1439.519359][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.528450][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.955683][T18317] loop9: detected capacity change from 0 to 1024 [ 1440.510631][ T5151] Bluetooth: hci4: command tx timeout [ 1441.362537][ T4551] team0 (unregistering): Port device team_slave_1 removed [ 1441.486984][ T4551] team0 (unregistering): Port device team_slave_0 removed [ 1443.378002][T18334] loop7: detected capacity change from 0 to 256 [ 1444.977208][T18349] comedi: valid board names for 8255 driver are: [ 1445.001249][T18349] 8255 [ 1445.004061][T18349] comedi: valid board names for vmk80xx driver are: [ 1445.028278][T18329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1445.055263][T18349] vmk80xx [ 1445.058341][T18349] comedi: valid board names for usbduxsigma driver are: [ 1445.068434][T18349] usbduxsigma [ 1445.088528][T18349] comedi: valid board names for usbduxfast driver are: [ 1445.098988][T18349] usbduxfast [ 1445.107699][T18349] comedi: valid board names for usbdux driver are: [ 1445.112584][ T5151] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 1445.118504][T18349] usbdux [ 1445.127098][ T5151] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 1445.134293][T18349] comedi: valid board names for ni6501 driver are: [ 1445.176691][T18349] ni6501 [ 1445.225138][T18349] comedi: valid board names for dt9812 driver are: [ 1445.268392][T18349] dt9812 [ 1445.293190][T18349] comedi: valid board names for ni_labpc_cs driver are: [ 1445.365450][T18349] ni_labpc_cs [ 1445.405401][T18349] comedi: valid board names for ni_daq_700 driver are: [ 1445.456714][T18349] ni_daq_700 [ 1445.460064][T18349] comedi: valid board names for labpc_pci driver are: [ 1445.512606][T18349] labpc_pci [ 1445.515866][T18349] comedi: valid board names for adl_pci9118 driver are: [ 1445.534985][T18235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.561874][T18356] netlink: 'syz.9.3689': attribute type 1 has an invalid length. [ 1445.584774][T18235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.600144][T18349] pci9118dg [ 1445.610153][T18356] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3689'. [ 1445.619390][T18349] pci9118hg [ 1445.634517][T18349] pci9118hr [ 1445.640120][T18235] bridge_slave_0: entered allmulticast mode [ 1445.656397][T18349] comedi: valid board names for 8255_pci driver are: [ 1445.676721][T18235] bridge_slave_0: entered promiscuous mode [ 1445.718470][T18349] 8255_pci [ 1445.738714][T18349] comedi: valid board names for s526 driver are: [ 1445.771346][T18349] s526 [ 1446.122316][T18349] comedi: valid board names for multiq3 driver are: [ 1446.158686][T18349] multiq3 [ 1446.253754][T18349] comedi: valid board names for pcmuio driver are: [ 1446.260312][T18349] pcmuio48 [ 1446.345925][T18235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.353355][T18349] pcmuio96 [ 1446.368162][T18235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.375661][T18349] comedi: valid board names for pcmmio driver are: [ 1446.391020][T18235] bridge_slave_1: entered allmulticast mode [ 1446.405964][T18349] pcmmio [ 1446.414932][T18349] comedi: valid board names for pcmda12 driver are: [ 1446.423146][T18235] bridge_slave_1: entered promiscuous mode [ 1446.427316][T18349] pcmda12 [ 1446.435599][T18349] comedi: valid board names for pcmad driver are: [ 1446.446069][T18349] pcmad12 [ 1446.449216][T18349] pcmad16 [ 1446.456371][T18349] comedi: valid board names for ni_labpc driver are: [ 1446.467217][T18250] chnl_net:caif_netlink_parms(): no params data found [ 1446.470457][T18349] lab-pc-1200 [ 1446.479468][T18349] lab-pc-1200ai [ 1446.495170][T18349] lab-pc+ [ 1446.498214][T18349] comedi: valid board names for atmio16 driver are: [ 1446.550551][T18349] atmio16 [ 1446.563843][T18349] atmio16d [ 1446.577625][T18349] comedi: valid board names for ni_at_ao driver are: [ 1446.610935][T18349] at-ao-6 [ 1446.623076][T18349] at-ao-10 [ 1446.632148][T18235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.650956][T18349] comedi: valid board names for ni_at_a2150 driver are: [ 1446.658068][T18349] ni_at_a2150 [ 1446.671991][T18349] comedi: valid board names for adq12b driver are: [ 1446.679591][T18349] adq12b [ 1446.686782][T18349] comedi: valid board names for mpc624 driver are: [ 1446.696481][T18349] mpc624 [ 1446.699968][T18349] comedi: valid board names for c6xdigio driver are: [ 1446.720550][T18349] c6xdigio [ 1446.728574][T18349] comedi: valid board names for aio_iiro_16 driver are: [ 1446.887095][T18349] aio_iiro_16 [ 1446.891305][T18349] comedi: valid board names for aio_aio12_8 driver are: [ 1446.898344][T18349] aio_aio12_8 [ 1446.902499][T18349] aio_ai12_8 [ 1446.905795][T18349] aio_ao12_4 [ 1446.909077][T18349] comedi: valid board names for fl512 driver are: [ 1446.927412][T18349] fl512 [ 1446.930397][T18349] comedi: valid board names for dmm32at driver are: [ 1446.937390][T18349] dmm32at [ 1446.940881][T18349] comedi: valid board names for dt282x driver are: [ 1446.947530][T18349] dt2821 [ 1446.952920][T18349] dt2821-f [ 1446.956121][T18349] dt2821-g [ 1446.959398][T18349] dt2823 [ 1446.964864][T18349] dt2824-pgh [ 1446.968220][T18349] dt2824-pgl [ 1446.973442][T18349] dt2825 [ 1446.976458][T18349] dt2827 [ 1447.138767][T18349] dt2828 [ 1447.149532][T18349] dt2829 [ 1447.154175][T18349] dt21-ez [ 1447.157370][T18349] dt23-ez [ 1447.160967][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 1447.172152][T18349] dt24-ez [ 1447.175354][T18349] dt24-ez-pgl [ 1447.178909][T18349] comedi: valid board names for dt2817 driver are: [ 1447.190845][T18349] dt2817 [ 1447.256365][T18349] comedi: valid board names for dt2815 driver are: [ 1447.311462][T18349] dt2815 [ 1447.330984][T18349] comedi: valid board names for dt2814 driver are: [ 1447.365281][T18349] dt2814 [ 1447.383211][T18349] comedi: valid board names for dt2811 driver are: [ 1447.418049][T18349] dt2811-pgh [ 1447.438284][T18349] dt2811-pgl [ 1447.459212][T18349] comedi: valid board names for dt2801 driver are: [ 1447.495347][T18349] dt2801 [ 1447.579742][T18349] comedi: valid board names for das6402 driver are: [ 1447.612701][T18349] das6402-12 [ 1447.616430][T18349] das6402-16 [ 1447.633171][T18349] comedi: valid board names for das1800 driver are: [ 1447.650654][T18349] das-1701st [ 1447.657031][T18349] das-1701st-da [ 1447.666838][T18349] das-1702st [ 1447.670140][T18349] das-1702st-da [ 1447.709076][T18349] das-1702hr [ 1447.720609][T18349] das-1702hr-da [ 1447.724169][T18349] das-1701ao [ 1447.750521][T18349] das-1702ao [ 1447.753833][T18349] das-1801st [ 1447.757115][T18349] das-1801st-da [ 1447.781024][T18366] syzkaller0: entered promiscuous mode [ 1447.810777][T18349] das-1802st [ 1447.821199][T18366] syzkaller0: entered allmulticast mode [ 1447.843940][T18235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.853121][T18349] das-1802st-da [ 1447.856683][T18349] das-1802hr [ 1447.859988][T18349] das-1802hr-da [ 1447.886467][T18349] das-1801hc [ 1447.891994][T18349] das-1802hc [ 1447.895452][T18349] das-1801ao [ 1447.909013][T18349] das-1802ao [ 1447.915008][T18349] comedi: valid board names for das800 driver are: [ 1447.926245][T18349] das-800 [ 1447.929281][T18349] cio-das800 [ 1447.933186][T18349] das-801 [ 1447.938527][T18349] cio-das801 [ 1447.946014][T18349] das-802 [ 1447.949132][T18349] cio-das802 [ 1447.957333][T18349] cio-das802/16 [ 1447.961815][T18349] comedi: valid board names for isa-das08 driver are: [ 1447.968704][T18349] isa-das08 [ 1447.972015][T18349] das08-pgm [ 1447.975382][T18349] das08-pgh [ 1447.978590][T18349] das08-pgl [ 1447.982126][T18349] das08-aoh [ 1447.985342][T18349] das08-aol [ 1447.988551][T18349] das08-aom [ 1447.991815][T18349] das08/jr-ao [ 1447.993363][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.995338][T18349] das08jr-16-ao [ 1448.005139][T18349] pc104-das08 [ 1448.008650][T18349] das08jr/16 [ 1448.012546][T18349] comedi: valid board names for das16m1 driver are: [ 1448.019400][T18349] das16m1 [ 1448.022590][T18349] comedi: valid board names for dac02 driver are: [ 1448.033985][T18349] dac02 [ 1448.036867][T18349] comedi: valid board names for rti802 driver are: [ 1448.069855][T18349] rti802 [ 1448.089227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.098768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.125585][T18349] comedi: valid board names for rti800 driver are: [ 1448.170595][T18349] rti800 [ 1448.173611][T18349] rti815 [ 1448.176589][T18349] comedi: valid board names for pcm3724 driver are: [ 1448.187708][T18235] team0: Port device team_slave_0 added [ 1448.210795][T18349] pcm3724 [ 1448.213893][T18349] comedi: valid board names for pcl818 driver are: [ 1448.251766][T18349] pcl818l [ 1448.254863][T18349] pcl818h [ 1448.257893][T18349] pcl818hd [ 1448.283407][T18385] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3695'. [ 1448.307534][T18349] pcl818hg [ 1448.311158][T18349] pcl818 [ 1448.314372][T18349] pcl718 [ 1448.317343][T18349] pcm3718 [ 1448.320376][T18349] comedi: valid board names for pcl816 driver are: [ 1448.347121][T18349] pcl816 [ 1448.350136][T18349] pcl814b [ 1448.366404][T18349] comedi: valid board names for pcl812 driver are: [ 1448.374611][T18349] pcl812 [ 1448.377563][T18349] pcl812pg [ 1448.402425][T18235] team0: Port device team_slave_1 added [ 1448.441611][T18349] acl8112pg [ 1448.445579][T18349] acl8112dg [ 1448.449181][T18349] acl8112hg [ 1448.465887][T18349] a821pgl [ 1448.469054][T18349] a821pglnda [ 1448.501801][T18349] a821pgh [ 1448.504941][T18349] a822pgl [ 1448.508006][T18349] a822pgh [ 1448.525520][T18349] a823pgl [ 1448.531059][T18349] a823pgh [ 1448.537927][T18349] pcl813 [ 1448.544416][T18349] pcl813b [ 1448.553595][T18349] acl8113 [ 1448.560374][T18349] iso813 [ 1448.566947][T18349] acl8216 [ 1448.574159][T14218] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1448.589176][T18349] a826pg [ 1448.603203][T18349] comedi: valid board names for pcl730 driver are: [ 1448.610562][T18349] pcl730 [ 1448.620842][T18349] iso730 [ 1448.625913][T18349] acl7130 [ 1448.630649][T18349] pcm3730 [ 1448.633735][T18349] pcl725 [ 1448.649266][T18349] p8r8dio [ 1448.657430][T18349] acl7225b [ 1448.676538][T18349] p16r16dio [ 1448.693274][T18349] pcl733 [ 1448.696321][T18349] pcl734 [ 1448.699303][T18349] opmm-1616-xt [ 1448.710572][T18349] pearl-mm-p [ 1448.724482][T18349] ir104-pbf [ 1448.738362][T18349] comedi: valid board names for pcl726 driver are: [ 1448.746647][T14218] usb 10-1: Using ep0 maxpacket: 16 [ 1448.779335][T14218] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1448.807741][T18349] pcl726 [ 1448.830856][T18349] pcl727 [ 1448.833863][T18349] pcl728 [ 1448.836806][T18349] acl6126 [ 1448.839835][T18349] acl6128 [ 1448.843109][T18349] comedi: valid board names for pcl724 driver are: [ 1448.849628][T18349] pcl724 [ 1448.852639][T18349] pcl722 [ 1448.855591][T18349] pcl731 [ 1448.860017][T18349] acl7122 [ 1448.860499][T14218] usb 10-1: config 0 has no interface number 0 [ 1448.863641][T18349] acl7124 [ 1448.872260][T18349] pet48dio [ 1448.875383][T18349] pcmio48 [ 1448.878415][T18349] onyx-mm-dio [ 1448.881994][T18349] comedi: valid board names for pcl711 driver are: [ 1448.890836][T18349] pcl711 [ 1448.893790][T18349] pcl711b [ 1448.896817][T18349] acl8112hg [ 1448.900017][T18349] acl8112dg [ 1448.903545][T18349] comedi: valid board names for amplc_pc263 driver are: [ 1448.910576][T18349] pc263 [ 1448.913440][T18349] comedi: valid board names for amplc_pc236 driver are: [ 1448.920386][T18349] pc36at [ 1448.923959][T18349] comedi: valid board names for amplc_dio200 driver are: [ 1448.925756][T14218] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1448.931048][T18349] pc212e [ 1448.931063][T18349] pc214e [ 1448.931073][T18349] pc215e [ 1448.931084][T18349] pc218e [ 1448.931093][T18349] pc272e [ 1448.931104][T18349] comedi: valid board names for comedi_parport driver are: [ 1448.931118][T18349] comedi_parport [ 1448.931129][T18349] comedi: valid board names for comedi_test driver are: [ 1448.931143][T18349] comedi_test [ 1448.931154][T18349] comedi: valid board names for comedi_bond driver are: [ 1448.931168][T18349] comedi_bond [ 1449.013637][T18250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.030612][T18250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.068468][T18250] bridge_slave_0: entered allmulticast mode [ 1449.095759][T14218] usb 10-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1449.105246][T18250] bridge_slave_0: entered promiscuous mode [ 1449.106741][T14218] usb 10-1: Product: syz [ 1449.116543][T14218] usb 10-1: Manufacturer: syz [ 1449.130263][T14218] usb 10-1: SerialNumber: syz [ 1449.144247][ T5151] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1449.145748][T14218] usb 10-1: config 0 descriptor?? [ 1449.153133][ T5151] Bluetooth: hci1: Injecting HCI hardware error event [ 1449.156219][ T5151] Bluetooth: hci1: hardware error 0x00 [ 1449.228775][T14218] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1449.256938][T18235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.285770][T18235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.376962][T14218] snd-usb-audio 10-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 1449.378032][T18377] loop7: detected capacity change from 0 to 32768 [ 1449.400911][T18235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.441374][T14218] usb 10-1: USB disconnect, device number 4 [ 1449.449946][T18235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.457760][T18235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.701575][T18235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.068402][T18250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.076532][T18250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.091794][T18250] bridge_slave_1: entered allmulticast mode [ 1450.101536][T18250] bridge_slave_1: entered promiscuous mode [ 1450.106310][T18241] udevd[18241]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1450.266537][T18250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.317824][T18250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.250742][ T5151] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1451.317879][T18414] loop7: detected capacity change from 0 to 1024 [ 1451.539469][T18413] hfsplus: can't free extent [ 1451.681520][T14602] hfsplus: b-tree write err: -5, ino 4 [ 1452.156452][T18250] team0: Port device team_slave_0 added [ 1452.173471][T18235] hsr_slave_0: entered promiscuous mode [ 1452.204392][T18235] hsr_slave_1: entered promiscuous mode [ 1452.213905][T18235] debugfs: 'hsr0' already exists in 'hsr' [ 1452.219647][T18235] Cannot create hsr debugfs directory [ 1452.247493][T18250] team0: Port device team_slave_1 added [ 1452.505967][T18250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.530745][T18250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.556711][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.583538][T18250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.617412][T18250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.638437][T18250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.664351][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.674664][T18250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.717340][T18418] syzkaller0: entered promiscuous mode [ 1452.723031][T18418] syzkaller0: entered allmulticast mode [ 1453.732002][T18250] hsr_slave_0: entered promiscuous mode [ 1453.739306][T18250] hsr_slave_1: entered promiscuous mode [ 1453.748818][T18250] debugfs: 'hsr0' already exists in 'hsr' [ 1453.755236][T18250] Cannot create hsr debugfs directory [ 1453.802124][ T6059] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1454.000753][ T6059] usb 10-1: Using ep0 maxpacket: 16 [ 1454.019037][ T6059] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 1454.041391][ T6059] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33668, setting to 1024 [ 1454.063305][ T6059] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1454.076878][ T2211] bridge_slave_1: left allmulticast mode [ 1454.084193][ T6059] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.091831][ T2211] bridge_slave_1: left promiscuous mode [ 1454.099932][ T2211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.115516][ T6059] usb 10-1: config 0 descriptor?? [ 1454.136576][ T2211] bridge_slave_0: left allmulticast mode [ 1454.138095][ T6059] usb 10-1: Found UVC 0.00 device (10c4:ea90) [ 1454.161921][ T2211] bridge_slave_0: left promiscuous mode [ 1454.167752][ T2211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.169984][ T6059] usb 10-1: No valid video chain found. [ 1454.594734][ T6059] usb 10-1: USB disconnect, device number 5 [ 1455.428762][T18441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1456.611138][ T6059] kernel write not supported for file bpf-prog (pid: 6059 comm: kworker/0:8) [ 1456.654065][ T2211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.678750][ T2211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.704938][ T2211] bond0 (unregistering): Released all slaves [ 1457.074802][T18454] loop9: detected capacity change from 0 to 1024 [ 1457.082452][T18454] EXT4-fs: Ignoring removed nobh option [ 1457.099702][T18454] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1457.156802][T18454] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3716: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1457.178854][T18454] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3716: couldn't read orphan inode 11 (err -117) [ 1457.193060][T18454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.503279][T18459] loop7: detected capacity change from 0 to 128 [ 1459.402306][T18456] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 1459.673557][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.045808][T18472] loop9: detected capacity change from 0 to 8192 [ 1460.109540][T18472] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1460.514504][ T2211] hsr_slave_0: left promiscuous mode [ 1460.603937][ T2211] hsr_slave_1: left promiscuous mode [ 1460.625408][ T2211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.661805][ T2211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.991610][ T5151] Bluetooth: hci6: command 0x0406 tx timeout [ 1461.177531][T18487] loop7: detected capacity change from 0 to 1024 [ 1461.585968][ T2211] team0 (unregistering): Port device team_slave_1 removed [ 1461.798574][ T2211] team0 (unregistering): Port device team_slave_0 removed [ 1462.702671][T18493] loop9: detected capacity change from 0 to 256 [ 1462.736178][T18493] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1462.992143][T18468] syzkaller0: entered promiscuous mode [ 1462.998696][T18468] syzkaller0: entered allmulticast mode [ 1463.411599][ T6059] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1463.451009][ T6059] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1463.572693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1463.746765][T18235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1463.927514][T18235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1463.975098][T18235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1464.678565][T18235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1468.263206][T18526] loop9: detected capacity change from 0 to 128 [ 1469.093234][T18235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.356934][T18250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1470.435636][T18250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1470.576789][T18250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1470.646541][T18235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.923157][T18250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1470.939565][ T4551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.946827][ T4551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.581881][T18550] tty tty34: ldisc open failed (-12), clearing slot 33 [ 1471.622783][ T4551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.629975][ T4551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.197917][T18555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1472.201105][T18548] vlan0: entered promiscuous mode [ 1472.918874][T18567] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3739'. [ 1473.052627][T18250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.122049][T18250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.169232][ T2211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.176494][ T2211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.229042][ T2211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.236225][ T2211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.327473][T18555] loop9: detected capacity change from 0 to 32768 [ 1473.626051][T18235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1476.040190][T18250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1476.284472][T18235] veth0_vlan: entered promiscuous mode [ 1476.318646][T18597] loop7: detected capacity change from 0 to 128 [ 1476.338907][T18235] veth1_vlan: entered promiscuous mode [ 1476.600520][ T5945] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1476.657190][T18235] veth0_macvtap: entered promiscuous mode [ 1476.735223][T18235] veth1_macvtap: entered promiscuous mode [ 1476.826478][T18235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.864727][ T5945] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1476.890292][T18235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.904937][ T5945] usb 2-1: not running at top speed; connect to a high speed hub [ 1476.935709][T18235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.939088][ T5945] usb 2-1: config 4 has an invalid interface number: 156 but max is 0 [ 1476.981147][T18235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.992031][ T5945] usb 2-1: config 4 has no interface number 0 [ 1477.010592][ T5945] usb 2-1: config 4 interface 156 has no altsetting 0 [ 1477.010643][T18235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.065158][T18235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.252570][ T5945] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1477.261832][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.269992][ T5945] usb 2-1: Product: syz [ 1477.274233][ T5945] usb 2-1: Manufacturer: syz [ 1477.278839][ T5945] usb 2-1: SerialNumber: syz [ 1478.110769][ T5945] usb 2-1: USB disconnect, device number 69 [ 1478.541644][T18232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.565551][T18232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.673003][T18250] veth0_vlan: entered promiscuous mode [ 1478.717702][T18232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.730010][T18232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.817724][T18250] veth1_vlan: entered promiscuous mode [ 1478.934365][T18630] loop7: detected capacity change from 0 to 16 [ 1478.955526][T18250] veth0_macvtap: entered promiscuous mode [ 1478.994250][T18630] erofs (device loop7): mounted with root inode @ nid 36. [ 1478.998581][T18250] veth1_macvtap: entered promiscuous mode [ 1479.019528][T18631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3747'. [ 1479.333574][T18639] input: syz1 as /devices/virtual/input/input38 [ 1479.336429][T18250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.994053][T18250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.148763][T18250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.220595][T18644] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3755'. [ 1480.232116][T18250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.275135][T18250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.297783][T18250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.521384][T14218] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1480.674260][T14594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.701314][T14594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.741501][T14218] usb 10-1: Using ep0 maxpacket: 16 [ 1480.748782][T14218] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1480.757546][T14218] usb 10-1: config 0 has no interface number 0 [ 1480.797781][T14218] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1480.822097][T14218] usb 10-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1480.830287][T14218] usb 10-1: Product: syz [ 1480.875499][T14218] usb 10-1: Manufacturer: syz [ 1480.890499][T14218] usb 10-1: SerialNumber: syz [ 1480.918431][T14218] usb 10-1: config 0 descriptor?? [ 1480.962539][T14218] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1480.991773][T18658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.019187][T18659] loop7: detected capacity change from 0 to 128 [ 1481.103644][T14218] snd-usb-audio 10-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 1481.206131][T14218] usb 10-1: USB disconnect, device number 6 [ 1481.775939][T18241] udevd[18241]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.294177][T11897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1482.303634][T11897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1482.340792][T11897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1482.362000][T11897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1482.377842][T11897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1483.310265][T14602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.504585][T18684] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3768'. [ 1483.528689][T14602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.669781][T18686] vlan3: entered allmulticast mode [ 1483.771732][T18686] bridge1: port 1(vlan3) entered blocking state [ 1483.785619][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.825264][T18686] bridge1: port 1(vlan3) entered disabled state [ 1483.866053][T18686] vlan3: entered promiscuous mode [ 1484.005122][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.422947][ T5151] Bluetooth: hci5: command tx timeout [ 1484.894424][T14602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.909913][T18698] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3772'. [ 1485.161213][T14218] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1485.309525][T18702] loop7: detected capacity change from 0 to 32768 [ 1485.324155][T18702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3774 (18702) [ 1485.358133][T18702] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1485.368504][T18702] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1485.377537][T18702] BTRFS info (device loop7): using free-space-tree [ 1485.394203][T14218] usb 10-1: Using ep0 maxpacket: 16 [ 1485.405230][T14218] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1485.618913][T14218] usb 10-1: config 0 has no interface number 0 [ 1485.643632][T14218] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1485.653579][T14602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.665373][T14218] usb 10-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1485.702037][T14218] usb 10-1: Product: syz [ 1486.192621][T14218] usb 10-1: Manufacturer: syz [ 1486.220217][T14218] usb 10-1: SerialNumber: syz [ 1486.440021][T14218] usb 10-1: config 0 descriptor?? [ 1486.497558][T14218] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.505054][ T5151] Bluetooth: hci5: command tx timeout [ 1486.638308][T14218] snd-usb-audio 10-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 1486.679987][T18666] chnl_net:caif_netlink_parms(): no params data found [ 1486.731509][T14218] usb 10-1: USB disconnect, device number 7 [ 1486.937070][T18282] udevd[18282]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1487.813976][T18741] loop9: detected capacity change from 0 to 256 [ 1488.506208][T18666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.558341][T18666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.586762][ T5151] Bluetooth: hci5: command tx timeout [ 1488.598554][T18666] bridge_slave_0: entered allmulticast mode [ 1488.612611][T18666] bridge_slave_0: entered promiscuous mode [ 1488.639020][T18666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.649028][T18666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.669362][T18666] bridge_slave_1: entered allmulticast mode [ 1488.677730][T18666] bridge_slave_1: entered promiscuous mode [ 1489.036203][T18666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.211913][T14602] bridge_slave_1: left allmulticast mode [ 1490.217619][T14602] bridge_slave_1: left promiscuous mode [ 1490.257108][T18770] loop9: detected capacity change from 0 to 128 [ 1490.270812][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.356594][T14602] bridge_slave_0: left allmulticast mode [ 1490.361968][T18770] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1490.400032][T14602] bridge_slave_0: left promiscuous mode [ 1490.450668][T14602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.462167][T18770] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.585365][T18770] fscrypt: loop9: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1490.665491][ T5151] Bluetooth: hci5: command tx timeout [ 1491.491870][T17157] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1492.825344][T18799] loop9: detected capacity change from 0 to 2048 [ 1493.135036][T18799] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 1493.321715][T18799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1494.933081][T18844] loop9: detected capacity change from 0 to 64 [ 1495.004888][T11897] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 1495.049662][T14602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.115007][T14602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.126900][T14602] bond0 (unregistering): Released all slaves [ 1495.160240][T18666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.367859][T18814] tipc: Enabling of bearer rejected, failed to enable media [ 1496.906594][T18666] team0: Port device team_slave_0 added [ 1496.945441][T18666] team0: Port device team_slave_1 added [ 1497.541940][T18666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.620500][T18666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.646492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1497.784481][T18666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.841584][T18871] netlink: 'syz.3.3821': attribute type 1 has an invalid length. [ 1497.852762][T14602] hsr_slave_0: left promiscuous mode [ 1497.859639][T14602] hsr_slave_1: left promiscuous mode [ 1497.889739][T14602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.949763][T14602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.984845][T14602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.028042][T14602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.172033][T14602] veth1_macvtap: left promiscuous mode [ 1498.193722][T14602] veth0_macvtap: left promiscuous mode [ 1498.221885][T14602] veth1_vlan: left promiscuous mode [ 1498.243971][T14602] veth0_vlan: left promiscuous mode [ 1499.060556][T11897] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1499.069301][T11897] Bluetooth: hci0: Injecting HCI hardware error event [ 1499.078522][ T5151] Bluetooth: hci0: hardware error 0x00 [ 1500.082804][T18891] loop5: detected capacity change from 0 to 2048 [ 1500.177245][T18891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1500.234816][T18897] loop9: detected capacity change from 0 to 512 [ 1500.328950][T18897] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1500.381658][T18897] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.397833][T18235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.861914][T18906] loop5: detected capacity change from 0 to 2048 [ 1500.870690][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.913203][T18906] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1500.944980][T18906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1501.223631][ T5151] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1501.375015][T14602] team0 (unregistering): Port device team_slave_1 removed [ 1501.712426][ T5926] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1501.748623][T14602] team0 (unregistering): Port device team_slave_0 removed [ 1501.917874][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 1501.929660][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 1501.975742][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33668, setting to 1024 [ 1502.034720][ T5926] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1502.068058][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.112440][ T5926] usb 6-1: config 0 descriptor?? [ 1502.141016][ T5926] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1502.170696][ T5926] usb 6-1: No valid video chain found. [ 1502.513753][T17660] usb 6-1: USB disconnect, device number 52 [ 1503.064975][ T5151] Bluetooth: hci2: command tx timeout [ 1503.503845][T18666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.526318][T18666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.632540][T18666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.656167][T18871] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1503.694937][T18915] vlan0: entered promiscuous mode [ 1504.084897][T18666] hsr_slave_0: entered promiscuous mode [ 1504.107893][T18924] loop5: detected capacity change from 0 to 32768 [ 1504.116816][T18666] hsr_slave_1: entered promiscuous mode [ 1504.140514][T18666] debugfs: 'hsr0' already exists in 'hsr' [ 1504.165887][T18924] BTRFS info: device /dev/loop5 (7:5) using temp-fsid e2e95033-05be-425a-a19c-7b9759274cef [ 1504.177363][T18666] Cannot create hsr debugfs directory [ 1504.189057][T18936] netlink: 892 bytes leftover after parsing attributes in process `syz.3.3841'. [ 1504.253700][T18924] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3837 (18924) [ 1504.350839][T14488] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1504.372615][T18924] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1504.416465][T18924] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 1504.435835][T18924] BTRFS info (device loop5): using free-space-tree [ 1504.561507][T14488] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1504.588601][T14488] usb 2-1: not running at top speed; connect to a high speed hub [ 1504.623589][T14488] usb 2-1: config 4 has an invalid interface number: 156 but max is 0 [ 1504.632274][T14488] usb 2-1: config 4 has no interface number 0 [ 1504.638371][T14488] usb 2-1: config 4 interface 156 has no altsetting 0 [ 1504.743488][T14488] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1504.788923][T14488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.811232][T18924] BTRFS info (device loop5): rebuilding free space tree [ 1504.836172][T14488] usb 2-1: Product: syz [ 1504.860799][T14488] usb 2-1: Manufacturer: syz [ 1504.867565][T14488] usb 2-1: SerialNumber: syz [ 1505.050309][T18924] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3837'. [ 1505.106602][ T5151] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1505.190311][T18966] loop9: detected capacity change from 0 to 1024 [ 1505.284501][T18966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1505.387752][T18235] BTRFS info (device loop5): last unmount of filesystem e2e95033-05be-425a-a19c-7b9759274cef [ 1506.125105][T18985] netlink: 'syz.3.3851': attribute type 1 has an invalid length. [ 1506.191632][T17830] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1506.334028][T18985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1506.380846][T17830] usb 6-1: Using ep0 maxpacket: 16 [ 1506.390281][T17830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 1506.414444][T18987] bond1: (slave gretap1): making interface the new active one [ 1506.425972][T17830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33668, setting to 1024 [ 1506.433318][T18987] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1506.456268][T17830] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1506.495984][T18666] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1506.519067][T17830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.551644][T17830] usb 6-1: config 0 descriptor?? [ 1506.576597][T18666] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1506.595382][T17830] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1506.612705][T17830] usb 6-1: No valid video chain found. [ 1506.627800][T18666] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1506.679981][T18666] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1507.094745][T14488] usb 2-1: USB disconnect, device number 70 [ 1507.136685][T18666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.182443][T17830] usb 6-1: USB disconnect, device number 53 [ 1507.238378][T18666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.275068][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.282278][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.364335][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.371553][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.220674][ T5151] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1509.230770][ T5151] Bluetooth: hci2: Injecting HCI hardware error event [ 1509.239470][T17115] Bluetooth: hci2: hardware error 0x00 [ 1510.254908][T19030] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1510.291532][T19030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1511.551929][T17157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.260467][T17115] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1512.452769][T18666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.756837][T19072] loop5: detected capacity change from 0 to 256 [ 1514.804729][T19072] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1514.834292][T19072] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1514.886601][T19072] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1515.740728][ T6059] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1515.774098][T18666] veth0_vlan: entered promiscuous mode [ 1515.832733][T18666] veth1_vlan: entered promiscuous mode [ 1515.920620][ T6059] usb 10-1: Using ep0 maxpacket: 8 [ 1515.944502][ T6059] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1515.958668][ T6059] usb 10-1: config 179 has no interface number 0 [ 1515.970133][ T6059] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1516.006817][ T6059] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1516.043071][T18666] veth0_macvtap: entered promiscuous mode [ 1516.060810][ T6059] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1516.106994][T18666] veth1_macvtap: entered promiscuous mode [ 1516.123956][ T6059] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1516.190114][ T6059] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1516.208305][T18666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1516.263217][ T6059] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1516.311025][ T6059] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.333048][T18666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1516.334037][T19081] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1516.395222][T18666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.434705][T18666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.507272][T18666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.507322][T18666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.966049][ T5926] usb 10-1: USB disconnect, device number 8 [ 1516.966055][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1516.966196][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1516.989782][ C0] ================================================================== [ 1516.997863][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 1517.005701][ C0] Read of size 4 at addr ffff8880505bf05c by task syz.5.3880/19091 [ 1517.013613][ C0] [ 1517.015949][ C0] CPU: 0 UID: 0 PID: 19091 Comm: syz.5.3880 Not tainted 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(full) [ 1517.015981][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1517.015998][ C0] Call Trace: [ 1517.016009][ C0] [ 1517.016019][ C0] dump_stack_lvl+0x189/0x250 [ 1517.016052][ C0] ? __kasan_check_byte+0x12/0x40 [ 1517.016087][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1517.016114][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016144][ C0] ? lock_release+0x4b/0x3e0 [ 1517.016185][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016214][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 1517.016248][ C0] print_report+0xca/0x240 [ 1517.016286][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1517.016315][ C0] kasan_report+0x118/0x150 [ 1517.016350][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1517.016386][ C0] do_raw_spin_lock+0x23d/0x290 [ 1517.016416][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016447][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1517.016479][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016519][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1517.016549][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1517.016575][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016607][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1517.016643][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 1517.016682][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1517.016722][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016756][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1517.016796][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016827][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016856][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1517.016895][ C0] dummy_timer+0x862/0x4550 [ 1517.016941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.016977][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.017010][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1517.017055][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.017088][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1517.017128][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1517.017165][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1517.017202][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 1517.017227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.017269][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1517.017292][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.017322][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1517.017367][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1517.017396][ C0] handle_softirqs+0x286/0x870 [ 1517.017423][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1517.017451][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1517.017500][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.017533][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1517.017556][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1517.017583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.017614][ C0] irq_exit_rcu+0x9/0x30 [ 1517.017635][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1517.017666][ C0] [ 1517.017675][ C0] [ 1517.017685][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1517.017713][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1517.017748][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b 39 fc 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1517.017771][ C0] RSP: 0018:ffffc900038dfb68 EFLAGS: 00000206 [ 1517.017794][ C0] RAX: 1b69dfab6cdecd00 RBX: 0000000000000000 RCX: 1b69dfab6cdecd00 [ 1517.017812][ C0] RDX: 0000000000000000 RSI: ffffffff8db5f1fd RDI: ffffffff8be2f980 [ 1517.017830][ C0] RBP: ffffffff8209e6e0 R08: 0000000000000000 R09: ffffffff8209e6e0 [ 1517.017848][ C0] R10: dffffc0000000000 R11: fffff5200071becd R12: 0000000000000001 [ 1517.017867][ C0] R13: ffff888033d43de0 R14: 0000000000000001 R15: 0000000000000246 [ 1517.017888][ C0] ? __might_fault+0xb0/0x130 [ 1517.017918][ C0] ? __might_fault+0xb0/0x130 [ 1517.017961][ C0] ? __might_fault+0xb0/0x130 [ 1517.017989][ C0] __might_fault+0xcc/0x130 [ 1517.018016][ C0] ? __might_fault+0xb0/0x130 [ 1517.018046][ C0] do_recvmmsg+0x330/0x770 [ 1517.018082][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1517.018120][ C0] ? __pfx_do_futex+0x10/0x10 [ 1517.018159][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 1517.018191][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1517.018218][ C0] ? rcu_is_watching+0x15/0xb0 [ 1517.018247][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1517.018282][ C0] do_syscall_64+0xfa/0x3b0 [ 1517.018313][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1517.018343][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.018367][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.018395][ C0] ? exc_page_fault+0x9f/0xf0 [ 1517.018427][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.018452][ C0] RIP: 0033:0x7f0d34f8e9a9 [ 1517.018474][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1517.018504][ C0] RSP: 002b:00007f0d35e46038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1517.018529][ C0] RAX: ffffffffffffffda RBX: 00007f0d351b6080 RCX: 00007f0d34f8e9a9 [ 1517.018548][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1517.018566][ C0] RBP: 00007f0d35010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1517.018583][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1517.018599][ C0] R13: 0000000000000000 R14: 00007f0d351b6080 R15: 00007ffe32559778 [ 1517.018629][ C0] [ 1517.018638][ C0] [ 1517.071619][T17115] Bluetooth: hci6: command 0x0406 tx timeout [ 1517.077115][ C0] Allocated by task 6059: [ 1517.077130][ C0] kasan_save_track+0x3e/0x80 [ 1517.077163][ C0] __kasan_kmalloc+0x93/0xb0 [ 1517.077191][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 1517.575669][ C0] xpad_probe+0x428/0x1fc0 [ 1517.580092][ C0] usb_probe_interface+0x637/0xbf0 [ 1517.585209][ C0] really_probe+0x26d/0x9e0 [ 1517.589709][ C0] __driver_probe_device+0x18c/0x2f0 [ 1517.595018][ C0] driver_probe_device+0x4f/0x430 [ 1517.600063][ C0] __device_attach_driver+0x2ce/0x530 [ 1517.605437][ C0] bus_for_each_drv+0x251/0x2e0 [ 1517.610290][ C0] __device_attach+0x2b8/0x400 [ 1517.615051][ C0] bus_probe_device+0x185/0x260 [ 1517.619900][ C0] device_add+0x7b6/0xb50 [ 1517.624243][ C0] usb_set_configuration+0x1a87/0x20e0 [ 1517.629707][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1517.635170][ C0] usb_probe_device+0x1c4/0x390 [ 1517.640024][ C0] really_probe+0x26d/0x9e0 [ 1517.644521][ C0] __driver_probe_device+0x18c/0x2f0 [ 1517.649798][ C0] driver_probe_device+0x4f/0x430 [ 1517.654814][ C0] __device_attach_driver+0x2ce/0x530 [ 1517.660178][ C0] bus_for_each_drv+0x251/0x2e0 [ 1517.665027][ C0] __device_attach+0x2b8/0x400 [ 1517.669806][ C0] bus_probe_device+0x185/0x260 [ 1517.674682][ C0] device_add+0x7b6/0xb50 [ 1517.679022][ C0] usb_new_device+0xa39/0x16f0 [ 1517.683793][ C0] hub_event+0x2958/0x4a20 [ 1517.688216][ C0] process_scheduled_works+0xae1/0x17b0 [ 1517.693775][ C0] worker_thread+0x8a0/0xda0 [ 1517.698358][ C0] kthread+0x711/0x8a0 [ 1517.702423][ C0] ret_from_fork+0x3fc/0x770 [ 1517.707005][ C0] ret_from_fork_asm+0x1a/0x30 [ 1517.711769][ C0] [ 1517.714081][ C0] Freed by task 5926: [ 1517.718049][ C0] kasan_save_track+0x3e/0x80 [ 1517.722726][ C0] kasan_save_free_info+0x46/0x50 [ 1517.727765][ C0] __kasan_slab_free+0x62/0x70 [ 1517.732524][ C0] kfree+0x18e/0x440 [ 1517.736414][ C0] xpad_disconnect+0x350/0x480 [ 1517.741176][ C0] usb_unbind_interface+0x26e/0x910 [ 1517.746375][ C0] device_release_driver_internal+0x4d9/0x800 [ 1517.752437][ C0] bus_remove_device+0x34d/0x410 [ 1517.757374][ C0] device_del+0x511/0x8e0 [ 1517.761706][ C0] usb_disable_device+0x3e9/0x8a0 [ 1517.766735][ C0] usb_disconnect+0x330/0x950 [ 1517.771413][ C0] hub_event+0x1cf5/0x4a20 [ 1517.775830][ C0] process_scheduled_works+0xae1/0x17b0 [ 1517.781386][ C0] worker_thread+0x8a0/0xda0 [ 1517.785969][ C0] kthread+0x711/0x8a0 [ 1517.790035][ C0] ret_from_fork+0x3fc/0x770 [ 1517.794620][ C0] ret_from_fork_asm+0x1a/0x30 [ 1517.799387][ C0] [ 1517.801701][ C0] The buggy address belongs to the object at ffff8880505bf000 [ 1517.801701][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 1517.815754][ C0] The buggy address is located 92 bytes inside of [ 1517.815754][ C0] freed 1024-byte region [ffff8880505bf000, ffff8880505bf400) [ 1517.829546][ C0] [ 1517.831863][ C0] The buggy address belongs to the physical page: [ 1517.838259][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x505b8 [ 1517.847008][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1517.855499][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1517.863034][ C0] page_type: f5(slab) [ 1517.867010][ C0] raw: 00fff00000000040 ffff88801a441dc0 ffffea0001dc9800 dead000000000002 [ 1517.875591][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1517.884173][ C0] head: 00fff00000000040 ffff88801a441dc0 ffffea0001dc9800 dead000000000002 [ 1517.892837][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1517.901501][ C0] head: 00fff00000000003 ffffea0001416e01 00000000ffffffff 00000000ffffffff [ 1517.910166][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1517.918834][ C0] page dumped because: kasan: bad access detected [ 1517.925241][ C0] page_owner tracks the page as allocated [ 1517.930944][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5837, tgid 5837 (syz-executor), ts 96064028293, free_ts 96026202897 [ 1517.950228][ C0] post_alloc_hook+0x240/0x2a0 [ 1517.955005][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 1517.960600][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1517.966415][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1517.971270][ C0] allocate_slab+0x8a/0x3b0 [ 1517.975780][ C0] ___slab_alloc+0xbfc/0x1480 [ 1517.980465][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 1517.985846][ C0] batadv_hard_if_event+0x11b7/0x1a50 [ 1517.991227][ C0] notifier_call_chain+0x1b6/0x3e0 [ 1517.996335][ C0] register_netdevice+0x1608/0x1ae0 [ 1518.001534][ C0] nsim_create+0xb19/0xef0 [ 1518.005950][ C0] __nsim_dev_port_add+0x70a/0xb20 [ 1518.011066][ C0] nsim_dev_port_add_all+0x35/0xe0 [ 1518.016189][ C0] nsim_drv_probe+0x883/0xb70 [ 1518.020872][ C0] really_probe+0x26d/0x9e0 [ 1518.025367][ C0] __driver_probe_device+0x18c/0x2f0 [ 1518.030675][ C0] page last free pid 5839 tgid 5839 stack trace: [ 1518.036990][ C0] __free_frozen_pages+0xc71/0xe70 [ 1518.042101][ C0] __put_partials+0x161/0x1c0 [ 1518.046779][ C0] put_cpu_partial+0x17c/0x250 [ 1518.051550][ C0] __slab_free+0x2f7/0x400 [ 1518.055974][ C0] qlist_free_all+0x97/0x140 [ 1518.060558][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1518.066013][ C0] __kasan_slab_alloc+0x22/0x80 [ 1518.070865][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 1518.076764][ C0] __alloc_skb+0x112/0x2d0 [ 1518.081178][ C0] netlink_ack+0x146/0xa50 [ 1518.085601][ C0] netlink_rcv_skb+0x28c/0x470 [ 1518.090369][ C0] netlink_unicast+0x75c/0x8e0 [ 1518.095145][ C0] netlink_sendmsg+0x805/0xb30 [ 1518.099902][ C0] __sock_sendmsg+0x21c/0x270 [ 1518.104581][ C0] __sys_sendto+0x3bd/0x520 [ 1518.109096][ C0] __x64_sys_sendto+0xde/0x100 [ 1518.113853][ C0] [ 1518.116164][ C0] Memory state around the buggy address: [ 1518.121785][ C0] ffff8880505bef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1518.129836][ C0] ffff8880505bef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1518.137889][ C0] >ffff8880505bf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1518.145935][ C0] ^ [ 1518.152861][ C0] ffff8880505bf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1518.160919][ C0] ffff8880505bf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1518.168968][ C0] ================================================================== [ 1518.177017][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1518.184208][ C0] CPU: 0 UID: 0 PID: 19091 Comm: syz.5.3880 Not tainted 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(full) [ 1518.195926][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1518.205981][ C0] Call Trace: [ 1518.209266][ C0] [ 1518.212111][ C0] dump_stack_lvl+0x99/0x250 [ 1518.216741][ C0] ? __asan_memcpy+0x40/0x70 [ 1518.221338][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1518.226536][ C0] ? __pfx__printk+0x10/0x10 [ 1518.231134][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.236794][ C0] panic+0x2db/0x790 [ 1518.240695][ C0] ? __pfx_panic+0x10/0x10 [ 1518.245108][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.250766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.256397][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1518.262320][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1518.268647][ C0] ? print_memory_metadata+0x314/0x400 [ 1518.274110][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1518.279163][ C0] check_panic_on_warn+0x89/0xb0 [ 1518.284116][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1518.289159][ C0] end_report+0x78/0x160 [ 1518.293412][ C0] kasan_report+0x129/0x150 [ 1518.297944][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1518.302994][ C0] do_raw_spin_lock+0x23d/0x290 [ 1518.307853][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.313500][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1518.318880][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.324694][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1518.329900][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1518.335793][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.341427][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1518.346372][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 1518.351580][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1518.356962][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.362598][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1518.368520][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.374163][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.379795][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1518.385174][ C0] dummy_timer+0x862/0x4550 [ 1518.389695][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.395340][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.400980][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1518.406365][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.411998][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1518.416948][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1518.421892][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1518.426835][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 1518.432028][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.437669][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1518.443379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.449008][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1518.454825][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1518.459935][ C0] handle_softirqs+0x286/0x870 [ 1518.464694][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1518.469462][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1518.474765][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.480404][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1518.484993][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1518.490188][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.495822][ C0] irq_exit_rcu+0x9/0x30 [ 1518.500083][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1518.505714][ C0] [ 1518.508648][ C0] [ 1518.511571][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1518.517561][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1518.522851][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b 39 fc 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1518.542449][ C0] RSP: 0018:ffffc900038dfb68 EFLAGS: 00000206 [ 1518.548524][ C0] RAX: 1b69dfab6cdecd00 RBX: 0000000000000000 RCX: 1b69dfab6cdecd00 [ 1518.556518][ C0] RDX: 0000000000000000 RSI: ffffffff8db5f1fd RDI: ffffffff8be2f980 [ 1518.564491][ C0] RBP: ffffffff8209e6e0 R08: 0000000000000000 R09: ffffffff8209e6e0 [ 1518.572463][ C0] R10: dffffc0000000000 R11: fffff5200071becd R12: 0000000000000001 [ 1518.580441][ C0] R13: ffff888033d43de0 R14: 0000000000000001 R15: 0000000000000246 [ 1518.588433][ C0] ? __might_fault+0xb0/0x130 [ 1518.593134][ C0] ? __might_fault+0xb0/0x130 [ 1518.597826][ C0] ? __might_fault+0xb0/0x130 [ 1518.602509][ C0] __might_fault+0xcc/0x130 [ 1518.607014][ C0] ? __might_fault+0xb0/0x130 [ 1518.611693][ C0] do_recvmmsg+0x330/0x770 [ 1518.616119][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1518.621061][ C0] ? __pfx_do_futex+0x10/0x10 [ 1518.625747][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 1518.630771][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1518.636313][ C0] ? rcu_is_watching+0x15/0xb0 [ 1518.641075][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1518.645762][ C0] do_syscall_64+0xfa/0x3b0 [ 1518.650267][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1518.655469][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.661541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.667172][ C0] ? exc_page_fault+0x9f/0xf0 [ 1518.671857][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.677750][ C0] RIP: 0033:0x7f0d34f8e9a9 [ 1518.682162][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1518.701770][ C0] RSP: 002b:00007f0d35e46038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1518.710184][ C0] RAX: ffffffffffffffda RBX: 00007f0d351b6080 RCX: 00007f0d34f8e9a9 [ 1518.718154][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1518.726119][ C0] RBP: 00007f0d35010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1518.734084][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1518.742047][ C0] R13: 0000000000000000 R14: 00007f0d351b6080 R15: 00007ffe32559778 [ 1518.750028][ C0] [ 1518.753238][ C0] Kernel Offset: disabled [ 1518.757558][ C0] Rebooting in 86400 seconds..