last executing test programs: 14m8.02762484s ago: executing program 2 (id=882): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x109e01, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) io_submit(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) close(0x3) 14m5.247690548s ago: executing program 2 (id=886): socket$netlink(0x10, 0x3, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000ac0)={r2}, &(0x7f0000000bc0)=0x8) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = epoll_create(0x12d6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@unlock_all, 0xb) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 13m59.089661878s ago: executing program 2 (id=893): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1002, &(0x7f0000000180), 0x106, 0x4}}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000009}, 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 13m54.966290078s ago: executing program 2 (id=898): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 13m52.465766299s ago: executing program 2 (id=902): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 13m50.668113693s ago: executing program 2 (id=906): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13m49.527928901s ago: executing program 32 (id=906): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8m15.893946838s ago: executing program 1 (id=1436): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r2], 0x0) 8m13.34697868s ago: executing program 1 (id=1440): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x4, 0x3}}, 0x80, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 8m11.628170903s ago: executing program 1 (id=1443): capset(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 8m11.386777089s ago: executing program 1 (id=1445): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000000, &(0x7f0000002b00)={[{@noquota}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nombcache}, {@noinit_itable}, {@abort}, {@noblock_validity}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r1, &(0x7f0000000000)='3', 0x4e) pwritev2(r0, &(0x7f00000010c0)=[{&(0x7f0000000080)='=', 0x1}], 0x1, 0x2b1, 0x7, 0x2) 8m10.340283554s ago: executing program 1 (id=1447): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$igmp(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001200add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$int_out(r3, 0x5466, &(0x7f0000000040)) 8m7.760168598s ago: executing program 1 (id=1452): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 8m6.096513889s ago: executing program 33 (id=1452): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 6m27.384996425s ago: executing program 5 (id=1615): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 6m26.117480216s ago: executing program 5 (id=1617): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x0, 0x800000, 0x0, 0x6, 0xe9f, 0xfffffffc, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000060c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 6m23.54336416s ago: executing program 5 (id=1620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x11) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @multicast2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6m23.280062077s ago: executing program 5 (id=1621): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYBLOB="fa58b3e7935c630406be6a4598b49f5fbcaf0ffcf784057b22b3afd5b70d052ef48caa8d3dd8114c444776b61acbd4b812cb7fbcff5bfff32640133d3711658773d9", @ANYRES64=0x0], 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 6m22.350517979s ago: executing program 5 (id=1622): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m21.989145408s ago: executing program 5 (id=1624): unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) 6m6.825157331s ago: executing program 34 (id=1624): unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) 3m21.782504329s ago: executing program 3 (id=2020): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$eJzs3UFsHNd9B+D/G+2KSxmtmDhRndQuNm2RyorlypJiKlbhrGqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESAng8XMvqVWNGnToihR0vfZ0m939r2Z9+atZ2hBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/+/K5E8+l+90KAOBeujD21RMn3f8B4JFyyf//AwAAAAAAAAAAAADAfpeiiMcjxdyFtTRRve9qnO/Ub9wcHxndutpgqmoeqMqXvxrPnTx1+ovPD5/p5fnOzIfUv9s+G6+OXTrXfGn2+tz81MLC1GRzfKZzZXZyasd72G39zY5VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dOxWkUZ/+dodN6RruxkeB6OI45Hime/9LLUjoojdn4vGvR37zQarThyrOjE+Mlp1ZLrTnlksP7zYOxFFRLOvUqt3jrYei6jV72kftteKWCqbXzb4WNm9sbn2fPvy9FTzYnt+sbPYmZ25mLqtLfvTjCLOpIjliFgd+ODu6lFELVJ85/BauhwRB3rn4QvVxODt21HsYR93oGxnsx6xXDwAY7aPDUQRr0SKn799NK7k60x1rfl8xCtl/jDizTJfjEjlF+N0xLtbfI94MNWiiL8ox//sWpqsrge968r5rzW/MnN1tq9s77ryMe8PH7hS3Kf7w+CmvDf2+bWpEUW0qyv+WrrzH3YAAAAAAAAAAAAAAAAAuNsGo4jPRIqX/+2PqnnFUc1LP3x2+PeGfql/zvgTH7GfsuyzEbFU7GxO7sE8MfBiupjSfZ5L/ChrRBF/nOf/fet+NwYAAAAAAAAAAAAAAAAAAOCRVsRPI8UL7xxNy9G/pnhn5lrzUvvydHdV2N7av70109fX19ebqZutnBM5l3Iu51zJudrNat5/Vb/I9XNO5FzKuZxzJedqzjiQ6+ds5ZzIuZRzOedKztWcUcv1c7ZyTuRcyrmccyXnas7YJ2v3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TIoo4v1I8e1vrKVIEdGKmIhurgzc79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMT3I0Xz91sb22oRkap/u46Wv52O1sEyPxmt4TJfjNa5nO0qa61v3Yf2szv1VMRPIsVA462NAc/jX+++2/gaxJvfvPXus7VuHuh9OPTewGNHDp8dHv21J7Z7nbZqwLHznZkbN5vjI6OjY32ba/non+zbNpSPW9ydrhMRC6+/8Vp7enpq/s5flF+BbT5aX1//0/Iouz3EPnmRatv29JF8UQ7tPmjGHnawtqPC9X3Q1D0ZXB525f3/3Ujx2+/8R++GX93/axslNu7w8Ys/uXX/f2HzjnZ4/69trpfv/+U9fav7/+N9217IP43UaxGNxetz9SMRjYXX3zjeud6+NnVtaub0iRNfGh7+0qkT9YMRjaud6am+V7s/VwAAAAAAAAAAAAAAAAD3VCriy5Gi/ZO11IyIm9V8raGzw08ff+pAHKjmW902b/vVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu30cI1qutf4yOiedOYjDe5x+wcbL83OvT7fufYHi1t+fqhx7vLC4nz7ytYfx2AUEa3+LceqBo+PjFaNnu60Z6qqF7ecTP/x1VMR/xkprpxups/lbXn+/+YZ/rfN/1/avKM9mv//ib5t5TFTKuIXkeK3/vKJ+FzVzkPxgXOWy/1tpDh25slcLg6W5Xpt6D5XoDszsCz7v5HiH99/cqm/bG8+5OO3yj634xP7gCjH/3Ck+P6ffzd+PW+7/fkPW4//oc072qPx/1TftkO3Pa9g110nj//xSPHi42/Fb+RtH/b8j96zN47mwhvP59ij8f9037ahfNzfvDtdBwAAAAAAAAAAeKDVUxF/Fyl+NFpLz+dtO/n7f5Obd7RHf//rV/q2Td6d9Yo+8sWuTyoAAAAA7BP1VMRPI8W1xbc25lDfPv+7b/7n79ya/zmSNn1a/TnfL1fPDbibf/7Xbygfd2L33QYAAAAAAAAAAAAAAAAAAIB9JaUins/rqU9U8/knt11PfSVSvPzfz+Ry6UhZrrcO/FD1e+PC7Mzxc9PTs1fai+3L01PNsbn2lamy7qcixdrfPJnrFtX66r315rtrvDdqEVGtxT4fKUb/vle2uxZ7b23y7nrg3bXYy7KfiBT/9Q+3l+2tY/3pW2VPlmX/OlJ8/Z+2LnvkVtlTZdnvRooff73ZK3uoLNt7Pmr3maSNP4yIZ6/MFnswKgAAAAAAAAAAAAAAAAAAADxq6qmIP4sU/3N9eWMuf17/v973tvLmN/vW+9/kZrXO/1C1/v92r+9k/f/quQJL2x0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTimKeCNSzF1YSysD5fuuxvnOzI2b4yOjW1cbTFXNA1X58lfjuZOnTn/x+eEzvfzw+nfbZ+LVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu14D9vXb9xRi45VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dKyvTK1+R0feUtpm+8Eo4q8ixTPf+1n60UBEER96LnbkI747e22w6sSxqhPjI6NVR6Y77ZnF8sOLvRNRRDT7KrV65+gejMWutCIGyuaXDT5Wdm9srj3fvjw91bzYnl/sLHZmZy6mbmvL/jSjiDMpYjkiVgc+uLt6FPFapPjO4bX0zwMRB3rn4QsXxr564uT27Sj2sI87ULazWY9YLh6AMdvHBqKIH0SKn799NP5lIKIW3V/x+YhXyvxhxJvRHe9UfjFOR7y7xfeIB1Mtivi/cvzPrqW3B8rrQe+6cv5rza/MXJ3tK9u7ruyr+8MP/v3j1hi8G4fd5Mvb/pCwz69NjSjix9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41UrzwztFUzQ/emFPcmbnWvNS+PN2d1teb+9ebM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMA7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjH0ydw8AAAAAAAAAAAAAAAAAAHi4FNU/Kb79jbW0PtBdX3oiurliPdCH3v8HAAD//z/B9Iw=") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x21, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000100)=ANY=[], 0x1, 0x291, &(0x7f00000009c0)="$eJzs201rE18Ux/Ff+vDv079NtFptRTzoRkGGNr6CUFoQA0ptxAcQpnaiIWlSMiESEdudW19HcelOEN9AN74CF+66cdmFGMlkbJO2ooXaSc33s5kTbs7NuTl3wl1ktu6/WclnfSfrVtQTM/VJ69qWEupRr5pi4bUniP9Tq3VdG09/vnj3wcNbqXR6bsFsPrV4I2lmY5c+PH/59vLHysi9d2PvB7SZeLz1Nfllc2Jzcuv74rOcbznfiqWKubZUKlXcpYJnyzk/75jdKXiu71mu6HvltvFsobS6WjO3uDw6vFr2fN/cYs3yXs0qJauUa+Y+dXNFcxzHRoeF38lsLCy4qairwN9VLqfcWUlT+0YyG5EUBAAAInW85/8hzv8dhfN/N2ic/x+F9287zv8AAAAAAAAAAAAAAAAAAAAAAJwE2/V6vF6vx39e+6XgCZ96+HpI0rCkEUn/SxqVNCYpLikh6ZSk05LGJZ2RdFbShKRzks5LmmyZK+q1Yj/6392Orv+xGP0/ebj/u1vLg7uD0srraqaaaV6b46mscirI07Ti+hb0MtSM52+m56YtkBjamXVlrZrpbc+fUbyxYQ7Kn2nmmy408oLPX6tmBoJ9t5OfVLyxwQ7KTx6YP6irV1ryHcX16YlKKmg52JO7+a9mzGZvp8P8gbD+qeB9/zrHdiTav79m/xznV+PN/EPsjz396dNUX7Rrh+TXXuTdQsErE3RN0B/2vlPq6dQge13qgDL+OFg/0gkj/mHCsdhtetSVAAAAAAAAAAAAAAAAAAAO4zj+nxj1GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2OtHAAAA//9l51eW") syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x290c471, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x4e21, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "8eb0177cba5bdafb17cb4eba2011e118f0853675f4f41e6ba00c14fc71771a56", "0d73648f4736b78974af9de8c5845687", {"dfc406edf9417e9e6a2ef11937ae6142", "fd1f6f73782f94b889bfb0f8a49a98bd"}}}}}}}}, 0x0) write$UHID_INPUT(r5, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2824004, 0x0, 0x5, 0x0, &(0x7f0000000000)) r9 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r9, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r9, @ANYRES8=r9], 0x2, 0x55e, &(0x7f0000001080)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 3m18.580339797s ago: executing program 3 (id=2027): r0 = epoll_create1(0x80000) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r2, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x10000018}) 3m18.205975427s ago: executing program 3 (id=2031): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 3m16.873478089s ago: executing program 3 (id=2034): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1d000, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='./file0\x00') 3m16.542410878s ago: executing program 3 (id=2035): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) r4 = epoll_create1(0x80000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r6, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x10000018}) 3m15.823984145s ago: executing program 3 (id=2037): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x21, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000100)=ANY=[], 0x1, 0x291, &(0x7f00000009c0)="$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") syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x290c471, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x4e21, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "8eb0177cba5bdafb17cb4eba2011e118f0853675f4f41e6ba00c14fc71771a56", "0d73648f4736b78974af9de8c5845687", {"dfc406edf9417e9e6a2ef11937ae6142", "fd1f6f73782f94b889bfb0f8a49a98bd"}}}}}}}}, 0x0) write$UHID_INPUT(r5, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2824004, 0x0, 0x5, 0x0, &(0x7f0000000000)) r9 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r9, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r9, @ANYRES8=r9], 0x2, 0x55e, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 3m15.478348224s ago: executing program 35 (id=2037): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x21, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000100)=ANY=[], 0x1, 0x291, &(0x7f00000009c0)="$eJzs201rE18Ux/Ff+vDv079NtFptRTzoRkGGNr6CUFoQA0ptxAcQpnaiIWlSMiESEdudW19HcelOEN9AN74CF+66cdmFGMlkbJO2ooXaSc33s5kTbs7NuTl3wl1ktu6/WclnfSfrVtQTM/VJ69qWEupRr5pi4bUniP9Tq3VdG09/vnj3wcNbqXR6bsFsPrV4I2lmY5c+PH/59vLHysi9d2PvB7SZeLz1Nfllc2Jzcuv74rOcbznfiqWKubZUKlXcpYJnyzk/75jdKXiu71mu6HvltvFsobS6WjO3uDw6vFr2fN/cYs3yXs0qJauUa+Y+dXNFcxzHRoeF38lsLCy4qairwN9VLqfcWUlT+0YyG5EUBAAAInW85/8hzv8dhfN/N2ic/x+F9287zv8AAAAAAAAAAAAAAAAAAAAAAJwE2/V6vF6vx39e+6XgCZ96+HpI0rCkEUn/SxqVNCYpLikh6ZSk05LGJZ2RdFbShKRzks5LmmyZK+q1Yj/6392Orv+xGP0/ebj/u1vLg7uD0srraqaaaV6b46mscirI07Ti+hb0MtSM52+m56YtkBjamXVlrZrpbc+fUbyxYQ7Kn2nmmy408oLPX6tmBoJ9t5OfVLyxwQ7KTx6YP6irV1ryHcX16YlKKmg52JO7+a9mzGZvp8P8gbD+qeB9/zrHdiTav79m/xznV+PN/EPsjz396dNUX7Rrh+TXXuTdQsErE3RN0B/2vlPq6dQge13qgDL+OFg/0gkj/mHCsdhtetSVAAAAAAAAAAAAAAAAAAAO4zj+nxj1GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2OtHAAAA//9l51eW") syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x290c471, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x4e21, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "8eb0177cba5bdafb17cb4eba2011e118f0853675f4f41e6ba00c14fc71771a56", "0d73648f4736b78974af9de8c5845687", {"dfc406edf9417e9e6a2ef11937ae6142", "fd1f6f73782f94b889bfb0f8a49a98bd"}}}}}}}}, 0x0) write$UHID_INPUT(r5, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2824004, 0x0, 0x5, 0x0, &(0x7f0000000000)) r9 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r9, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r9, @ANYRES8=r9], 0x2, 0x55e, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 15.173242507s ago: executing program 6 (id=2286): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000180)={0xffff, 0x200100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) io_setup(0x8, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 12.450283404s ago: executing program 0 (id=2288): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$igmp(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001200add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000240)="190000000800aaaaaaaaaa110103", 0xe) 12.443907554s ago: executing program 6 (id=2289): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 12.324142147s ago: executing program 7 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xee) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x2000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe140f580000dfff0000080000040031623e1a0000000008", [0x7a, 0xd]}) mkdir(&(0x7f0000000000)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) write$binfmt_format(r4, &(0x7f00000001c0)='1\x00', 0x2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x7, 0x0, 0x3b, 0x0, 0x0}) 12.305928937s ago: executing program 4 (id=2291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x11) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @multicast2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.082909892s ago: executing program 7 (id=2292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0xfffffffa, 0x98c6}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x12, "9de30de20c5e1f02a8da2a29c1189c00"}, @generic={0x8, 0x8, "78a01e8c08fc"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x9, 0x1]}]}}}}}}}}, 0x0) 10.081129072s ago: executing program 6 (id=2293): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x530, 0x530, 0xffffffff, 0x108, 0x108, 0x650, 0x650, 0xffffffff, 0x650, 0x650, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @multicast2, @private=0xa010100, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@broadcast, @empty, 0xffffffff, 0x0, 'rose0\x00', 'gre0\x00', {}, {0xff}, 0x7f, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @gre_key=0x9, @port=0x4e20}}}}, {{@ip={@loopback, @remote, 0x0, 0xffffff, 'veth0_to_hsr\x00', 'bridge0\x00', {0xff}, {}, 0x2e, 0x2, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1c, @broadcast, @rand_addr=0x64010101, @icmp_id=0x64, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @broadcast, @gre_key=0xfcf5, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000000640), 0x3fffffffffffce3, 0x700000000000000, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) 9.988747214s ago: executing program 4 (id=2294): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) execve(&(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 9.727880361s ago: executing program 4 (id=2295): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000180)={0xffff, 0x200100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) io_setup(0x8, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 8.043647552s ago: executing program 4 (id=2296): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) writev(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000380)="cbcf826db53c661d481f5a1fe284c4a8a85cf149553120c917732527a6c543fa57a00b7ac3bec3f5434ca9ff8eab573e5021983aaeb9e6835f9aa071eeef5c2d", 0x40}, {&(0x7f0000000480)="78ce33", 0x3}], 0x3) 7.953395884s ago: executing program 6 (id=2297): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="349c6b64390dd9438da4e0c3d262188d6fccee9120ef1617d17a1c476ce0c104d0cb7aa7d56bed8281d7221e76c8aee52e82ce13106a6dd27d2d025e70eda10a65ff547eb2c13a0f5b838be52f4a55fae80187de0dc98b", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz0\x00'}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 7.083501996s ago: executing program 0 (id=2298): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000180)={0xffff, 0x200100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) io_setup(0x8, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5.713621369s ago: executing program 0 (id=2299): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8894}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unlinkat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "4494"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f00000014c0)=""/2, 0x39, 0x2, 0x1}, 0x28) 5.387025777s ago: executing program 6 (id=2300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xee) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x2000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe140f580000dfff0000080000040031623e1a0000000008", [0x7a, 0xd]}) mkdir(&(0x7f0000000000)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) write$binfmt_format(r4, &(0x7f00000001c0)='1\x00', 0x2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x7, 0x0, 0x3b, 0x0, 0x0}) 3.831968446s ago: executing program 6 (id=2301): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 3.752325017s ago: executing program 0 (id=2302): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 3.750562188s ago: executing program 7 (id=2303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x11) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @multicast2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.669465184s ago: executing program 0 (id=2304): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000180)={0xffff, 0x200100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) io_setup(0x8, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 2.605217085s ago: executing program 7 (id=2305): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) r4 = epoll_create1(0x80000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r6, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x10000018}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u8=&(0x7f0000000140)}}) add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b", 0xb, 0xfffffffffffffffe) 2.535476057s ago: executing program 4 (id=2306): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$igmp(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001200add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000240)="190000000800aaaaaaaaaa110103", 0xe) 1.750194306s ago: executing program 0 (id=2307): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000180)={0xffff, 0x200100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) io_setup(0x8, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 616.661474ms ago: executing program 4 (id=2308): pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff}, 0x800) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0xf, 0x4, 0x1, 0x6, 0x7e, 0x67, 0x0, 0xb7, 0x16, 0x0, @local, @broadcast, {[@noop, @lsrr={0x83, 0x27, 0x87, [@loopback, @private=0xa010102, @loopback, @multicast1, @empty, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}, "9315e7a8cf9ffc1803b32fd42d46d94bba4a6196a9e398f9e86e357eef6e8248874ac80ef159e1fc77bb4780d0e1adb3a30443991f135a303703bd70d7de8b41c185"}}}}, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r3, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/61, 0x3d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', &(0x7f0000000300), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB, @ANYRESDEC=r1, @ANYBLOB=',euid<', @ANYBLOB, @ANYRESDEC=r8, @ANYBLOB]) socket$nl_route(0x10, 0x3, 0x0) 380.64984ms ago: executing program 7 (id=2309): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 0s ago: executing program 7 (id=2310): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100c8"], 0x16) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0c0400c80000"], 0xf) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c80010000c000500120108000a000a0000006400"], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) nanosleep(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): INTR [ 992.303572][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 992.411437][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 992.536331][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 992.689242][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 992.831632][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 992.906773][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 992.983759][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 993.059624][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.073376][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 993.076937][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.077117][T11609] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 993.196734][T11609] BTRFS error (device loop3): open_ctree failed: -12 [ 997.633971][T11667] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9303] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11667] [ 998.432351][T11274] Process accounting resumed [ 1002.508397][T11696] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9303] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11696] [ 1003.353854][ T8] Process accounting resumed [ 1006.020370][T11722] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9303] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11722] [ 1006.622748][ T5862] Process accounting resumed [ 1007.522393][T11731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20 [ 1007.562651][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 1007.571852][T11732] bridge_slave_1: left allmulticast mode [ 1007.577592][T11732] bridge_slave_1: left promiscuous mode [ 1007.583795][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.264005][T11732] bridge_slave_0: left allmulticast mode [ 1008.269737][T11732] bridge_slave_0: left promiscuous mode [ 1008.275881][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.067932][ T8994] Process accounting resumed [ 1011.619026][T11765] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11765] [ 1013.388481][ T8] Process accounting resumed [ 1014.352052][T11783] syz_tun: entered allmulticast mode [ 1014.415167][T11782] syz_tun: left allmulticast mode [ 1014.496288][T11785] fuse: Bad value for 'fd' [ 1015.581253][T11781] loop3: detected capacity change from 0 to 32768 [ 1015.595584][T11791] binder: BINDER_SET_CONTEXT_MGR already set [ 1015.613597][T11781] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop3 scanned by syz.3.1517 (11781) [ 1015.633280][T11791] binder: 11790:11791 ioctl 4018620d 200000000100 returned -16 [ 1015.862630][T11792] udevd[11792]: incorrect btrfs checksum on /dev/loop3 [ 1016.034217][T11274] Process accounting resumed [ 1017.111242][T11802] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11535] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11802] [ 1018.986900][ T8994] Process accounting resumed [ 1021.905066][T11813] loop5: detected capacity change from 0 to 32768 [ 1021.938303][T11813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1527 (11813) [ 1021.982567][T11813] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1022.013219][T11813] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1022.034462][T11813] BTRFS info (device loop5): setting nodatasum [ 1022.053213][T11813] BTRFS info (device loop5): force zlib compression, level 3 [ 1022.068444][T11813] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1022.093975][T11813] BTRFS info (device loop5): use lzo compression, level 0 [ 1022.117854][T11813] BTRFS info (device loop5): turning on flush-on-commit [ 1022.146665][T11813] BTRFS info (device loop5): enabling auto defrag [ 1022.173228][T11813] BTRFS info (device loop5): max_inline at 4096 [ 1022.179540][T11813] BTRFS info (device loop5): using free space tree [ 1022.343922][T11813] BTRFS info (device loop5): enabling ssd optimizations [ 1022.647254][ T27] audit: type=1800 audit(1791614982.309:33): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1527" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1023.227326][T11535] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1025.322949][T11659] Process accounting resumed [ 1026.271946][ T8] Process accounting resumed [ 1029.066025][T11885] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9303] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11885] [ 1032.697636][ T5759] Process accounting resumed [ 1033.778805][T11904] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1038.433198][ T5759] Process accounting resumed [ 1046.428162][ T5759] Process accounting resumed [ 1048.901527][T11986] loop7: detected capacity change from 0 to 4 [ 1048.928068][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1048.937387][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.024503][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.033680][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.055482][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.064694][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.079825][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.089005][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.090127][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.090156][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.090206][T11986] ldm_validate_partition_table(): Disk read failed. [ 1049.091060][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.091089][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.091628][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.091656][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.092296][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.092325][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.093752][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.093783][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.099460][T11986] Dev loop7: unable to read RDB block 0 [ 1049.100064][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.100093][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1049.110573][T11986] loop7: unable to read partition table [ 1049.112101][T11986] loop7: partition table beyond EOD, truncated [ 1049.112189][T11986] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CîjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5) [ 1050.118879][T11996] loop4: detected capacity change from 0 to 2048 [ 1051.384897][T11996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.488407][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.488460][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.079953][ T5812] Process accounting resumed [ 1057.724705][T12038] FAULT_INJECTION: forcing a failure. [ 1057.724705][T12038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1057.738561][T12038] CPU: 0 PID: 12038 Comm: syz.5.1582 Not tainted syzkaller #0 [ 1057.746053][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1057.756121][T12038] Call Trace: [ 1057.759398][T12038] [ 1057.762327][T12038] dump_stack_lvl+0x18c/0x250 [ 1057.767016][T12038] ? show_regs_print_info+0x20/0x20 [ 1057.772213][T12038] ? load_image+0x420/0x420 [ 1057.776726][T12038] ? __lock_acquire+0x7eb0/0x7eb0 [ 1057.781791][T12038] ? verify_lock_unused+0x140/0x140 [ 1057.786996][T12038] should_fail_ex+0x394/0x4c0 [ 1057.791685][T12038] prepare_alloc_pages+0x1e1/0x5b0 [ 1057.796802][T12038] __alloc_pages+0x134/0x460 [ 1057.801394][T12038] ? zone_statistics+0x170/0x170 [ 1057.806334][T12038] ? mt_find+0x169/0x640 [ 1057.810580][T12038] ? handle_mm_fault+0xe6/0x4a50 [ 1057.815519][T12038] ? __lock_acquire+0x7eb0/0x7eb0 [ 1057.820547][T12038] __folio_alloc+0x10/0x20 [ 1057.824963][T12038] vma_alloc_folio+0x474/0x8f0 [ 1057.829728][T12038] ? handle_mm_fault+0xe6/0x4a50 [ 1057.834671][T12038] handle_mm_fault+0x1ab6/0x4a50 [ 1057.839613][T12038] ? handle_mm_fault+0xe6/0x4a50 [ 1057.844559][T12038] ? numa_migrate_prep+0x350/0x350 [ 1057.849683][T12038] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1057.854970][T12038] do_user_addr_fault+0x736/0x12d0 [ 1057.860095][T12038] exc_page_fault+0x64/0x100 [ 1057.864691][T12038] asm_exc_page_fault+0x26/0x30 [ 1057.869538][T12038] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1057.875354][T12038] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1057.894966][T12038] RSP: 0018:ffffc9000382fb38 EFLAGS: 00050206 [ 1057.901033][T12038] RAX: ffffffff84326101 RBX: 1ffff92000705fb7 RCX: 00000000000005a0 [ 1057.909003][T12038] RDX: 0000000000000000 RSI: ffff88807b9eaa60 RDI: 00007fbbc4556000 [ 1057.916973][T12038] RBP: ffffc9000382fc98 R08: ffff88807b9eafff R09: 1ffff1100f73d5ff [ 1057.924947][T12038] R10: dffffc0000000000 R11: ffffed100f73d600 R12: ffff88807b9ea000 [ 1057.932922][T12038] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc9000382fdc8 [ 1057.940902][T12038] ? _copy_to_iter+0x171/0x1110 [ 1057.945777][T12038] _copy_to_iter+0x24f/0x1110 [ 1057.950461][T12038] ? __virt_addr_valid+0x10c/0x380 [ 1057.955582][T12038] ? iov_iter_init+0x1e0/0x1e0 [ 1057.960351][T12038] ? __virt_addr_valid+0x10c/0x380 [ 1057.965464][T12038] ? __virt_addr_valid+0x10c/0x380 [ 1057.970576][T12038] ? __virt_addr_valid+0x10c/0x380 [ 1057.975691][T12038] ? __check_object_size+0x4fc/0xa40 [ 1057.980990][T12038] kernfs_fop_read_iter+0x4be/0x680 [ 1057.986198][T12038] vfs_read+0x486/0x990 [ 1057.990363][T12038] ? kernel_read+0x1e0/0x1e0 [ 1057.994958][T12038] ? __fget_files+0x3fc/0x460 [ 1057.999643][T12038] ? __fdget_pos+0x2a3/0x330 [ 1058.004232][T12038] ? ksys_read+0x74/0x260 [ 1058.008569][T12038] ksys_read+0x151/0x260 [ 1058.012817][T12038] ? vfs_write+0x9a0/0x9a0 [ 1058.017243][T12038] ? lockdep_hardirqs_on+0x98/0x150 [ 1058.022448][T12038] do_syscall_64+0x55/0xb0 [ 1058.026868][T12038] ? clear_bhb_loop+0x40/0x90 [ 1058.031546][T12038] ? clear_bhb_loop+0x40/0x90 [ 1058.036224][T12038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1058.042123][T12038] RIP: 0033:0x7fbbc415ea0e [ 1058.046542][T12038] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1058.066150][T12038] RSP: 002b:00007fbbc5148f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1058.074577][T12038] RAX: ffffffffffffffda RBX: 00007fbbc51496c0 RCX: 00007fbbc415ea0e [ 1058.082549][T12038] RDX: 00000000009fe000 RSI: 00007fbbc45555a0 RDI: 0000000000000004 [ 1058.090521][T12038] RBP: 00007fbbc45535a0 R08: 0000000000000000 R09: 0000000000000000 [ 1058.098492][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a00000 [ 1058.106463][T12038] R13: 0000000000002000 R14: 00007fbbc4425fa0 R15: 00007ffd3d01de18 [ 1058.114446][T12038] [ 1059.006730][ T5812] Process accounting resumed [ 1059.370005][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.370005][T12044] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1059.383205][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.383205][T12044] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1059.396215][T12044] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1059.405968][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.405968][T12044] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1059.419166][T12044] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1059.429837][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.429837][T12044] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1059.442940][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.442940][T12044] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1059.456210][T12044] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1059.466103][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.466103][T12044] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1059.479197][T12044] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1059.489401][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.489401][T12044] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1059.502389][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.502389][T12044] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1059.515885][T12044] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1059.525572][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.525572][T12044] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1059.538693][T12044] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1059.549717][T12044] syz.5.1584: attempt to access beyond end of device [ 1059.549717][T12044] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1059.562703][T12044] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1059.572355][T12044] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1059.581929][T12044] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 1059.871035][T12050] loop5: detected capacity change from 0 to 1024 [ 1059.940408][T12050] EXT4-fs: Ignoring removed mblk_io_submit option [ 1060.061768][ T3536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.100353][T12050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1060.124017][T12050] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1060.181384][T12050] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #11: comm syz.5.1585: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1060.225077][T12050] EXT4-fs (loop5): Remounting filesystem read-only [ 1060.270355][T12050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.475367][T11535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.233385][ T3536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.276523][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 1063.576806][ T3536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.873489][ T5812] Process accounting resumed [ 1063.891825][T12088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1595'. [ 1064.823638][ T3536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.195190][ T5759] Process accounting resumed [ 1069.493617][ T3536] tipc: Left network mode [ 1069.890433][T12127] netlink: 'syz.3.1604': attribute type 4 has an invalid length. [ 1070.362877][T11659] Process accounting resumed [ 1070.418911][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1605'. [ 1074.567626][T12165] FAULT_INJECTION: forcing a failure. [ 1074.567626][T12165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.610205][T12165] CPU: 1 PID: 12165 Comm: syz.5.1612 Not tainted syzkaller #0 [ 1074.617717][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1074.627774][T12165] Call Trace: [ 1074.631049][T12165] [ 1074.633981][T12165] dump_stack_lvl+0x18c/0x250 [ 1074.638664][T12165] ? show_regs_print_info+0x20/0x20 [ 1074.643863][T12165] ? load_image+0x420/0x420 [ 1074.648370][T12165] ? __might_fault+0xaa/0x120 [ 1074.653043][T12165] ? __lock_acquire+0x7eb0/0x7eb0 [ 1074.658073][T12165] ? do_futex+0x2ff/0x3e0 [ 1074.662403][T12165] should_fail_ex+0x394/0x4c0 [ 1074.667090][T12165] _copy_from_user+0x2f/0xe0 [ 1074.671685][T12165] __x64_sys_sigaltstack+0x124/0x2a0 [ 1074.676977][T12165] ? do_sigaction+0x480/0x480 [ 1074.681650][T12165] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1074.687631][T12165] ? lock_chain_count+0x20/0x20 [ 1074.692490][T12165] ? lockdep_hardirqs_on+0x98/0x150 [ 1074.697690][T12165] do_syscall_64+0x55/0xb0 [ 1074.702535][T12165] ? clear_bhb_loop+0x40/0x90 [ 1074.707255][T12165] ? clear_bhb_loop+0x40/0x90 [ 1074.711930][T12165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.717846][T12165] RIP: 0033:0x7fbbc419e1d9 [ 1074.722257][T12165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.742052][T12165] RSP: 002b:00007fbbc5149028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1074.750464][T12165] RAX: ffffffffffffffda RBX: 00007fbbc4425fa0 RCX: 00007fbbc419e1d9 [ 1074.758432][T12165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1074.766432][T12165] RBP: 00007fbbc4235888 R08: 0000000000000000 R09: 0000000000000000 [ 1074.774405][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.782376][T12165] R13: 00007fbbc4426038 R14: 00007fbbc4425fa0 R15: 00007ffd3d01de18 [ 1074.790356][T12165] [ 1075.267595][ T5862] Process accounting resumed [ 1075.274022][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1615'. [ 1080.292960][T12222] FAULT_INJECTION: forcing a failure. [ 1080.292960][T12222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.369986][T12222] CPU: 1 PID: 12222 Comm: syz.0.1623 Not tainted syzkaller #0 [ 1080.377515][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1080.387592][T12222] Call Trace: [ 1080.390890][T12222] [ 1080.393841][T12222] dump_stack_lvl+0x18c/0x250 [ 1080.398557][T12222] ? show_regs_print_info+0x20/0x20 [ 1080.403808][T12222] ? load_image+0x420/0x420 [ 1080.408311][T12222] ? __might_fault+0xaa/0x120 [ 1080.412986][T12222] ? __lock_acquire+0x7eb0/0x7eb0 [ 1080.418008][T12222] ? do_futex+0x2ff/0x3e0 [ 1080.422330][T12222] should_fail_ex+0x394/0x4c0 [ 1080.427005][T12222] _copy_from_user+0x2f/0xe0 [ 1080.431600][T12222] __x64_sys_sigaltstack+0x124/0x2a0 [ 1080.436888][T12222] ? do_sigaction+0x480/0x480 [ 1080.441579][T12222] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1080.447556][T12222] ? lock_chain_count+0x20/0x20 [ 1080.452418][T12222] ? lockdep_hardirqs_on+0x98/0x150 [ 1080.457614][T12222] do_syscall_64+0x55/0xb0 [ 1080.462042][T12222] ? clear_bhb_loop+0x40/0x90 [ 1080.466708][T12222] ? clear_bhb_loop+0x40/0x90 [ 1080.471374][T12222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.477262][T12222] RIP: 0033:0x7f797cf9e1d9 [ 1080.481663][T12222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.501260][T12222] RSP: 002b:00007f797de1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1080.509665][T12222] RAX: ffffffffffffffda RBX: 00007f797d225fa0 RCX: 00007f797cf9e1d9 [ 1080.517628][T12222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1080.525592][T12222] RBP: 00007f797d035888 R08: 0000000000000000 R09: 0000000000000000 [ 1080.533551][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.541508][T12222] R13: 00007f797d226038 R14: 00007f797d225fa0 R15: 00007ffd9cfc1098 [ 1080.549477][T12222] [ 1080.573323][ T3536] hsr_slave_0: left promiscuous mode [ 1080.608445][ T3536] hsr_slave_1: left promiscuous mode [ 1080.631071][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.639065][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.692732][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.742225][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.772396][ T3536] bridge_slave_1: left allmulticast mode [ 1080.789556][ T3536] bridge_slave_1: left promiscuous mode [ 1080.821758][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.862534][ T3536] bridge_slave_0: left allmulticast mode [ 1080.869138][ T3536] bridge_slave_0: left promiscuous mode [ 1080.885162][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.985134][ T3536] veth1_macvtap: left promiscuous mode [ 1080.996692][ T3536] veth0_macvtap: left promiscuous mode [ 1081.013513][ T3536] veth1_vlan: left promiscuous mode [ 1081.027133][ T3536] veth0_vlan: left promiscuous mode [ 1081.120679][ T5862] Process accounting resumed [ 1081.175359][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1625'. [ 1083.905054][T12239] loop0: detected capacity change from 0 to 1024 [ 1084.265719][T12239] hfsplus: bad catalog file entry [ 1084.271083][T12239] hfsplus: failed to load root directory [ 1084.986491][ T3536] bond7 (unregistering): Released all slaves [ 1085.474936][ T3536] bond6 (unregistering): Released all slaves [ 1085.907583][ T3536] bond5 (unregistering): Released all slaves [ 1087.239704][T12254] FAULT_INJECTION: forcing a failure. [ 1087.239704][T12254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.258554][T12254] CPU: 1 PID: 12254 Comm: syz.4.1631 Not tainted syzkaller #0 [ 1087.266059][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1087.276139][T12254] Call Trace: [ 1087.279435][T12254] [ 1087.282377][T12254] dump_stack_lvl+0x18c/0x250 [ 1087.287083][T12254] ? show_regs_print_info+0x20/0x20 [ 1087.292303][T12254] ? load_image+0x420/0x420 [ 1087.296830][T12254] ? __might_fault+0xaa/0x120 [ 1087.301530][T12254] ? __lock_acquire+0x7eb0/0x7eb0 [ 1087.306577][T12254] ? __virt_addr_valid+0x10c/0x380 [ 1087.311713][T12254] should_fail_ex+0x394/0x4c0 [ 1087.316423][T12254] _copy_from_user+0x2f/0xe0 [ 1087.321036][T12254] strndup_user+0xb7/0x150 [ 1087.325480][T12254] __se_sys_mount+0xe2/0x3d0 [ 1087.330099][T12254] ? __x64_sys_mount+0xc0/0xc0 [ 1087.334885][T12254] ? lockdep_hardirqs_on+0x98/0x150 [ 1087.340105][T12254] ? __x64_sys_mount+0x20/0xc0 [ 1087.344893][T12254] do_syscall_64+0x55/0xb0 [ 1087.349328][T12254] ? clear_bhb_loop+0x40/0x90 [ 1087.354033][T12254] ? clear_bhb_loop+0x40/0x90 [ 1087.358744][T12254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.364673][T12254] RIP: 0033:0x7fd47f59e1d9 [ 1087.369112][T12254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.388747][T12254] RSP: 002b:00007fd4803f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1087.397176][T12254] RAX: ffffffffffffffda RBX: 00007fd47f825fa0 RCX: 00007fd47f59e1d9 [ 1087.405139][T12254] RDX: 0000200000000740 RSI: 0000000000000000 RDI: 00002000000006c0 [ 1087.413112][T12254] RBP: 00007fd47f635888 R08: 0000000000000000 R09: 0000000000000000 [ 1087.421087][T12254] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1087.429047][T12254] R13: 00007fd47f826038 R14: 00007fd47f825fa0 R15: 00007ffcb4fb3e88 [ 1087.437020][T12254] [ 1087.811919][ T3536] bond4 (unregistering): Released all slaves [ 1088.242189][T12261] FAULT_INJECTION: forcing a failure. [ 1088.242189][T12261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.261231][T12261] CPU: 1 PID: 12261 Comm: syz.4.1633 Not tainted syzkaller #0 [ 1088.268731][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1088.278796][T12261] Call Trace: [ 1088.282101][T12261] [ 1088.285051][T12261] dump_stack_lvl+0x18c/0x250 [ 1088.289764][T12261] ? show_regs_print_info+0x20/0x20 [ 1088.294985][T12261] ? load_image+0x420/0x420 [ 1088.299515][T12261] ? __might_fault+0xaa/0x120 [ 1088.304217][T12261] ? __lock_acquire+0x7eb0/0x7eb0 [ 1088.309261][T12261] ? do_futex+0x2ff/0x3e0 [ 1088.313614][T12261] should_fail_ex+0x394/0x4c0 [ 1088.318327][T12261] _copy_from_user+0x2f/0xe0 [ 1088.322940][T12261] __x64_sys_sigaltstack+0x124/0x2a0 [ 1088.328244][T12261] ? do_sigaction+0x480/0x480 [ 1088.332910][T12261] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1088.338897][T12261] ? lock_chain_count+0x20/0x20 [ 1088.343748][T12261] ? lockdep_hardirqs_on+0x98/0x150 [ 1088.348964][T12261] do_syscall_64+0x55/0xb0 [ 1088.353368][T12261] ? clear_bhb_loop+0x40/0x90 [ 1088.358040][T12261] ? clear_bhb_loop+0x40/0x90 [ 1088.362709][T12261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.368596][T12261] RIP: 0033:0x7fd47f59e1d9 [ 1088.373002][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.392601][T12261] RSP: 002b:00007fd4803f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1088.401004][T12261] RAX: ffffffffffffffda RBX: 00007fd47f825fa0 RCX: 00007fd47f59e1d9 [ 1088.408970][T12261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1088.416955][T12261] RBP: 00007fd47f635888 R08: 0000000000000000 R09: 0000000000000000 [ 1088.424914][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.432872][T12261] R13: 00007fd47f826038 R14: 00007fd47f825fa0 R15: 00007ffcb4fb3e88 [ 1088.440842][T12261] [ 1088.521641][T11274] Process accounting resumed [ 1088.531354][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1634'. [ 1088.649254][ T3536] bond3 (unregistering): Released all slaves [ 1090.105940][ T3536] bond2 (unregistering): Released all slaves [ 1090.425367][ T3536] bond1 (unregistering): Released all slaves [ 1091.853866][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 1091.935981][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 1092.021273][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.129420][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.641260][ T3536] bond0 (unregistering): Released all slaves [ 1092.752838][T12287] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 1092.761162][T12287] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 1093.810179][T12302] FAULT_INJECTION: forcing a failure. [ 1093.810179][T12302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.824599][T12302] CPU: 0 PID: 12302 Comm: syz.4.1643 Not tainted syzkaller #0 [ 1093.832104][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1093.842189][T12302] Call Trace: [ 1093.845488][T12302] [ 1093.848437][T12302] dump_stack_lvl+0x18c/0x250 [ 1093.853153][T12302] ? show_regs_print_info+0x20/0x20 [ 1093.858375][T12302] ? load_image+0x420/0x420 [ 1093.862905][T12302] ? __might_fault+0xaa/0x120 [ 1093.867606][T12302] ? __lock_acquire+0x7eb0/0x7eb0 [ 1093.872697][T12302] ? do_futex+0x2ff/0x3e0 [ 1093.877057][T12302] should_fail_ex+0x394/0x4c0 [ 1093.881773][T12302] _copy_from_user+0x2f/0xe0 [ 1093.886397][T12302] __x64_sys_sigaltstack+0x124/0x2a0 [ 1093.891717][T12302] ? do_sigaction+0x480/0x480 [ 1093.896416][T12302] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1093.902427][T12302] ? lock_chain_count+0x20/0x20 [ 1093.907304][T12302] ? lockdep_hardirqs_on+0x98/0x150 [ 1093.912690][T12302] do_syscall_64+0x55/0xb0 [ 1093.917115][T12302] ? clear_bhb_loop+0x40/0x90 [ 1093.921809][T12302] ? clear_bhb_loop+0x40/0x90 [ 1093.926503][T12302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.932405][T12302] RIP: 0033:0x7fd47f59e1d9 [ 1093.936827][T12302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.956437][T12302] RSP: 002b:00007fd4803f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1093.964856][T12302] RAX: ffffffffffffffda RBX: 00007fd47f825fa0 RCX: 00007fd47f59e1d9 [ 1093.972830][T12302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1093.980800][T12302] RBP: 00007fd47f635888 R08: 0000000000000000 R09: 0000000000000000 [ 1093.988774][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.996746][T12302] R13: 00007fd47f826038 R14: 00007fd47f825fa0 R15: 00007ffcb4fb3e88 [ 1094.004734][T12302] [ 1095.163316][ T8994] Process accounting resumed [ 1095.172096][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1645'. [ 1095.485557][ T3536] IPVS: stop unused estimator thread 0... [ 1095.831218][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 1098.483912][ T9304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1098.497937][ T9304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1098.506665][ T9304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1098.517935][ T9304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1098.536945][ T9304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1098.553361][ T9304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1098.739460][T12347] FAULT_INJECTION: forcing a failure. [ 1098.739460][T12347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.752713][T12347] CPU: 0 PID: 12347 Comm: syz.0.1653 Not tainted syzkaller #0 [ 1098.760201][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1098.770279][T12347] Call Trace: [ 1098.773578][T12347] [ 1098.776528][T12347] dump_stack_lvl+0x18c/0x250 [ 1098.781233][T12347] ? show_regs_print_info+0x20/0x20 [ 1098.786451][T12347] ? load_image+0x420/0x420 [ 1098.790983][T12347] ? __might_fault+0xaa/0x120 [ 1098.795691][T12347] ? __lock_acquire+0x7eb0/0x7eb0 [ 1098.800740][T12347] ? do_futex+0x2ff/0x3e0 [ 1098.805092][T12347] should_fail_ex+0x394/0x4c0 [ 1098.809783][T12347] _copy_from_user+0x2f/0xe0 [ 1098.814384][T12347] __x64_sys_sigaltstack+0x124/0x2a0 [ 1098.819678][T12347] ? do_sigaction+0x480/0x480 [ 1098.824353][T12347] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1098.830334][T12347] ? lock_chain_count+0x20/0x20 [ 1098.835192][T12347] ? lockdep_hardirqs_on+0x98/0x150 [ 1098.840397][T12347] do_syscall_64+0x55/0xb0 [ 1098.844811][T12347] ? clear_bhb_loop+0x40/0x90 [ 1098.849484][T12347] ? clear_bhb_loop+0x40/0x90 [ 1098.854162][T12347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1098.860058][T12347] RIP: 0033:0x7f797cf9e1d9 [ 1098.864474][T12347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.884078][T12347] RSP: 002b:00007f797de1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1098.892488][T12347] RAX: ffffffffffffffda RBX: 00007f797d225fa0 RCX: 00007f797cf9e1d9 [ 1098.900456][T12347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1098.908425][T12347] RBP: 00007f797d035888 R08: 0000000000000000 R09: 0000000000000000 [ 1098.916393][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.924357][T12347] R13: 00007f797d226038 R14: 00007f797d225fa0 R15: 00007ffd9cfc1098 [ 1098.932337][T12347] [ 1099.295203][T12340] chnl_net:caif_netlink_parms(): no params data found [ 1100.643492][ T9304] Bluetooth: hci4: command tx timeout [ 1100.675373][T12340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.683763][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1100.692389][T12340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.699654][T12340] bridge_slave_0: entered allmulticast mode [ 1100.707056][T12340] bridge_slave_0: entered promiscuous mode [ 1100.716283][T12340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.733284][T12340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.745792][T12340] bridge_slave_1: entered allmulticast mode [ 1100.763852][T12340] bridge_slave_1: entered promiscuous mode [ 1100.798895][T12340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.816134][T12340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.874360][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.903672][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1100.919481][T12340] team0: Port device team_slave_0 added [ 1100.925450][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1102.152489][T12340] team0: Port device team_slave_1 added [ 1102.178718][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.233212][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1102.247545][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.279155][ T9] usb 1-1: config 0 descriptor?? [ 1102.293737][ T9] usb 1-1: can't set config #0, error -71 [ 1102.313639][ T9] usb 1-1: USB disconnect, device number 20 [ 1102.326035][T12340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.350144][T12340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.400737][T12340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.429983][T12340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.480425][T12340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.513772][T12340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.723264][ T9304] Bluetooth: hci4: command tx timeout [ 1102.863887][T12340] hsr_slave_0: entered promiscuous mode [ 1102.871333][T12340] hsr_slave_1: entered promiscuous mode [ 1102.893339][T12340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.900930][T12340] Cannot create hsr debugfs directory [ 1104.803631][ T9304] Bluetooth: hci4: command tx timeout [ 1104.843600][T12393] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 1105.085502][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 1105.094734][T12395] bridge_slave_1: left allmulticast mode [ 1105.100446][T12395] bridge_slave_1: left promiscuous mode [ 1105.106718][T12395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.142310][T12395] bridge_slave_0: left allmulticast mode [ 1105.148361][T12395] bridge_slave_0: left promiscuous mode [ 1105.154946][T12395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.091631][ T9304] Bluetooth: hci4: command tx timeout [ 1107.275194][T12340] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1107.314629][T12340] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1107.395329][T12340] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1107.421860][T12340] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1108.275778][T12340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.296001][T12340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.357298][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.364492][ T6280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.409260][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.416504][ T6280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.426604][T12418] FAULT_INJECTION: forcing a failure. [ 1108.426604][T12418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.463989][T12418] CPU: 1 PID: 12418 Comm: syz.0.1661 Not tainted syzkaller #0 [ 1108.471496][T12418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1108.481572][T12418] Call Trace: [ 1108.484875][T12418] [ 1108.487823][T12418] dump_stack_lvl+0x18c/0x250 [ 1108.492527][T12418] ? show_regs_print_info+0x20/0x20 [ 1108.497742][T12418] ? load_image+0x420/0x420 [ 1108.502253][T12418] ? __might_fault+0xaa/0x120 [ 1108.506930][T12418] ? __lock_acquire+0x7eb0/0x7eb0 [ 1108.511956][T12418] ? do_futex+0x2ff/0x3e0 [ 1108.516290][T12418] should_fail_ex+0x394/0x4c0 [ 1108.520974][T12418] _copy_from_user+0x2f/0xe0 [ 1108.525568][T12418] __x64_sys_sigaltstack+0x124/0x2a0 [ 1108.530853][T12418] ? do_sigaction+0x480/0x480 [ 1108.535527][T12418] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1108.541510][T12418] ? lock_chain_count+0x20/0x20 [ 1108.546365][T12418] ? lockdep_hardirqs_on+0x98/0x150 [ 1108.551570][T12418] do_syscall_64+0x55/0xb0 [ 1108.555991][T12418] ? clear_bhb_loop+0x40/0x90 [ 1108.560664][T12418] ? clear_bhb_loop+0x40/0x90 [ 1108.565349][T12418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1108.571251][T12418] RIP: 0033:0x7f797cf9e1d9 [ 1108.575668][T12418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.595281][T12418] RSP: 002b:00007f797de1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1108.603706][T12418] RAX: ffffffffffffffda RBX: 00007f797d225fa0 RCX: 00007f797cf9e1d9 [ 1108.611677][T12418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1108.619645][T12418] RBP: 00007f797d035888 R08: 0000000000000000 R09: 0000000000000000 [ 1108.627612][T12418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.635604][T12418] R13: 00007f797d226038 R14: 00007f797d225fa0 R15: 00007ffd9cfc1098 [ 1108.643589][T12418] [ 1110.048868][T12340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.783553][T12340] veth0_vlan: entered promiscuous mode [ 1111.825841][T12340] veth1_vlan: entered promiscuous mode [ 1111.891044][T12340] veth0_macvtap: entered promiscuous mode [ 1111.902612][T12438] loop3: detected capacity change from 0 to 40427 [ 1111.935185][T12340] veth1_macvtap: entered promiscuous mode [ 1111.963948][T12438] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 1111.970882][T12438] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1112.014222][T12340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.026864][T12340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.047063][T12340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.062772][T12340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.126841][T12340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.137499][T12438] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1112.178582][T12340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.210114][T12340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.240885][T12340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.296596][T12340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.332876][T12438] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1112.347414][T12340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.380202][T12438] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1112.412007][T12340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.443795][T12340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.485913][T12340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.522389][T12340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.543242][T12340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.576920][T12340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.596561][T12340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.627310][T12340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.648628][ T5771] bio_check_eod: 2 callbacks suppressed [ 1112.648641][ T5771] syz-executor: attempt to access beyond end of device [ 1112.648641][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1112.677635][T12340] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.711205][T12340] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.715420][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1112.743293][T12340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.752027][T12340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.224711][ T5862] IPVS: starting estimator thread 0... [ 1114.285352][T12469] loop0: detected capacity change from 0 to 32768 [ 1114.315136][T12481] IPVS: using max 22 ests per chain, 52800 per kthread [ 1114.374033][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.381868][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.500193][T12469] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1114.521732][ T6280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.557356][ T6280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.804818][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 1115.929338][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.943383][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.297714][T12505] FAULT_INJECTION: forcing a failure. [ 1116.297714][T12505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.966662][T12505] CPU: 0 PID: 12505 Comm: syz.3.1675 Not tainted syzkaller #0 [ 1116.974182][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1116.984264][T12505] Call Trace: [ 1116.987577][T12505] [ 1116.990532][T12505] dump_stack_lvl+0x18c/0x250 [ 1116.995240][T12505] ? show_regs_print_info+0x20/0x20 [ 1117.000467][T12505] ? load_image+0x420/0x420 [ 1117.005006][T12505] ? __might_fault+0xaa/0x120 [ 1117.009712][T12505] ? __lock_acquire+0x7eb0/0x7eb0 [ 1117.014764][T12505] ? do_futex+0x2ff/0x3e0 [ 1117.014969][T12509] syz_tun: entered allmulticast mode [ 1117.019113][T12505] should_fail_ex+0x394/0x4c0 [ 1117.019154][T12505] _copy_from_user+0x2f/0xe0 [ 1117.033715][T12505] __x64_sys_sigaltstack+0x124/0x2a0 [ 1117.039032][T12505] ? do_sigaction+0x480/0x480 [ 1117.043730][T12505] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1117.049753][T12505] ? lock_chain_count+0x20/0x20 [ 1117.052798][T12508] syz_tun: left allmulticast mode [ 1117.054633][T12505] ? lockdep_hardirqs_on+0x98/0x150 [ 1117.054666][T12505] do_syscall_64+0x55/0xb0 [ 1117.054685][T12505] ? clear_bhb_loop+0x40/0x90 [ 1117.054706][T12505] ? clear_bhb_loop+0x40/0x90 [ 1117.078697][T12505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.084632][T12505] RIP: 0033:0x7f49c919e1d9 [ 1117.089075][T12505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.108709][T12505] RSP: 002b:00007f49c9f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1117.117156][T12505] RAX: ffffffffffffffda RBX: 00007f49c9425fa0 RCX: 00007f49c919e1d9 [ 1117.125154][T12505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1117.133149][T12505] RBP: 00007f49c9235888 R08: 0000000000000000 R09: 0000000000000000 [ 1117.141143][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.149133][T12505] R13: 00007f49c9426038 R14: 00007f49c9425fa0 R15: 00007ffd26e8f4e8 [ 1117.157144][T12505] [ 1118.405634][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 1118.561391][T12528] capability: warning: `syz.3.1685' uses deprecated v2 capabilities in a way that may be insecure [ 1119.644392][T12535] syz_tun: entered allmulticast mode [ 1119.690679][T12534] syz_tun: left allmulticast mode [ 1120.084912][ T27] audit: type=1800 audit(1791615079.779:34): pid=12547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1691" name="memory_backed" dev="configfs" ino=29926 res=0 errno=0 [ 1120.133490][ T27] audit: type=1800 audit(1791615079.779:35): pid=12547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1691" name="zoned" dev="configfs" ino=29927 res=0 errno=0 [ 1120.245818][ T27] audit: type=1800 audit(1791615079.869:36): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1691" name="power" dev="configfs" ino=29523 res=0 errno=0 [ 1121.529325][T12571] loop4: detected capacity change from 0 to 64 [ 1121.863236][ T5862] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1122.542763][ T9304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1122.634219][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 1122.696123][ T5862] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 1122.719972][ T5862] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.743648][ T5862] usb 7-1: config 251 has no interface number 0 [ 1122.749963][ T5862] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1122.803873][ T5862] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1122.843393][ T5862] usb 7-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1122.860750][T12591] syz_tun: entered allmulticast mode [ 1122.873614][ T5862] usb 7-1: config 251 interface 202 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.886485][T12589] syz_tun: left allmulticast mode [ 1122.907356][ T5862] usb 7-1: config 251 interface 202 has no altsetting 0 [ 1122.952157][ T5862] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1122.983095][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1122.991129][ T5862] usb 7-1: Product: syz [ 1123.013546][ T5862] usb 7-1: SerialNumber: syz [ 1123.321628][ T5862] cxacru 7-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1123.506793][ T5862] usb 7-1: USB disconnect, device number 2 [ 1125.183322][T12610] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 1125.191466][T12610] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 1125.200337][T12610] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 1125.210305][T12610] Error parsing options; rc = [-22] [ 1125.616187][T12571] ALSA: mixer_oss: invalid OSS volume '' [ 1126.032385][T12627] loop3: detected capacity change from 0 to 512 [ 1126.103530][T12627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1126.268465][T12627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.282033][T12627] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.772884][T12642] overlayfs: failed index dir cleanup (-512) [ 1127.779278][T12642] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1127.988323][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.375186][T12673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1131.004053][T12685] syz_tun: entered allmulticast mode [ 1131.747422][T12684] syz_tun: left allmulticast mode [ 1132.345625][T12695] loop0: detected capacity change from 0 to 128 [ 1132.964629][T12695] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1132.978122][T12695] ext4 filesystem being mounted at /444/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.260521][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1134.214836][T12711] loop3: detected capacity change from 0 to 64 [ 1134.642352][T12724] syz_tun: entered allmulticast mode [ 1134.668584][T12723] syz_tun: left allmulticast mode [ 1135.853605][T12728] loop4: detected capacity change from 0 to 32768 [ 1135.966577][T12745] loop0: detected capacity change from 0 to 2048 [ 1137.505371][T12760] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1139.443612][T12774] tipc: Started in network mode [ 1139.448682][T12774] tipc: Node identity 2000004, cluster identity 4711 [ 1139.455533][T12774] tipc: Node number set to 33554436 [ 1140.174090][T12773] syz_tun: entered allmulticast mode [ 1140.243547][T12772] syz_tun: left allmulticast mode [ 1142.036197][T12801] FAULT_INJECTION: forcing a failure. [ 1142.036197][T12801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.093203][T12801] CPU: 0 PID: 12801 Comm: syz.4.1742 Not tainted syzkaller #0 [ 1142.100736][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1142.110817][T12801] Call Trace: [ 1142.114120][T12801] [ 1142.117074][T12801] dump_stack_lvl+0x18c/0x250 [ 1142.121779][T12801] ? show_regs_print_info+0x20/0x20 [ 1142.126999][T12801] ? load_image+0x420/0x420 [ 1142.131557][T12801] ? __might_fault+0xaa/0x120 [ 1142.136261][T12801] ? __lock_acquire+0x7eb0/0x7eb0 [ 1142.141315][T12801] ? do_futex+0x2ff/0x3e0 [ 1142.145674][T12801] should_fail_ex+0x394/0x4c0 [ 1142.150393][T12801] _copy_from_user+0x2f/0xe0 [ 1142.155018][T12801] __x64_sys_sigaltstack+0x124/0x2a0 [ 1142.160346][T12801] ? do_sigaction+0x480/0x480 [ 1142.165055][T12801] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1142.171067][T12801] ? lock_chain_count+0x20/0x20 [ 1142.175953][T12801] ? lockdep_hardirqs_on+0x98/0x150 [ 1142.181184][T12801] do_syscall_64+0x55/0xb0 [ 1142.185621][T12801] ? clear_bhb_loop+0x40/0x90 [ 1142.190325][T12801] ? clear_bhb_loop+0x40/0x90 [ 1142.195039][T12801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.200972][T12801] RIP: 0033:0x7fd47f59e1d9 [ 1142.205412][T12801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.225038][T12801] RSP: 002b:00007fd4803f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1142.233460][T12801] RAX: ffffffffffffffda RBX: 00007fd47f825fa0 RCX: 00007fd47f59e1d9 [ 1142.241432][T12801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1142.249414][T12801] RBP: 00007fd47f635888 R08: 0000000000000000 R09: 0000000000000000 [ 1142.257389][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.265370][T12801] R13: 00007fd47f826038 R14: 00007fd47f825fa0 R15: 00007ffcb4fb3e88 [ 1142.273362][T12801] [ 1142.510896][T12812] binder: BINDER_SET_CONTEXT_MGR already set [ 1142.523080][T12812] binder: 12807:12812 ioctl 4018620d 200000000100 returned -16 [ 1145.223432][T11274] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1145.413157][T11274] usb 1-1: Using ep0 maxpacket: 32 [ 1145.431220][T11274] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1145.458569][T11274] usb 1-1: config 0 has no interface number 0 [ 1145.476610][T11274] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1145.527452][T11274] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1145.571159][T11274] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1145.603165][T11274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.641648][T11274] usb 1-1: Product: syz [ 1145.651755][T11274] usb 1-1: Manufacturer: syz [ 1145.682117][T11274] usb 1-1: SerialNumber: syz [ 1145.768259][T11274] usb 1-1: config 0 descriptor?? [ 1145.780440][T11274] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1145.985361][T11274] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 1145.992511][T11274] quatech2: probe of 1-1:0.51 failed with error -90 [ 1146.203167][T11274] usb 1-1: USB disconnect, device number 21 [ 1148.009488][T12861] loop4: detected capacity change from 0 to 512 [ 1148.133748][T12863] loop6: detected capacity change from 0 to 512 [ 1148.148060][T12863] EXT4-fs: Ignoring removed nobh option [ 1148.354646][T12861] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1148.366910][T12863] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1148.373804][T12863] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1148.386927][T12863] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1148.535557][T12863] EXT4-fs (loop6): 1 truncate cleaned up [ 1148.541877][T12863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1148.568520][T12860] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1148.641938][T12340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.722066][T12861] EXT4-fs (loop4): 1 truncate cleaned up [ 1148.829423][T12861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.512417][ T27] audit: type=1800 audit(1791615108.979:37): pid=12873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1748" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1151.011894][ T9303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.425370][T12907] gadgetfs: bound to dummy_udc driver [ 1154.956900][ T27] audit: type=1326 audit(1791615114.509:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c919e1d9 code=0x7ffc0000 [ 1155.010252][ T27] audit: type=1326 audit(1791615114.509:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f49c919e1d9 code=0x7ffc0000 [ 1155.040617][ T27] audit: type=1326 audit(1791615114.509:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c919e1d9 code=0x7ffc0000 [ 1155.252191][ T27] audit: type=1326 audit(1791615114.509:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49c915ea0e code=0x7ffc0000 [ 1155.351242][ T27] audit: type=1326 audit(1791615114.509:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f49c919f4d7 code=0x7ffc0000 [ 1156.423411][ T27] audit: type=1326 audit(1791615114.509:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49c919e1d9 code=0x7ffc0000 [ 1156.473427][ T27] audit: type=1326 audit(1791615114.509:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f49c919f4d7 code=0x7ffc0000 [ 1156.562161][ T27] audit: type=1326 audit(1791615114.509:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f49c915ea0e code=0x7ffc0000 [ 1156.667097][ T27] audit: type=1326 audit(1791615114.519:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c919e1d9 code=0x7ffc0000 [ 1156.748988][ T27] audit: type=1326 audit(1791615114.519:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.1763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49c919fa47 code=0x7ffc0000 [ 1156.856063][T12950] loop3: detected capacity change from 0 to 128 [ 1158.338228][ T5862] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1158.566921][T12961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 1158.617878][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 1158.636243][ T5862] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.273097][ T5862] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.293087][ T5862] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1159.299855][ T5862] usb 7-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1159.343078][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.361062][ T5862] usb 7-1: config 0 descriptor?? [ 1161.287474][ T5862] usbhid 7-1:0.0: can't add hid device: -71 [ 1161.308729][ T5862] usbhid: probe of 7-1:0.0 failed with error -71 [ 1161.353381][ T5862] usb 7-1: USB disconnect, device number 3 [ 1167.310751][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 1172.816648][T13067] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 1172.867669][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 1173.953995][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1173.954028][ T27] audit: type=1326 audit(1791615133.619:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47f59e1d9 code=0x7ffc0000 [ 1174.319713][ T27] audit: type=1326 audit(1791615133.619:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd47f59e1d9 code=0x7ffc0000 [ 1174.351106][ T27] audit: type=1326 audit(1791615133.619:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47f59e1d9 code=0x7ffc0000 [ 1174.622217][ T27] audit: type=1326 audit(1791615133.629:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd47f59e1d9 code=0x7ffc0000 [ 1174.743919][ T27] audit: type=1326 audit(1791615133.629:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47f59e1d9 code=0x7ffc0000 [ 1174.817553][ T27] audit: type=1326 audit(1791615133.629:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47f59e1d9 code=0x7ffc0000 [ 1175.960271][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 1177.369231][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.379840][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.595761][T13123] loop3: detected capacity change from 0 to 64 [ 1183.655111][T13177] loop0: detected capacity change from 0 to 4096 [ 1183.681827][T13177] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1183.867904][T13177] ntfs3: loop0: ino=19, mi_enum_attr [ 1183.883938][T13177] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1183.950609][T13177] ntfs3: loop0: ino=18, mi_enum_attr [ 1183.959939][T13177] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1184.083312][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1184.293414][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1184.303774][ T8] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1184.312113][ T8] usb 4-1: config 0 has no interface number 0 [ 1184.330429][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1184.346848][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.366932][ T8] usb 4-1: Product: syz [ 1184.377055][ T8] usb 4-1: Manufacturer: syz [ 1184.388090][ T8] usb 4-1: SerialNumber: syz [ 1184.402463][ T8] usb 4-1: config 0 descriptor?? [ 1184.460420][ T8] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1184.876733][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1185.205239][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1185.832914][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1185.876021][ T8] usb 4-1: USB disconnect, device number 13 [ 1185.914464][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1185.966532][T13210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 1186.022688][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 1186.923904][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1186.956612][ T8] quatech2 4-1:0.51: device disconnected [ 1188.253673][ T3536] Bluetooth: hci0: Frame reassembly failed (-84) [ 1188.513401][ T8994] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1188.753369][ T8994] usb 1-1: Using ep0 maxpacket: 32 [ 1188.765890][ T8994] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1188.783454][ T8994] usb 1-1: config 0 has no interface number 0 [ 1188.807160][ T8994] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1188.817606][ T8994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.843106][ T8994] usb 1-1: Product: syz [ 1188.849870][ T8994] usb 1-1: Manufacturer: syz [ 1188.874700][ T8994] usb 1-1: SerialNumber: syz [ 1188.964070][ T8994] usb 1-1: config 0 descriptor?? [ 1189.146740][ T8994] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1190.129408][ T8994] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1190.323414][ T9304] Bluetooth: hci0: command 0xfc11 tx timeout [ 1190.330268][ T5775] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1190.498416][ T8994] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1191.626529][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1192.513116][ T5862] usb 1-1: USB disconnect, device number 23 [ 1192.532482][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1192.677449][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1192.692911][ T5862] quatech2 1-1:0.51: device disconnected [ 1198.678995][ T3536] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.847617][ T3536] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.875679][T13296] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 1198.962728][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 1199.119425][ T3536] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.365678][T13286] loop6: detected capacity change from 0 to 32768 [ 1200.434684][T13286] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop6 scanned by syz.6.1870 (13286) [ 1200.487540][T13242] udevd[13242]: incorrect btrfs checksum on /dev/loop6 [ 1200.526676][ T3536] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.430855][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 1207.863664][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1896'. [ 1207.872606][T13381] bridge_slave_1: left allmulticast mode [ 1207.878504][T13381] bridge_slave_1: left promiscuous mode [ 1207.884191][T13381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.917021][T13381] bridge_slave_0: left allmulticast mode [ 1207.922667][T13381] bridge_slave_0: left promiscuous mode [ 1207.928487][T13381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.195879][ T3536] hsr_slave_0: left promiscuous mode [ 1208.233202][ T3536] hsr_slave_1: left promiscuous mode [ 1208.293777][T13391] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1209.025492][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.032952][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.058724][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.068012][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.112414][ T3536] bridge_slave_1: left allmulticast mode [ 1209.132125][ T3536] bridge_slave_1: left promiscuous mode [ 1209.153231][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.166485][ T3536] bridge_slave_0: left allmulticast mode [ 1209.172152][ T3536] bridge_slave_0: left promiscuous mode [ 1209.190877][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.463106][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1210.399781][ T3536] veth1_macvtap: left promiscuous mode [ 1210.414436][ T3536] veth0_macvtap: left promiscuous mode [ 1210.460275][ T3536] veth1_vlan: left promiscuous mode [ 1210.486614][ T3536] veth0_vlan: left promiscuous mode [ 1210.573557][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1210.605645][ T8] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1210.650330][ T8] usb 7-1: config 0 has no interface number 0 [ 1210.689178][ T8] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1210.727885][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.767447][ T8] usb 7-1: Product: syz [ 1210.777561][ T8] usb 7-1: Manufacturer: syz [ 1210.792427][ T8] usb 7-1: SerialNumber: syz [ 1210.826067][ T8] usb 7-1: config 0 descriptor?? [ 1212.536629][ T8] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1212.557803][ T8] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1212.565372][ T8] quatech2: probe of 7-1:0.51 failed with error -71 [ 1212.584601][ T8] usb 7-1: USB disconnect, device number 4 [ 1217.502782][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 1217.578595][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 1218.894303][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.957242][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.037556][T11274] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1219.223336][T11274] usb 7-1: Using ep0 maxpacket: 32 [ 1219.230201][T11274] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1219.248824][T11274] usb 7-1: config 0 has no interface number 0 [ 1219.271589][T11274] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1219.293159][T11274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.301207][T11274] usb 7-1: Product: syz [ 1219.313133][T11274] usb 7-1: Manufacturer: syz [ 1219.317760][T11274] usb 7-1: SerialNumber: syz [ 1219.339755][T11274] usb 7-1: config 0 descriptor?? [ 1219.354996][T11274] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1219.447370][ T3536] bond0 (unregistering): Released all slaves [ 1219.725702][T11274] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1219.824736][T11274] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1219.981968][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1219.990369][T11274] usb 7-1: USB disconnect, device number 5 [ 1220.033912][T11274] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1220.115187][T13459] loop3: detected capacity change from 0 to 512 [ 1220.156672][T11274] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1220.211874][T13459] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1220.229998][T11274] quatech2 7-1:0.51: device disconnected [ 1220.252847][T13459] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1223.773690][T13507] loop6: detected capacity change from 0 to 1024 [ 1223.883275][ T5862] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1224.120386][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 1224.146712][ T5862] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1224.165364][ T5862] usb 4-1: config 0 has no interface number 0 [ 1224.185741][ T5862] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1224.203128][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.211149][ T5862] usb 4-1: Product: syz [ 1224.225558][ T5862] usb 4-1: Manufacturer: syz [ 1224.230188][ T5862] usb 4-1: SerialNumber: syz [ 1224.280386][ T5862] usb 4-1: config 0 descriptor?? [ 1224.307352][ T5862] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1225.013666][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1225.119137][ T5862] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1225.159847][ T5862] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1225.203319][ T5862] usb 4-1: USB disconnect, device number 14 [ 1225.650508][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1225.742211][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1225.754181][ T5862] quatech2 4-1:0.51: device disconnected [ 1231.617552][T13549] loop3: detected capacity change from 0 to 40427 [ 1231.683680][T13549] F2FS-fs (loop3): heap/no_heap options were deprecated [ 1231.706462][T13549] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 1232.329219][T13593] loop0: detected capacity change from 0 to 1024 [ 1232.943261][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1234.497855][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1234.523431][ T8] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1234.531552][ T8] usb 4-1: config 0 has no interface number 0 [ 1234.571436][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1234.583062][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.591088][ T8] usb 4-1: Product: syz [ 1234.615638][ T8] usb 4-1: Manufacturer: syz [ 1234.641229][ T8] usb 4-1: SerialNumber: syz [ 1234.660952][ T8] usb 4-1: config 0 descriptor?? [ 1234.671289][T13616] loop7: detected capacity change from 0 to 4 [ 1234.687029][ T8] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1234.698284][ C0] blk_print_req_error: 8 callbacks suppressed [ 1234.698299][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.713595][ C0] buffer_io_error: 8 callbacks suppressed [ 1234.713606][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1234.730570][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.739780][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1234.754641][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.763856][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1234.783078][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.792270][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1234.804937][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.814141][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1234.822084][T13616] ldm_validate_partition_table(): Disk read failed. [ 1234.985396][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.994646][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1235.013293][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.022443][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1235.031769][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.040970][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1235.053067][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1235.067711][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1235.082206][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.091400][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1235.099371][T13616] Dev loop7: unable to read RDB block 0 [ 1235.118265][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.127413][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1235.136883][T13616] loop7: unable to read partition table [ 1235.142693][T13616] loop7: partition table beyond EOD, truncated [ 1235.160306][T13616] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CîjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5) [ 1235.578963][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1235.580384][T11274] usb 4-1: USB disconnect, device number 15 [ 1235.747078][T11274] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1235.786641][T11274] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1235.837444][T11274] quatech2 4-1:0.51: device disconnected [ 1237.303337][T13636] syz.4.1950 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1239.774657][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.780986][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.283196][ T5862] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1240.497698][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 1240.545896][ T5862] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1240.595805][ T5862] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1240.623086][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.651538][ T5862] usb 7-1: Product: syz [ 1240.666942][ T5862] usb 7-1: Manufacturer: syz [ 1240.671568][ T5862] usb 7-1: SerialNumber: syz [ 1240.714562][ T5862] usb 7-1: config 0 descriptor?? [ 1240.722810][ T5862] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1240.741564][ T5862] usb 7-1: setting power ON [ 1240.757131][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 1240.800692][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1240.831336][ T5862] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1240.872619][ T5862] usb 7-1: media controller created [ 1240.985693][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.050210][ T5862] usb 7-1: selecting invalid altsetting 6 [ 1241.071857][ T5862] usb 7-1: digital interface selection failed (-22) [ 1241.089486][ T5862] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1241.263190][ T5862] usb 7-1: setting power OFF [ 1241.292635][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 1241.339158][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1241.366028][ T5862] (NULL device *): no alternate interface [ 1241.926411][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1242.030614][ T5862] usb 7-1: USB disconnect, device number 6 [ 1242.387204][T13696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 1242.521609][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1962'. [ 1244.862917][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1974'. [ 1246.593106][ T5862] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1246.823100][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 1247.751285][ T5862] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1247.783091][ T5862] usb 1-1: config 0 has no interface number 0 [ 1247.823147][ T5862] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1247.873141][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.907026][ T5862] usb 1-1: Product: syz [ 1247.911234][ T5862] usb 1-1: Manufacturer: syz [ 1247.937431][ T5862] usb 1-1: SerialNumber: syz [ 1247.960237][ T5862] usb 1-1: config 0 descriptor?? [ 1248.004147][ T5862] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1248.224092][ T5862] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1249.274717][ T5862] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1249.459207][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1249.459563][ T789] usb 1-1: USB disconnect, device number 24 [ 1249.540166][ T789] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1249.632423][ T789] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1249.677427][ T789] quatech2 1-1:0.51: device disconnected [ 1250.802461][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 1252.903805][T13830] loop3: detected capacity change from 0 to 2048 [ 1252.977796][T13830] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1252.993634][ T5759] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1253.206886][ T5759] usb 7-1: Using ep0 maxpacket: 32 [ 1253.229470][ T5759] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1253.260008][ T5759] usb 7-1: config 0 has no interface number 0 [ 1253.283702][ T5759] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1253.310963][ T5759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.329374][ T5759] usb 7-1: Product: syz [ 1253.349839][ T5759] usb 7-1: Manufacturer: syz [ 1253.372241][ T5759] usb 7-1: SerialNumber: syz [ 1253.381640][ T5759] usb 7-1: config 0 descriptor?? [ 1253.400038][ T5759] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1253.608583][ T5759] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1253.649102][ T5759] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1253.964735][T13836] loop4: detected capacity change from 0 to 40427 [ 1253.993285][T13836] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 1253.999937][T13836] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1254.026355][T13836] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1254.038436][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1254.053366][ T5759] usb 7-1: USB disconnect, device number 7 [ 1254.090590][ T5759] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1254.136648][ T5759] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1254.193733][ T5759] quatech2 7-1:0.51: device disconnected [ 1254.266928][T13836] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1254.286656][T13836] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1254.421325][T13862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 1254.486801][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 1254.609368][ T9303] syz-executor: attempt to access beyond end of device [ 1254.609368][ T9303] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1254.711151][ T9303] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1254.916078][T13869] FAULT_INJECTION: forcing a failure. [ 1254.916078][T13869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1254.970626][T13869] CPU: 1 PID: 13869 Comm: syz.6.2002 Not tainted syzkaller #0 [ 1254.978142][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1254.988216][T13869] Call Trace: [ 1254.991507][T13869] [ 1254.994448][T13869] dump_stack_lvl+0x18c/0x250 [ 1254.999152][T13869] ? show_regs_print_info+0x20/0x20 [ 1255.004371][T13869] ? load_image+0x420/0x420 [ 1255.008905][T13869] ? __might_fault+0xaa/0x120 [ 1255.013613][T13869] ? __lock_acquire+0x7eb0/0x7eb0 [ 1255.018644][T13869] ? __virt_addr_valid+0x10c/0x380 [ 1255.023753][T13869] should_fail_ex+0x394/0x4c0 [ 1255.028434][T13869] _copy_to_user+0x2f/0xa0 [ 1255.032847][T13869] bpf_verifier_vlog+0x4e6/0x840 [ 1255.037800][T13869] btf_verifier_log+0x11e/0x1a0 [ 1255.042665][T13869] ? btf_parse_graph_root+0xb00/0xb00 [ 1255.048050][T13869] ? kvmalloc_node+0x70/0x180 [ 1255.052757][T13869] ? __kmalloc_node+0xe4/0x240 [ 1255.057560][T13869] ? btf_check_all_metas+0x5d9/0xaf0 [ 1255.062875][T13869] ? rcu_is_watching+0x15/0xb0 [ 1255.067666][T13869] btf_check_all_metas+0x9a7/0xaf0 [ 1255.072773][T13869] btf_parse_type_sec+0xfc/0x1960 [ 1255.077781][T13869] ? btf_check_sec_info+0x350/0x350 [ 1255.082974][T13869] ? __virt_addr_valid+0x10c/0x380 [ 1255.088095][T13869] ? btf_verifier_log+0x1a0/0x1a0 [ 1255.093111][T13869] ? btf_parse_hdr+0x545/0x700 [ 1255.097872][T13869] ? btf_parse_str_sec+0x20d/0x2a0 [ 1255.102985][T13869] btf_new_fd+0x440/0x9e0 [ 1255.107328][T13869] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1255.112426][T13869] ? capable+0x88/0xe0 [ 1255.116486][T13869] __sys_bpf+0x670/0x890 [ 1255.120717][T13869] ? bpf_link_show_fdinfo+0x560/0x560 [ 1255.126089][T13869] ? lock_chain_count+0x20/0x20 [ 1255.130924][T13869] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1255.136899][T13869] __x64_sys_bpf+0x7c/0x90 [ 1255.141300][T13869] do_syscall_64+0x55/0xb0 [ 1255.145702][T13869] ? clear_bhb_loop+0x40/0x90 [ 1255.150383][T13869] ? clear_bhb_loop+0x40/0x90 [ 1255.155066][T13869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1255.160962][T13869] RIP: 0033:0x7f6b6419e1d9 [ 1255.165370][T13869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.184969][T13869] RSP: 002b:00007f6b64fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1255.193371][T13869] RAX: ffffffffffffffda RBX: 00007f6b64425fa0 RCX: 00007f6b6419e1d9 [ 1255.201442][T13869] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1255.209409][T13869] RBP: 00007f6b64235888 R08: 0000000000000000 R09: 0000000000000000 [ 1255.217370][T13869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1255.225334][T13869] R13: 00007f6b64426038 R14: 00007f6b64425fa0 R15: 00007fff21fc7c88 [ 1255.233310][T13869] [ 1256.502811][T13892] loop3: detected capacity change from 0 to 2048 [ 1256.678122][T13892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1257.998362][T13910] loop6: detected capacity change from 0 to 512 [ 1258.023096][ T789] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1258.039005][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 1258.174488][T13910] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1258.181301][T13910] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1258.302245][T13910] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.2013: bad orphan inode 131083 [ 1258.382452][T13910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.393054][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 1258.476222][T13910] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1258.667830][ T789] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1258.676215][ T789] usb 1-1: config 0 has no interface number 0 [ 1258.686047][ T789] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1258.703045][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.711185][ T789] usb 1-1: Product: syz [ 1258.723087][ T789] usb 1-1: Manufacturer: syz [ 1258.727797][ T789] usb 1-1: SerialNumber: syz [ 1258.745188][ T789] usb 1-1: config 0 descriptor?? [ 1258.754119][ T789] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1259.299009][ T789] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1259.327089][ T789] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1259.333460][T12340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.840874][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1259.850310][ T789] usb 1-1: USB disconnect, device number 25 [ 1259.899655][ T789] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1260.310660][ T789] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1260.368553][ T789] quatech2 1-1:0.51: device disconnected [ 1260.978070][T13946] loop3: detected capacity change from 0 to 2048 [ 1261.839722][T13946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1264.263468][ T789] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1265.263175][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 1265.307550][ T789] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1265.340982][ T789] usb 1-1: config 0 has no interface number 0 [ 1265.404195][ T789] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1265.433179][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.482066][ T789] usb 1-1: Product: syz [ 1265.499170][ T789] usb 1-1: Manufacturer: syz [ 1265.514103][ T789] usb 1-1: SerialNumber: syz [ 1265.543656][ T789] usb 1-1: config 0 descriptor?? [ 1265.581113][ T789] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1265.663347][T14005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 1265.714171][T14006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2024'. [ 1265.905649][ T789] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1266.210155][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1266.357191][ T789] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1266.374549][ T789] usb 1-1: USB disconnect, device number 26 [ 1266.435580][ T789] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1266.454313][ T789] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1266.473853][ T789] quatech2 1-1:0.51: device disconnected [ 1269.894247][ T9304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1269.905217][ T9304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1269.913731][ T9304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1269.922243][ T9304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1269.930759][ T9304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1269.941487][ T9304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1270.033259][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 1270.936416][T14045] chnl_net:caif_netlink_parms(): no params data found [ 1271.474840][T14045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.520641][T14045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.556905][T14045] bridge_slave_0: entered allmulticast mode [ 1271.589940][T14045] bridge_slave_0: entered promiscuous mode [ 1271.654939][T14045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.821204][ T9304] Bluetooth: hci0: command tx timeout [ 1272.873451][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.880693][T14045] bridge_slave_1: entered allmulticast mode [ 1272.888323][T14045] bridge_slave_1: entered promiscuous mode [ 1272.978176][T14045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.990364][T14045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.027883][T14045] team0: Port device team_slave_0 added [ 1273.048868][T14045] team0: Port device team_slave_1 added [ 1273.131854][T14045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.166161][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.220300][T14045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.244241][T14045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.251212][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.319380][T14045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.481313][T14045] hsr_slave_0: entered promiscuous mode [ 1273.493961][T14045] hsr_slave_1: entered promiscuous mode [ 1273.501209][T14045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1273.523463][T14045] Cannot create hsr debugfs directory [ 1273.531309][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 1275.201754][ T5775] Bluetooth: hci0: command tx timeout [ 1276.032111][T14045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1276.062401][T14045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1277.283084][ T5775] Bluetooth: hci0: command tx timeout [ 1277.391178][T14045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1277.428126][T14045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1277.845492][T14045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.953650][T14045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.079367][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.086567][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.173529][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.180715][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.424826][T14045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1279.363599][ T5775] Bluetooth: hci0: command tx timeout [ 1279.548368][T14045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.577661][T14161] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input29 [ 1281.613304][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 1285.386012][T14045] veth0_vlan: entered promiscuous mode [ 1285.451617][T14045] veth1_vlan: entered promiscuous mode [ 1285.515055][T14045] veth0_macvtap: entered promiscuous mode [ 1285.563948][T14045] veth1_macvtap: entered promiscuous mode [ 1285.595139][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.608016][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.623172][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.643224][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.663015][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.712883][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.807626][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.936342][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.071812][T14045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1286.443147][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.492165][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.502158][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.512865][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.522709][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.533328][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.544120][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.566101][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.577389][T14045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.588989][T14045] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.597813][T14045] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.606583][T14045] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.615595][T14045] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.736881][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.776010][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2074'. [ 1287.793262][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.941992][ T6280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.977274][ T6280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.458641][T14247] tipc: Started in network mode [ 1295.463855][T14247] tipc: Node identity 2000004, cluster identity 4711 [ 1295.470772][T14247] tipc: Node number set to 33554436 [ 1296.690132][T14262] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30 [ 1299.261636][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 1300.261754][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.327807][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.703298][T11274] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1302.989829][T11274] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1303.088568][T11274] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1304.389423][T11274] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1304.435550][T11274] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.396559][T11274] qmi_wwan: probe of 8-1:1.0 failed with error -22 [ 1306.466887][T13113] usb 8-1: USB disconnect, device number 2 [ 1308.019823][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2099'. [ 1308.029714][T14305] bridge_slave_1: left allmulticast mode [ 1308.035465][T14305] bridge_slave_1: left promiscuous mode [ 1308.042471][T14305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.072236][T14305] bridge_slave_0: left allmulticast mode [ 1308.078086][T14305] bridge_slave_0: left promiscuous mode [ 1308.084771][T14305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.071133][T14357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31 [ 1317.130393][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2112'. [ 1317.941961][T14364] Bluetooth: MGMT ver 1.22 [ 1318.763372][T13113] Process accounting resumed [ 1322.735395][T14387] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1331.723074][T11220] Process accounting resumed [ 1334.214486][T14453] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1336.918265][ T8] Process accounting resumed [ 1346.510503][T11274] Process accounting resumed [ 1347.311681][T14514] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1353.233466][T11274] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1353.365994][ T8] Process accounting resumed [ 1353.415432][T11274] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.035639][T11274] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1354.045783][T11274] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1354.056781][T11274] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.069810][T11274] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1354.078957][T11274] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.091263][T11274] usb 7-1: config 0 descriptor?? [ 1354.342325][T11274] usb 7-1: USB disconnect, device number 8 [ 1354.348525][T14557] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1359.743280][ T5935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.907223][ T5935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.064643][T14592] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1361.004935][ T5935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.993863][T14606] loop4: detected capacity change from 0 to 1024 [ 1362.313770][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.320084][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.399794][T14606] hfsplus: bad catalog file entry [ 1362.405170][T14606] hfsplus: failed to load root directory [ 1362.575564][ T5935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.974285][ T5935] tipc: Left network mode [ 1365.125805][ T8] Process accounting resumed [ 1373.123626][T14687] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1373.231185][T14690] FAULT_INJECTION: forcing a failure. [ 1373.231185][T14690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1373.291293][T14690] CPU: 0 PID: 14690 Comm: syz.7.2192 Not tainted syzkaller #0 [ 1373.298805][T14690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1373.308881][T14690] Call Trace: [ 1373.312177][T14690] [ 1373.315134][T14690] dump_stack_lvl+0x18c/0x250 [ 1373.319844][T14690] ? show_regs_print_info+0x20/0x20 [ 1373.325072][T14690] ? load_image+0x420/0x420 [ 1373.329607][T14690] ? __might_fault+0xaa/0x120 [ 1373.334311][T14690] ? __lock_acquire+0x7eb0/0x7eb0 [ 1373.339363][T14690] ? bpf_vlog_reverse_ubuf+0x34b/0x3a0 [ 1373.344862][T14690] should_fail_ex+0x394/0x4c0 [ 1373.349579][T14690] _copy_to_user+0x2f/0xa0 [ 1373.354027][T14690] btf_new_fd+0x5c0/0x9e0 [ 1373.358400][T14690] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1373.363550][T14690] ? capable+0x88/0xe0 [ 1373.367649][T14690] __sys_bpf+0x670/0x890 [ 1373.371924][T14690] ? bpf_link_show_fdinfo+0x560/0x560 [ 1373.377338][T14690] ? lock_chain_count+0x20/0x20 [ 1373.382218][T14690] __x64_sys_bpf+0x7c/0x90 [ 1373.386659][T14690] do_syscall_64+0x55/0xb0 [ 1373.391098][T14690] ? clear_bhb_loop+0x40/0x90 [ 1373.395800][T14690] ? clear_bhb_loop+0x40/0x90 [ 1373.400498][T14690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1373.406423][T14690] RIP: 0033:0x7f5273d9e1d9 [ 1373.410839][T14690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.430443][T14690] RSP: 002b:00007f5274d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1373.438856][T14690] RAX: ffffffffffffffda RBX: 00007f5274025fa0 RCX: 00007f5273d9e1d9 [ 1373.446823][T14690] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1373.454795][T14690] RBP: 00007f5273e35888 R08: 0000000000000000 R09: 0000000000000000 [ 1373.462761][T14690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.470726][T14690] R13: 00007f5274026038 R14: 00007f5274025fa0 R15: 00007fff5f3b9518 [ 1373.478712][T14690] [ 1374.984192][T13113] Process accounting resumed [ 1381.572142][ T5935] hsr_slave_0: left promiscuous mode [ 1381.599887][T14726] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1381.623070][ T5935] hsr_slave_1: left promiscuous mode [ 1381.713237][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.720686][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.788595][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.819724][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.204189][T14738] FAULT_INJECTION: forcing a failure. [ 1383.204189][T14738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1383.227961][ T5935] veth1_macvtap: left promiscuous mode [ 1383.234850][ T5935] veth0_macvtap: left promiscuous mode [ 1383.243777][ T5935] veth1_vlan: left promiscuous mode [ 1383.249137][ T5935] veth0_vlan: left promiscuous mode [ 1383.252996][T14738] CPU: 0 PID: 14738 Comm: syz.6.2204 Not tainted syzkaller #0 [ 1383.261788][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1383.271841][T14738] Call Trace: [ 1383.275115][T14738] [ 1383.278040][T14738] dump_stack_lvl+0x18c/0x250 [ 1383.282739][T14738] ? show_regs_print_info+0x20/0x20 [ 1383.287945][T14738] ? load_image+0x420/0x420 [ 1383.292458][T14738] ? __lock_acquire+0x7eb0/0x7eb0 [ 1383.297493][T14738] ? __virt_addr_valid+0x10c/0x380 [ 1383.302620][T14738] should_fail_ex+0x394/0x4c0 [ 1383.307320][T14738] _copy_to_user+0x2f/0xa0 [ 1383.311743][T14738] bpf_vlog_reverse_ubuf+0x2ad/0x3a0 [ 1383.317042][T14738] bpf_vlog_finalize+0x12b/0x3e0 [ 1383.321988][T14738] btf_new_fd+0x4ca/0x9e0 [ 1383.326332][T14738] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1383.331448][T14738] ? capable+0x88/0xe0 [ 1383.335522][T14738] __sys_bpf+0x670/0x890 [ 1383.339764][T14738] ? bpf_link_show_fdinfo+0x560/0x560 [ 1383.345169][T14738] ? lock_chain_count+0x20/0x20 [ 1383.350030][T14738] __x64_sys_bpf+0x7c/0x90 [ 1383.354449][T14738] do_syscall_64+0x55/0xb0 [ 1383.358862][T14738] ? clear_bhb_loop+0x40/0x90 [ 1383.363533][T14738] ? clear_bhb_loop+0x40/0x90 [ 1383.368208][T14738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.374117][T14738] RIP: 0033:0x7f6b6419e1d9 [ 1383.378535][T14738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.398143][T14738] RSP: 002b:00007f6b64fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1383.406565][T14738] RAX: ffffffffffffffda RBX: 00007f6b64425fa0 RCX: 00007f6b6419e1d9 [ 1383.414536][T14738] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1383.422505][T14738] RBP: 00007f6b64235888 R08: 0000000000000000 R09: 0000000000000000 [ 1383.430474][T14738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.438439][T14738] R13: 00007f6b64426038 R14: 00007f6b64425fa0 R15: 00007fff21fc7c88 [ 1383.446421][T14738] [ 1387.839396][T14767] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1393.942057][T14783] FAULT_INJECTION: forcing a failure. [ 1393.942057][T14783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.964439][T14783] CPU: 0 PID: 14783 Comm: syz.7.2214 Not tainted syzkaller #0 [ 1393.972204][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1393.982276][T14783] Call Trace: [ 1393.985568][T14783] [ 1393.988515][T14783] dump_stack_lvl+0x18c/0x250 [ 1393.993222][T14783] ? show_regs_print_info+0x20/0x20 [ 1393.998435][T14783] ? load_image+0x420/0x420 [ 1394.002970][T14783] ? __might_fault+0xaa/0x120 [ 1394.007670][T14783] ? __lock_acquire+0x7eb0/0x7eb0 [ 1394.012717][T14783] ? bpf_vlog_reverse_ubuf+0x34b/0x3a0 [ 1394.018207][T14783] should_fail_ex+0x394/0x4c0 [ 1394.022914][T14783] _copy_to_user+0x2f/0xa0 [ 1394.027362][T14783] btf_new_fd+0x5c0/0x9e0 [ 1394.031733][T14783] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1394.036872][T14783] ? capable+0x88/0xe0 [ 1394.040974][T14783] __sys_bpf+0x670/0x890 [ 1394.045248][T14783] ? bpf_link_show_fdinfo+0x560/0x560 [ 1394.050660][T14783] ? lock_chain_count+0x20/0x20 [ 1394.055547][T14783] __x64_sys_bpf+0x7c/0x90 [ 1394.059988][T14783] do_syscall_64+0x55/0xb0 [ 1394.064427][T14783] ? clear_bhb_loop+0x40/0x90 [ 1394.069127][T14783] ? clear_bhb_loop+0x40/0x90 [ 1394.073827][T14783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1394.079754][T14783] RIP: 0033:0x7f5273d9e1d9 [ 1394.084186][T14783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.103804][T14783] RSP: 002b:00007f5274d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1394.112241][T14783] RAX: ffffffffffffffda RBX: 00007f5274025fa0 RCX: 00007f5273d9e1d9 [ 1394.120237][T14783] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1394.128228][T14783] RBP: 00007f5273e35888 R08: 0000000000000000 R09: 0000000000000000 [ 1394.136220][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.144216][T14783] R13: 00007f5274026038 R14: 00007f5274025fa0 R15: 00007fff5f3b9518 [ 1394.152233][T14783] [ 1398.666183][ T5862] Process accounting resumed [ 1399.085547][ T5935] team0 (unregistering): Port device team_slave_1 removed [ 1399.928040][T14804] Bluetooth: hci4: command 0x0406 tx timeout [ 1400.200671][ T5935] team0 (unregistering): Port device team_slave_0 removed [ 1400.314785][T14819] FAULT_INJECTION: forcing a failure. [ 1400.314785][T14819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1400.373461][T14819] CPU: 1 PID: 14819 Comm: syz.4.2225 Not tainted syzkaller #0 [ 1400.380984][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1400.391062][T14819] Call Trace: [ 1400.394360][T14819] [ 1400.397309][T14819] dump_stack_lvl+0x18c/0x250 [ 1400.402016][T14819] ? show_regs_print_info+0x20/0x20 [ 1400.407238][T14819] ? load_image+0x420/0x420 [ 1400.411786][T14819] ? __might_fault+0xaa/0x120 [ 1400.416494][T14819] ? __lock_acquire+0x7eb0/0x7eb0 [ 1400.421551][T14819] ? bpf_vlog_reverse_ubuf+0x34b/0x3a0 [ 1400.427050][T14819] should_fail_ex+0x394/0x4c0 [ 1400.431761][T14819] _copy_to_user+0x2f/0xa0 [ 1400.436200][T14819] btf_new_fd+0x5c0/0x9e0 [ 1400.440546][T14819] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1400.445661][T14819] ? capable+0x88/0xe0 [ 1400.449738][T14819] __sys_bpf+0x670/0x890 [ 1400.453987][T14819] ? bpf_link_show_fdinfo+0x560/0x560 [ 1400.459373][T14819] ? lock_chain_count+0x20/0x20 [ 1400.464244][T14819] __x64_sys_bpf+0x7c/0x90 [ 1400.468670][T14819] do_syscall_64+0x55/0xb0 [ 1400.473090][T14819] ? clear_bhb_loop+0x40/0x90 [ 1400.477777][T14819] ? clear_bhb_loop+0x40/0x90 [ 1400.482454][T14819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.488355][T14819] RIP: 0033:0x7fd47f59e1d9 [ 1400.492768][T14819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.512384][T14819] RSP: 002b:00007fd4803f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1400.520802][T14819] RAX: ffffffffffffffda RBX: 00007fd47f825fa0 RCX: 00007fd47f59e1d9 [ 1400.528779][T14819] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1400.536749][T14819] RBP: 00007fd47f635888 R08: 0000000000000000 R09: 0000000000000000 [ 1400.544719][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.552686][T14819] R13: 00007fd47f826038 R14: 00007fd47f825fa0 R15: 00007ffcb4fb3e88 [ 1400.560685][T14819] [ 1400.644594][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.944434][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.995057][T14828] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1406.762600][T14849] FAULT_INJECTION: forcing a failure. [ 1406.762600][T14849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.803442][T14849] CPU: 0 PID: 14849 Comm: syz.7.2235 Not tainted syzkaller #0 [ 1406.810949][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1406.821025][T14849] Call Trace: [ 1406.824319][T14849] [ 1406.827261][T14849] dump_stack_lvl+0x18c/0x250 [ 1406.831983][T14849] ? show_regs_print_info+0x20/0x20 [ 1406.837212][T14849] ? load_image+0x420/0x420 [ 1406.841747][T14849] ? __might_fault+0xaa/0x120 [ 1406.846452][T14849] ? __lock_acquire+0x7eb0/0x7eb0 [ 1406.851507][T14849] ? bpf_vlog_reverse_ubuf+0x34b/0x3a0 [ 1406.857008][T14849] should_fail_ex+0x394/0x4c0 [ 1406.861725][T14849] _copy_to_user+0x2f/0xa0 [ 1406.866174][T14849] btf_new_fd+0x5c0/0x9e0 [ 1406.870539][T14849] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1406.875675][T14849] ? capable+0x88/0xe0 [ 1406.879770][T14849] __sys_bpf+0x670/0x890 [ 1406.884039][T14849] ? bpf_link_show_fdinfo+0x560/0x560 [ 1406.889453][T14849] ? lock_chain_count+0x20/0x20 [ 1406.894336][T14849] __x64_sys_bpf+0x7c/0x90 [ 1406.898776][T14849] do_syscall_64+0x55/0xb0 [ 1406.903213][T14849] ? clear_bhb_loop+0x40/0x90 [ 1406.907913][T14849] ? clear_bhb_loop+0x40/0x90 [ 1406.912614][T14849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1406.918540][T14849] RIP: 0033:0x7f5273d9e1d9 [ 1406.922977][T14849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.942602][T14849] RSP: 002b:00007f5274d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1406.951044][T14849] RAX: ffffffffffffffda RBX: 00007f5274025fa0 RCX: 00007f5273d9e1d9 [ 1406.959037][T14849] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1406.967029][T14849] RBP: 00007f5273e35888 R08: 0000000000000000 R09: 0000000000000000 [ 1406.975018][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.983006][T14849] R13: 00007f5274026038 R14: 00007f5274025fa0 R15: 00007fff5f3b9518 [ 1406.991017][T14849] [ 1408.474996][T11274] Process accounting resumed [ 1409.215445][T14859] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1412.387737][ T5935] bond0 (unregistering): Released all slaves [ 1420.878585][T14927] FAULT_INJECTION: forcing a failure. [ 1420.878585][T14927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.008680][T14927] CPU: 1 PID: 14927 Comm: syz.4.2245 Not tainted syzkaller #0 [ 1421.016188][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1421.026263][T14927] Call Trace: [ 1421.029552][T14927] [ 1421.032493][T14927] dump_stack_lvl+0x18c/0x250 [ 1421.037193][T14927] ? show_regs_print_info+0x20/0x20 [ 1421.042412][T14927] ? load_image+0x420/0x420 [ 1421.046945][T14927] ? __lock_acquire+0x7eb0/0x7eb0 [ 1421.052001][T14927] should_fail_ex+0x394/0x4c0 [ 1421.056710][T14927] _copy_to_user+0x2f/0xa0 [ 1421.061152][T14927] bpf_vlog_reverse_ubuf+0x2ad/0x3a0 [ 1421.066474][T14927] bpf_vlog_finalize+0x12b/0x3e0 [ 1421.071441][T14927] btf_new_fd+0x4ca/0x9e0 [ 1421.075801][T14927] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1421.080938][T14927] ? capable+0x88/0xe0 [ 1421.085036][T14927] __sys_bpf+0x670/0x890 [ 1421.089304][T14927] ? bpf_link_show_fdinfo+0x560/0x560 [ 1421.094713][T14927] ? lock_chain_count+0x20/0x20 [ 1421.099594][T14927] __x64_sys_bpf+0x7c/0x90 [ 1421.104027][T14927] do_syscall_64+0x55/0xb0 [ 1421.108456][T14927] ? clear_bhb_loop+0x40/0x90 [ 1421.113148][T14927] ? clear_bhb_loop+0x40/0x90 [ 1421.117844][T14927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1421.123760][T14927] RIP: 0033:0x7fd47f59e1d9 [ 1421.128189][T14927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.147817][T14927] RSP: 002b:00007fd4803f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1421.156255][T14927] RAX: ffffffffffffffda RBX: 00007fd47f825fa0 RCX: 00007fd47f59e1d9 [ 1421.164249][T14927] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1421.172239][T14927] RBP: 00007fd47f635888 R08: 0000000000000000 R09: 0000000000000000 [ 1421.180225][T14927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1421.188212][T14927] R13: 00007fd47f826038 R14: 00007fd47f825fa0 R15: 00007ffcb4fb3e88 [ 1421.196227][T14927] [ 1423.113737][ T789] Process accounting resumed [ 1423.133006][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.139706][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.717867][T14952] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1428.192499][T14963] FAULT_INJECTION: forcing a failure. [ 1428.192499][T14963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.233421][T14963] CPU: 1 PID: 14963 Comm: syz.7.2257 Not tainted syzkaller #0 [ 1428.240933][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1428.251004][T14963] Call Trace: [ 1428.254308][T14963] [ 1428.257262][T14963] dump_stack_lvl+0x18c/0x250 [ 1428.261973][T14963] ? show_regs_print_info+0x20/0x20 [ 1428.267200][T14963] ? load_image+0x420/0x420 [ 1428.271738][T14963] ? __might_fault+0xaa/0x120 [ 1428.276448][T14963] ? __lock_acquire+0x7eb0/0x7eb0 [ 1428.281512][T14963] ? bpf_vlog_reverse_ubuf+0x34b/0x3a0 [ 1428.287008][T14963] should_fail_ex+0x394/0x4c0 [ 1428.291731][T14963] _copy_to_user+0x2f/0xa0 [ 1428.296185][T14963] btf_new_fd+0x5c0/0x9e0 [ 1428.300540][T14963] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1428.305659][T14963] ? capable+0x88/0xe0 [ 1428.309730][T14963] __sys_bpf+0x670/0x890 [ 1428.313971][T14963] ? bpf_link_show_fdinfo+0x560/0x560 [ 1428.319350][T14963] ? lock_chain_count+0x20/0x20 [ 1428.324204][T14963] __x64_sys_bpf+0x7c/0x90 [ 1428.328620][T14963] do_syscall_64+0x55/0xb0 [ 1428.333035][T14963] ? clear_bhb_loop+0x40/0x90 [ 1428.337715][T14963] ? clear_bhb_loop+0x40/0x90 [ 1428.342391][T14963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1428.348291][T14963] RIP: 0033:0x7f5273d9e1d9 [ 1428.352703][T14963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.372307][T14963] RSP: 002b:00007f5274d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1428.380721][T14963] RAX: ffffffffffffffda RBX: 00007f5274025fa0 RCX: 00007f5273d9e1d9 [ 1428.388688][T14963] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1428.396656][T14963] RBP: 00007f5273e35888 R08: 0000000000000000 R09: 0000000000000000 [ 1428.404621][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.412584][T14963] R13: 00007f5274026038 R14: 00007f5274025fa0 R15: 00007fff5f3b9518 [ 1428.420563][T14963] [ 1430.018089][ T5862] Process accounting resumed [ 1438.031690][T15037] FAULT_INJECTION: forcing a failure. [ 1438.031690][T15037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.073013][T15037] CPU: 1 PID: 15037 Comm: syz.4.2268 Not tainted syzkaller #0 [ 1438.080526][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1438.090605][T15037] Call Trace: [ 1438.093908][T15037] [ 1438.096866][T15037] dump_stack_lvl+0x18c/0x250 [ 1438.101584][T15037] ? show_regs_print_info+0x20/0x20 [ 1438.106818][T15037] ? load_image+0x420/0x420 [ 1438.111357][T15037] ? __might_fault+0xaa/0x120 [ 1438.116056][T15037] ? __lock_acquire+0x7eb0/0x7eb0 [ 1438.121101][T15037] ? bpf_vlog_reverse_ubuf+0x34b/0x3a0 [ 1438.126600][T15037] should_fail_ex+0x394/0x4c0 [ 1438.131325][T15037] _copy_to_user+0x2f/0xa0 [ 1438.135780][T15037] btf_new_fd+0x5c0/0x9e0 [ 1438.140150][T15037] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1438.145297][T15037] ? capable+0x88/0xe0 [ 1438.149406][T15037] __sys_bpf+0x670/0x890 [ 1438.153675][T15037] ? bpf_link_show_fdinfo+0x560/0x560 [ 1438.159087][T15037] ? lock_chain_count+0x20/0x20 [ 1438.163974][T15037] __x64_sys_bpf+0x7c/0x90 [ 1438.168414][T15037] do_syscall_64+0x55/0xb0 [ 1438.172844][T15037] ? clear_bhb_loop+0x40/0x90 [ 1438.177547][T15037] ? clear_bhb_loop+0x40/0x90 [ 1438.182255][T15037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1438.188184][T15037] RIP: 0033:0x7fd47f59e1d9 [ 1438.192619][T15037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.212252][T15037] RSP: 002b:00007fd4803f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1438.220694][T15037] RAX: ffffffffffffffda RBX: 00007fd47f825fa0 RCX: 00007fd47f59e1d9 [ 1438.228692][T15037] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1438.236685][T15037] RBP: 00007fd47f635888 R08: 0000000000000000 R09: 0000000000000000 [ 1438.244683][T15037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1438.252675][T15037] R13: 00007fd47f826038 R14: 00007fd47f825fa0 R15: 00007ffcb4fb3e88 [ 1438.260689][T15037] [ 1438.341274][T15041] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1444.082546][ T8] Process accounting resumed [ 1446.886256][T15104] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1447.806434][T15116] FAULT_INJECTION: forcing a failure. [ 1447.806434][T15116] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1447.853091][T15116] CPU: 0 PID: 15116 Comm: syz.4.2279 Not tainted syzkaller #0 [ 1447.860588][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1447.870652][T15116] Call Trace: [ 1447.873934][T15116] [ 1447.876869][T15116] dump_stack_lvl+0x18c/0x250 [ 1447.881532][T15116] ? show_regs_print_info+0x20/0x20 [ 1447.886723][T15116] ? load_image+0x420/0x420 [ 1447.891212][T15116] ? stack_trace_save+0xaa/0x100 [ 1447.896139][T15116] ? stack_trace_snprint+0xf0/0xf0 [ 1447.901239][T15116] ? __stack_depot_save+0x1f/0x660 [ 1447.906346][T15116] should_fail_ex+0x394/0x4c0 [ 1447.911012][T15116] get_futex_key+0x136/0x1030 [ 1447.915691][T15116] ? do_syscall_64+0x55/0xb0 [ 1447.920297][T15116] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1447.926365][T15116] ? futex_setup_timer+0xc0/0xc0 [ 1447.931295][T15116] futex_wait_setup+0xbc/0x270 [ 1447.936053][T15116] ? futex_wait_multiple+0x920/0x920 [ 1447.941327][T15116] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1447.947297][T15116] futex_wait+0x1bc/0x5c0 [ 1447.951617][T15116] ? futex_setup_timer+0xc0/0xc0 [ 1447.956548][T15116] ? futex_wait_setup+0x270/0x270 [ 1447.961566][T15116] ? __kmem_cache_free+0xba/0x1f0 [ 1447.966591][T15116] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1447.971691][T15116] do_futex+0x2ff/0x3e0 [ 1447.975838][T15116] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1447.981715][T15116] ? bpf_link_show_fdinfo+0x560/0x560 [ 1447.987075][T15116] __se_sys_futex+0x3a9/0x440 [ 1447.991739][T15116] ? __x64_sys_futex+0xf0/0xf0 [ 1447.996491][T15116] ? __x64_sys_futex+0x21/0xf0 [ 1448.001240][T15116] do_syscall_64+0x55/0xb0 [ 1448.005641][T15116] ? clear_bhb_loop+0x40/0x90 [ 1448.010303][T15116] ? clear_bhb_loop+0x40/0x90 [ 1448.014964][T15116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.020854][T15116] RIP: 0033:0x7fd47f59e1d9 [ 1448.025259][T15116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.044852][T15116] RSP: 002b:00007fd4803f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1448.053254][T15116] RAX: ffffffffffffffda RBX: 00007fd47f825fa8 RCX: 00007fd47f59e1d9 [ 1448.061228][T15116] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd47f825fa8 [ 1448.069186][T15116] RBP: 00007fd47f825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1448.077142][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1448.085103][T15116] R13: 00007fd47f826038 R14: 00007ffcb4fb3da0 R15: 00007ffcb4fb3e88 [ 1448.093071][T15116] [ 1450.204836][ T5862] Process accounting resumed [ 1452.153033][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 1456.605025][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2297'. [ 1456.906394][T15192] FAULT_INJECTION: forcing a failure. [ 1456.906394][T15192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1456.973541][T15192] CPU: 1 PID: 15192 Comm: syz.0.2299 Not tainted syzkaller #0 [ 1456.981058][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1456.991136][T15192] Call Trace: [ 1456.994436][T15192] [ 1456.997389][T15192] dump_stack_lvl+0x18c/0x250 [ 1457.002099][T15192] ? show_regs_print_info+0x20/0x20 [ 1457.007331][T15192] ? load_image+0x420/0x420 [ 1457.011889][T15192] ? __lock_acquire+0x7eb0/0x7eb0 [ 1457.016950][T15192] ? __virt_addr_valid+0x10c/0x380 [ 1457.022098][T15192] should_fail_ex+0x394/0x4c0 [ 1457.026820][T15192] _copy_from_user+0x2f/0xe0 [ 1457.031447][T15192] bpf_vlog_reverse_ubuf+0x122/0x3a0 [ 1457.036777][T15192] bpf_vlog_finalize+0x12b/0x3e0 [ 1457.041755][T15192] btf_new_fd+0x4ca/0x9e0 [ 1457.046124][T15192] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1457.051274][T15192] ? capable+0x88/0xe0 [ 1457.055380][T15192] __sys_bpf+0x670/0x890 [ 1457.059664][T15192] ? bpf_link_show_fdinfo+0x560/0x560 [ 1457.065081][T15192] ? lock_chain_count+0x20/0x20 [ 1457.069976][T15192] __x64_sys_bpf+0x7c/0x90 [ 1457.074428][T15192] do_syscall_64+0x55/0xb0 [ 1457.078870][T15192] ? clear_bhb_loop+0x40/0x90 [ 1457.083575][T15192] ? clear_bhb_loop+0x40/0x90 [ 1457.088286][T15192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1457.094211][T15192] RIP: 0033:0x7f797cf9e1d9 [ 1457.098635][T15192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.118242][T15192] RSP: 002b:00007f797de1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1457.126654][T15192] RAX: ffffffffffffffda RBX: 00007f797d225fa0 RCX: 00007f797cf9e1d9 [ 1457.134636][T15192] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1457.142613][T15192] RBP: 00007f797d035888 R08: 0000000000000000 R09: 0000000000000000 [ 1457.150582][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1457.158553][T15192] R13: 00007f797d226038 R14: 00007f797d225fa0 R15: 00007ffd9cfc1098 [ 1457.166534][T15192] [ 1458.413039][T14804] Bluetooth: hci0: command 0x0406 tx timeout [ 1458.473191][T15198] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1458.797515][ T8994] Process accounting resumed [ 1461.998534][T15235] loop7: detected capacity change from 0 to 128 [ 1462.049880][T15235] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1462.073302][T15235] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.329380][T14045] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1462.528590][T14804] [ 1462.530959][T14804] ====================================================== [ 1462.537983][T14804] WARNING: possible circular locking dependency detected [ 1462.545019][T14804] syzkaller #0 Not tainted [ 1462.549442][T14804] ------------------------------------------------------ [ 1462.556465][T14804] kworker/u5:1/14804 is trying to acquire lock: [ 1462.562709][T14804] ffff88802f8840b8 (&hdev->lock){+.+.}-{3:3}, at: hci_le_conn_update+0xd0/0x320 [ 1462.571793][T14804] [ 1462.571793][T14804] but task is already holding lock: [ 1462.579169][T14804] ffff8880315b5b38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_recv_acldata+0xe2/0x11a0 [ 1462.588522][T14804] [ 1462.588522][T14804] which lock already depends on the new lock. [ 1462.588522][T14804] [ 1462.598933][T14804] [ 1462.598933][T14804] the existing dependency chain (in reverse order) is: [ 1462.607961][T14804] [ 1462.607961][T14804] -> #1 (&conn->lock#2){+.+.}-{3:3}: [ 1462.615465][T14804] __mutex_lock+0x135/0xc80 [ 1462.620510][T14804] l2cap_chan_connect+0x7fd/0xe30 [ 1462.626077][T14804] l2cap_sock_connect+0x586/0x760 [ 1462.631682][T14804] __sys_connect+0x3da/0x470 [ 1462.636817][T14804] __x64_sys_connect+0x7a/0x90 [ 1462.642119][T14804] do_syscall_64+0x55/0xb0 [ 1462.647069][T14804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1462.653513][T14804] [ 1462.653513][T14804] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 1462.660839][T14804] __lock_acquire+0x3a07/0x7eb0 [ 1462.666233][T14804] lock_acquire+0x19e/0x420 [ 1462.671276][T14804] __mutex_lock+0x135/0xc80 [ 1462.676318][T14804] hci_le_conn_update+0xd0/0x320 [ 1462.681791][T14804] l2cap_recv_frame+0xcc96/0xfd60 [ 1462.687357][T14804] l2cap_recv_acldata+0x50b/0x11a0 [ 1462.693006][T14804] hci_rx_work+0x545/0xd60 [ 1462.697964][T14804] process_scheduled_works+0xa60/0x1600 [ 1462.704054][T14804] worker_thread+0xa5e/0xfe0 [ 1462.709183][T14804] kthread+0x2fa/0x390 [ 1462.713786][T14804] ret_from_fork+0x48/0x80 [ 1462.718740][T14804] ret_from_fork_asm+0x11/0x20 [ 1462.724047][T14804] [ 1462.724047][T14804] other info that might help us debug this: [ 1462.724047][T14804] [ 1462.734281][T14804] Possible unsafe locking scenario: [ 1462.734281][T14804] [ 1462.741738][T14804] CPU0 CPU1 [ 1462.747120][T14804] ---- ---- [ 1462.752482][T14804] lock(&conn->lock#2); [ 1462.756714][T14804] lock(&hdev->lock); [ 1462.763283][T14804] lock(&conn->lock#2); [ 1462.770035][T14804] lock(&hdev->lock); [ 1462.774107][T14804] [ 1462.774107][T14804] *** DEADLOCK *** [ 1462.774107][T14804] [ 1462.782232][T14804] 3 locks held by kworker/u5:1/14804: [ 1462.787585][T14804] #0: ffff88805d394538 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1462.798532][T14804] #1: ffffc900048dfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1462.810524][T14804] #2: ffff8880315b5b38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_recv_acldata+0xe2/0x11a0 [ 1462.820255][T14804] [ 1462.820255][T14804] stack backtrace: [ 1462.826133][T14804] CPU: 1 PID: 14804 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1462.833747][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1462.843788][T14804] Workqueue: hci0 hci_rx_work [ 1462.848460][T14804] Call Trace: [ 1462.851723][T14804] [ 1462.854638][T14804] dump_stack_lvl+0x18c/0x250 [ 1462.859318][T14804] ? load_image+0x420/0x420 [ 1462.863823][T14804] ? show_regs_print_info+0x20/0x20 [ 1462.869014][T14804] ? print_circular_bug+0x12b/0x1a0 [ 1462.874203][T14804] check_noncircular+0x2fc/0x400 [ 1462.879130][T14804] ? print_deadlock_bug+0x5d0/0x5d0 [ 1462.884329][T14804] ? lockdep_lock+0xf5/0x230 [ 1462.888951][T14804] ? __lock_acquire+0x36dd/0x7eb0 [ 1462.893983][T14804] ? _find_first_zero_bit+0xd6/0x100 [ 1462.899272][T14804] __lock_acquire+0x3a07/0x7eb0 [ 1462.904119][T14804] ? verify_lock_unused+0x140/0x140 [ 1462.909301][T14804] ? debug_objects_fill_pool+0x8b/0x790 [ 1462.914835][T14804] ? __lock_acquire+0x7eb0/0x7eb0 [ 1462.919870][T14804] lock_acquire+0x19e/0x420 [ 1462.924359][T14804] ? hci_le_conn_update+0xd0/0x320 [ 1462.929475][T14804] ? __might_sleep+0xe0/0xe0 [ 1462.934053][T14804] ? read_lock_is_recursive+0x20/0x20 [ 1462.939412][T14804] __mutex_lock+0x135/0xc80 [ 1462.943903][T14804] ? hci_le_conn_update+0xd0/0x320 [ 1462.948996][T14804] ? mark_lock+0x94/0x320 [ 1462.953307][T14804] ? hci_le_conn_update+0xd0/0x320 [ 1462.958402][T14804] ? mutex_lock_nested+0x20/0x20 [ 1462.963325][T14804] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1462.969302][T14804] ? __lock_acquire+0x7eb0/0x7eb0 [ 1462.974334][T14804] ? lock_chain_count+0x20/0x20 [ 1462.979170][T14804] hci_le_conn_update+0xd0/0x320 [ 1462.984112][T14804] ? wq_worker_last_func+0x40/0x40 [ 1462.989236][T14804] ? hci_enhanced_setup_sync_destroy+0x50/0x50 [ 1462.995402][T14804] l2cap_recv_frame+0xcc96/0xfd60 [ 1463.000419][T14804] ? check_path+0x40/0x40 [ 1463.004738][T14804] ? check_path+0x21/0x40 [ 1463.009052][T14804] ? check_noncircular+0x18a/0x400 [ 1463.014170][T14804] ? unwind_next_frame+0x224f/0x2990 [ 1463.019439][T14804] ? print_deadlock_bug+0x5d0/0x5d0 [ 1463.024621][T14804] ? lockdep_lock+0xf5/0x230 [ 1463.029213][T14804] ? l2cap_recv_frag+0x500/0x500 [ 1463.034175][T14804] ? lockdep_unlock+0x146/0x2e0 [ 1463.039034][T14804] ? lockdep_lock+0x230/0x230 [ 1463.043698][T14804] ? __lock_acquire+0x36dd/0x7eb0 [ 1463.048710][T14804] ? verify_lock_unused+0x140/0x140 [ 1463.053894][T14804] ? mark_lock+0x94/0x320 [ 1463.058205][T14804] ? __lock_acquire+0x135d/0x7eb0 [ 1463.063209][T14804] ? verify_lock_unused+0x140/0x140 [ 1463.068396][T14804] ? __mutex_trylock_common+0x160/0x270 [ 1463.073927][T14804] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1463.080078][T14804] ? l2cap_recv_acldata+0xbe/0x11a0 [ 1463.085268][T14804] ? rcu_is_watching+0x15/0xb0 [ 1463.090021][T14804] ? trace_contention_end+0x39/0xe0 [ 1463.095211][T14804] ? __mutex_lock+0x30d/0xc80 [ 1463.099876][T14804] ? __lock_acquire+0x7eb0/0x7eb0 [ 1463.104888][T14804] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1463.110506][T14804] ? l2cap_recv_acldata+0xe2/0x11a0 [ 1463.115712][T14804] ? mutex_lock_nested+0x20/0x20 [ 1463.120648][T14804] ? l2cap_conn_hold_unless_zero+0x173/0x270 [ 1463.126619][T14804] ? l2cap_disconn_ind+0xb0/0xb0 [ 1463.131544][T14804] ? mutex_unlock+0x10/0x10 [ 1463.136053][T14804] ? hci_conn_enter_active_mode+0x1c6/0x330 [ 1463.141933][T14804] ? hci_conn_link+0x350/0x350 [ 1463.146680][T14804] l2cap_recv_acldata+0x50b/0x11a0 [ 1463.151797][T14804] hci_rx_work+0x545/0xd60 [ 1463.156204][T14804] ? process_scheduled_works+0x975/0x1600 [ 1463.161909][T14804] process_scheduled_works+0xa60/0x1600 [ 1463.167448][T14804] ? worker_attach_to_pool+0x370/0x370 [ 1463.172909][T14804] ? assign_work+0x3cc/0x5d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1463.177503][T14804] worker_thread+0xa5e/0xfe0 [ 1463.182096][T14804] ? _raw_spin_unlock+0x40/0x40 [ 1463.186934][T14804] ? __kthread_parkme+0x71/0x1c0 [ 1463.191860][T14804] kthread+0x2fa/0x390 [ 1463.195913][T14804] ? pr_cont_work+0x550/0x550 [ 1463.200574][T14804] ? kthread_blkcg+0xd0/0xd0 [ 1463.205147][T14804] ret_from_fork+0x48/0x80 [ 1463.209566][T14804] ? kthread_blkcg+0xd0/0xd0 [ 1463.214139][T14804] ret_from_fork_asm+0x11/0x20 [ 1463.218896][T14804] [ 1464.063762][ T5962] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.156911][ T5962] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.228313][ T5962] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.288043][ T5962] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.416004][ T5962] tipc: Left network mode [ 1465.089430][ T5962] hsr_slave_0: left promiscuous mode [ 1465.098052][ T5962] hsr_slave_1: left promiscuous mode [ 1465.105346][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.112768][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.122636][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.132547][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.148591][ T5962] veth1_macvtap: left promiscuous mode [ 1465.154522][ T5962] veth0_macvtap: left promiscuous mode [ 1465.160130][ T5962] veth1_vlan: left promiscuous mode [ 1465.166772][ T5962] veth0_vlan: left promiscuous mode [ 1465.345286][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 1465.375452][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 1465.398690][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.421903][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.484885][ T5962] bond0 (unregistering): Released all slaves [ 1465.866621][ T5951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.919039][ T5951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.978541][ T5951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.020405][ T5951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.126039][ T5951] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.180318][ T5951] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.249651][ T5951] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.307241][ T5951] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.424253][ T5951] tipc: Left network mode [ 1466.429835][ T5951] tipc: Left network mode [ 1467.270561][ T5951] hsr_slave_0: left promiscuous mode [ 1467.277193][ T5951] hsr_slave_1: left promiscuous mode [ 1467.284356][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.291749][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.299735][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.307810][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.317242][ T5951] hsr_slave_0: left promiscuous mode [ 1467.322849][ T5951] hsr_slave_1: left promiscuous mode [ 1467.329282][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.336710][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.344543][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.351938][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.362211][ T5951] veth1_macvtap: left promiscuous mode [ 1467.368664][ T5951] veth0_macvtap: left promiscuous mode [ 1467.374642][ T5951] veth1_vlan: left promiscuous mode [ 1467.379892][ T5951] veth0_vlan: left promiscuous mode [ 1467.385972][ T5951] veth1_macvtap: left promiscuous mode [ 1467.391445][ T5951] veth0_macvtap: left promiscuous mode [ 1467.397151][ T5951] veth1_vlan: left promiscuous mode [ 1467.402406][ T5951] veth0_vlan: left promiscuous mode [ 1467.592594][ T5951] bond5 (unregistering): Released all slaves [ 1467.698070][ T5951] bond4 (unregistering): Released all slaves [ 1467.799087][ T5951] bond3 (unregistering): Released all slaves [ 1467.901796][ T5951] bond2 (unregistering): Released all slaves [ 1468.004492][ T5951] bond1 (unregistering): Released all slaves [ 1468.123769][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 1468.148101][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 1468.172959][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.200546][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.257723][ T5951] bond0 (unregistering): Released all slaves [ 1468.376528][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 1468.399494][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 1468.411737][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.426436][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.482218][ T5951] bond0 (unregistering): Released all slaves [ 1468.941163][ T5951] IPVS: stop unused estimator thread 0...