last executing test programs: 10m8.096990731s ago: executing program 2 (id=18): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000004500), 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) 10m3.128168835s ago: executing program 2 (id=22): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r5, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 10m0.461629115s ago: executing program 2 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getpeername$packet(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x48040) sendmsg$IPVS_CMD_NEW_DEST(r3, 0x0, 0x24000000) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 9m58.017219447s ago: executing program 2 (id=27): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e0c"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7f) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblc\x00', 0x0, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 9m55.87591548s ago: executing program 2 (id=30): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x4000085) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0xfffe}, 0x90) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) 9m53.252353905s ago: executing program 2 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @loopback, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="15c5fd6015e6984e4b48b7224df5725858dc092aaef7cca7cccd7af21f3d6f2b0de4807b66d76e981743a4a912126d09dcce57be96069554", 0x38, 0x4040041, &(0x7f0000000080)={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d60}, 0x1c) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) 9m37.862766789s ago: executing program 32 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @loopback, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="15c5fd6015e6984e4b48b7224df5725858dc092aaef7cca7cccd7af21f3d6f2b0de4807b66d76e981743a4a912126d09dcce57be96069554", 0x38, 0x4040041, &(0x7f0000000080)={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d60}, 0x1c) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) 8m6.186705458s ago: executing program 1 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f00000024c0)="4b4fbd7e3687b10c1b57f6e1c4a6ee6d0bcd7cedfe470ca7698b97116f3d89e9a531bbe9b9981a99b72673948691358dbf23230f8678cda09bd08c34f16e0b2529c1db80c712730a9cd20e72f97d19ca39ebc9279bd9af0b9355f7cf117c309718af937df9c2cd2e5342877b7949971f9bff3076d31b8d3fd811c65029e46c2471ac7664afefb9cb62218a20c06b61d51fd092f3a68f9b8245d9acb6c1754f55bc32a52531c43b5e7c6e90371816376431ea797500c55123a922409dd3d944750a64550c6ea4770ff9d80f0add73c3d7b807089142315cf933006a6f9cd2403dae38729a41a4f0ee8f3e7435273710999ec81feb67", 0xf5) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0xc0) r7 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/274, 0x112}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f00000009c0)=""/264, 0x108}, {&(0x7f0000000140)=""/16, 0x10}], 0x7}, 0x1008}], 0x1, 0x0, 0x0) 7m57.369031543s ago: executing program 1 (id=137): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x40}}, 0x200400d0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x19}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1c3102, 0x0) 7m56.248202666s ago: executing program 1 (id=139): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0x0, 0xa, 0x0, 0xa, 0xff, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1}, {0x0, 0xf000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x8, 0x0, 0x0, 0xb, 0x0, 0x4, 0xe, 0x84, 0x3}, {0x100000, 0x1, 0x0, 0x0, 0x0, 0x3, 0xff}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x8080000, 0x80a0000, 0x9, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x2}, {0x1, 0x0, 0x0, 0xf9, 0x0, 0x2, 0x0, 0xc, 0x0, 0x3, 0x0, 0x40}, {0x6000}, {0x1000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x0, 0xb, 0x4001, 0x900, [0x5, 0x0, 0x0, 0x3fffffffffff]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd2(0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 7m53.881649918s ago: executing program 1 (id=140): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x310) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x5, 0x8, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 7m49.063455023s ago: executing program 1 (id=147): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m43.192066402s ago: executing program 1 (id=155): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r4, 0x50504}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x18001, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 7m27.16402552s ago: executing program 33 (id=155): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r4, 0x50504}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x18001, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 2m36.479933727s ago: executing program 0 (id=566): socket(0x40000000015, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000002140)=""/144, 0x90}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008c40)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009cc0)=""/118, 0x76}, {&(0x7f0000009d80)=""/227, 0xe3}, {&(0x7f0000009e80)=""/89, 0x59}, {0x0}], 0x4}, 0x9}], 0x4, 0x40010040, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 2m33.73116307s ago: executing program 0 (id=568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r3, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0x24fe, &(0x7f00000003c0)={0x0, 0x793, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r6, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000600)={0x29, 0x1, 0x3, "ff050000007eefad00000000ffffffff000000000000000000000900", 0x32314d4e}) 2m32.419962658s ago: executing program 0 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xd41}, {0x0}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xc09}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2m31.343162306s ago: executing program 0 (id=572): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x1f40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) alarm(0x5) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0xffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) 2m26.803889879s ago: executing program 0 (id=576): socket(0x40000000015, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000002140)=""/144, 0x90}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008c40)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009cc0)=""/118, 0x76}, {&(0x7f0000009d80)=""/227, 0xe3}, {&(0x7f0000009e80)=""/89, 0x59}, {0x0}], 0x4}, 0x9}], 0x4, 0x40010040, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 2m25.734540996s ago: executing program 0 (id=577): r0 = syz_open_dev$media(&(0x7f0000000000), 0x33ac98ac, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x100009, 0xffffffffc2c4adcc, 0x0, 0x4, 0x0, 0x2000004, 0x0, 0x0, 0x4}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x9, 0x4e0900) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x53, 0xffffffffffffffff, 0x0, 0x7, @buffer={0x0, 0xf5, &(0x7f0000000240)=""/245}, 0x0, &(0x7f0000000480)=""/116, 0x7fffffff, 0x10020, 0x3, &(0x7f0000000500)}) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x2}, 0xc) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @local, 0xe}, 0x80, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000700)="75b9d2605b5c55d110450f05b6c40dd49285e80041e8f30b01ba94fa0bf194de217c42e1e9b27c3eccc64aec3deaf054faa2288a248e8c6042bcf362edceaf80b63a86dde285b9aa83bcaa57b41e5fc50abdf43327e6f26f3cb02d457305e133ab94b65474ed3073294736761da4dbd8249631cd1fa6f3d66cdd4f5ad58d9b70107bb1b282ea4aa15aeac716931af5539bbeb3e34ef63d04b94d646cf8ee1821e11e3c022bfff4a2ebf1ea3056cb99da9e2794f236539c94b73e24829caaecbc56bdbd9f70a1db659461e35d85bcd2f63f8e6ee23457b3b5bdaa24aed6293b4da54225dbc3bc94909793fec82c8e16603c06b30c92b4cdcadd55ea70066faf2ada83cfe515fd931304bc2aa3f8354feb80a31ba966e333a98b02a3a664b8752f8ca2968ffcdef6cee13e798b9e71ee5c93e02e3118068aa3ddd67ee1f281517778e769118b63109b33a2ac5f5b53b48ac1497a11038e9063c6a6d7642b81710de07fcb7e999aa6e63f361b576f02d14d7deb3130347cff575bdbcb0c276a719c4ff68a041352292be461098a00e676a666da6eeede87f490c7bae567d2d05b77aa94b409297343203f6f5d34d2077f75843272f0e6df84c3475bd5d5c158226ff39d8b5a5946eca37b056ce5ff60641f03d377b065eeb04eb21d445aac91643cf348afe8e8ef4dee08fae3889f437d89c82952ea778f98b9dde4ac76187a1fa819c5514f95bc16e89a866745ec79db691c4fcea5394e5c5b1331346b3f7fdd306b53edf0421f96a2f7fbb0852c398a5aa7b64587d57054efd72ff186e9f09998aec7156aa8df82bb328797e3f7efe356a14a2428d27a7d1e190e0beb609652294493aad66e5860a1a9d5ab8d2839550493c97f0d668da6a7a0d431264804e0f3c9bfcd1ae3b0bacc1da6c809f617bf6c3f7780ae929fb26be8d7c3f659af672ce1ecb750749731784c72129985329565359ec8dbef1ce27fd06cb4d039b43a2b0a3b87e7dd1752ae0b7ed1f27a9c304706256aaa004c1d5880cb5f42729ad1759bb485fa9aaf8f0b397a34d774a1e5fffba62cfddf25f3063c6c67dc76b7645ea8042b7eea6c3184abc7140241b155becfaeb788a23251cd27bf0803f0d8353227daef3f4614b3f1bdf78fb92712761cbeda352147f5d4534d1ca987ae68872f9dcc9209436a01ec82d6f71d150050d69e61d3a71e75a95f101cf79d52a61abeda702f3a26668d82db43b20321af82d2cd603c10b9a201eba34c7b10459d68e1a729597ceb5d5b88e61a60cf98366074d3f7f0e5216e5498a39c88bb8a488f3754a9890c12a33be60e94371f490d3a28755cfebadf05fbf81e24d63d1af73f76e5001c6276950222b6ecc324d30b02b8163b6cbb63dd6eae8ad78af85deb397f3d90297efc297801b98a566028e841385009a364818f4057c51ee107a8d0198f94afb05571224632759aa03ae3f52de9901bf4125d6e2f78df809dd65a6321485b5a0811ce8ed5ccd393a5086455f738059f8a542ef662660e01513c4b8b4e69656ec31d1094e4dd4e30a448cb2bf24f58f0b70998db23dfd02f4c109734a86a9befb06964345e44e67861e4172d10360ea815698883c2a1b30faff182fee0ee26ba507f2f5044f9e654d1a849cff80f98ecb02eed404c33b7d7a049bf32ce0e3ce86299c5a32a861f3b7f7fab6d9e308278d15c8690c254f41a8098b69c377ebc20326d133fa6a4cecab1ff7770fbd23f650d83ef1c3da2f7e7130c28b4fecb78e456506c1daa8c5552e081101c5879f7be3fbc1daf9560d97d80af0f90152225075918fbb3078dcad7b766393e364e2e5d8b9f7254a2169f2a6bdaee1e2038251802d229b01c3af7b07317738aab276ec604095eebe6569832d617a236cb93ed8b992504be019ce043d9c6dd308b4910916ca343039b2149b60d1b002f8a9a54846ea175c960cea6e5318ec2ecf277185377539bb5028503ee7c52bc4d5f3710fde85c7d3c747f9942c9d603f81b9ec95cdc977504a4911590dc8011d1ff96dc2af6f399ee2ccf09aef4b54910086d6f0f90800f6e033aa217d8d126c52c78a1b2b3f8c214129d98a71da147386f05def930ec0f142a4af04adaf79ce052a2fc98e2f9e14ba423bc58b7ac428828d2c369ca77bec0b64e28dd0e6ac99f53ac2281ca52605995a4f5119ccabd4ab98a7e23c2391df6ab26b1a115d25e79b41b4f4bc0013574775903624e3ee5f0d7377492d365b0985ea61282a8d002ac0ae8b897440133d7eda0e0ee93fe00e46e1b9c90f01bb54415c7bac14a8196f7c020f9c0e7ddc6893611bbeaf1f1102e191bb54997cc10a5423f4f44bb8bf2e3354ed1216446e27182d519a8f6e0a7b48565d79b511652e0a28381ea7e14625262800c8c7aed2c5ae1f2c2bad9a7ac0320578693338fcfbccdfdff56be8ce9f17aa35c2079f4b56db2e9b304fbefff36fb3a21b71b3b7b84b5c6ad4798a0a0282696bf2e785f3c540e119fc2f224c695efea8fadc7cf3a2e7f5cfa5da177de119764bb25028f1be946d689a85db9d868d0d625f4dd51e222ad8abe76a95266f5c875aab191d578c49b79f163a08d435a4cf4815ccfb01e72176f41176f77f2e4bc4f1bcae240835b24b3f9f203b9ec5b2602a7f85462b0c938c61d609da28f15079322f6a9ebcebdd1e09e722883bfcc45ef7e84605a3168a0d53b27c5df0f31663f33b81bc07c2de03aefc25b2e169d0ba315d62ac332c9c71a08efc09917724773f171c056d5547c83c65ab15c45ee9c7212782fbdf1c77b2ba9cfd5d9d7369e75dcf535a9592f8b74e2", 0x7c9}, {0x0}], 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x1b0}, 0x8004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) 2m7.70726922s ago: executing program 34 (id=577): r0 = syz_open_dev$media(&(0x7f0000000000), 0x33ac98ac, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x100009, 0xffffffffc2c4adcc, 0x0, 0x4, 0x0, 0x2000004, 0x0, 0x0, 0x4}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x9, 0x4e0900) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x53, 0xffffffffffffffff, 0x0, 0x7, @buffer={0x0, 0xf5, &(0x7f0000000240)=""/245}, 0x0, &(0x7f0000000480)=""/116, 0x7fffffff, 0x10020, 0x3, &(0x7f0000000500)}) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x2}, 0xc) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @local, 0xe}, 0x80, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000700)="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", 0x7c9}, {0x0}], 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x1b0}, 0x8004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) 18.825722354s ago: executing program 5 (id=740): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x62) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0xa}}, 0x20) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200021, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xdf}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) clock_gettime(0xb, &(0x7f0000000040)) 18.824670434s ago: executing program 3 (id=742): syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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") r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pread64(r4, &(0x7f0000000480)=""/209, 0xd1, 0x2) pread64(r4, &(0x7f0000000100)=""/1, 0x1, 0x7) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r6, &(0x7f0000000340), 0x8) creat(&(0x7f0000000100)='./file0\x00', 0x0) llistxattr(0x0, 0x0, 0x0) 17.539003349s ago: executing program 5 (id=743): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000080), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0xa, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe", 0x16) read$char_usb(r0, &(0x7f00000003c0)=""/241, 0xf1) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e1f, 0x2, @local, 0x1}, 0x1c) 17.190379454s ago: executing program 3 (id=745): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x400381, 0x0) io_setup(0xbf, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x4, 0x0, &(0x7f0000000200)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x400}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x30}}], 0x2, 0x0) fcntl$setownex(r6, 0xf, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 16.091767955s ago: executing program 3 (id=746): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0xd, 0x4000ffc, 0x2004a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f00000010c0)={0x0, 0x7fffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000001100)={0x3, 0x0, [{0x891, 0x0, 0xffffffff}, {0x901, 0x0, 0x6}, {0x400000b0, 0x0, 0x4}]}) r6 = socket$isdn(0x22, 0x2, 0x10) r7 = socket$isdn(0x22, 0x2, 0x23) dup3(r7, r6, 0x0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r8, &(0x7f00000000c0)=""/4096, 0x1000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 14.146871685s ago: executing program 5 (id=747): unshare(0x2c020600) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0xffffffffffffffff) fdatasync(r1) 13.87126094s ago: executing program 6 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d80)="15", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)}}], 0x4, 0xf000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 12.850056641s ago: executing program 6 (id=751): unshare(0x2c020600) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0xffffffffffffffff) fdatasync(r1) 11.9285815s ago: executing program 4 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009965, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x2) fallocate(r7, 0x0, 0x0, 0x1) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 10.868451675s ago: executing program 4 (id=753): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0xb883, 0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r2, 0x8920, &(0x7f0000000000)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) r3 = socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="02186008070000001cbd7000fbdbdf2505001a00fc0100000000000000000000000006725e95f3c31beddc5a567b3fa40001000000000000000000000110000808510003c27e7364116166a212c6c900a5f8e3aaea87326f19658f95d44ef8beafeeeca9f5"], 0x38}}, 0x800) 9.848697097s ago: executing program 3 (id=754): r0 = socket$inet(0x2, 0x802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) sendmmsg(r1, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xfffffffb, 0x11) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 8.568243851s ago: executing program 6 (id=755): bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f00000000c0), &(0x7f0000000100)=@udp6=r2, 0x1}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 8.566472351s ago: executing program 3 (id=756): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r5 = syz_open_procfs(0x0, 0x0) rt_sigprocmask(0x1, 0x0, &(0x7f00000005c0), 0x0) read$FUSE(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x8200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 8.513702888s ago: executing program 5 (id=757): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = mq_open(&(0x7f0000000040)='veth1_to_bridge\x00', 0x40, 0x164, &(0x7f00000000c0)={0x7f, 0x0, 0x9, 0xfffffffffffff071}) mq_notify(r4, &(0x7f0000000100)={0x0, 0xd, 0x0, @tid=r1}) sched_getattr(r1, &(0x7f00000001c0)={0x38}, 0x38, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r5 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYBLOB="7b8661ed218953b982a0ef93b473e34a9d26a31e1207d29bde93d374be6081b0a5e6be5bc547a53b0ea60c9d7e5e3e28252c814c0c552c76153935813fd6fbf8405d9aa6aaa355991a8c6a632d437634a3137e9f6a0957aa2aaec6a60d3e6eab75d9971e81767805a3e3695610145f82619597f6ef46a86eb972d154b643bed128a9c1380c1d26e5ae2d0e88b6ba670200d2185a4312d2f1329e34edb4e2f7ed8d9d7a4ad84792105572b64e89f8b2cb4e6e754528f9112fbea7b081629b455570ce1266805710f344d461c62d428b4ae3ccd1690a63d87394f3d398fd8f"], 0x0, 0x6ae, &(0x7f0000003180)="$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") getdents64(r5, 0x0, 0x0) sched_getattr(r1, &(0x7f00000002c0)={0x38}, 0x38, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e23, 0x0, 0x0, 0x1}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 6.796568848s ago: executing program 5 (id=758): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r1, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, 0x0, 0x8060010) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa107}}, 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 6.795906638s ago: executing program 4 (id=759): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000286000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000b26000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 6.300485002s ago: executing program 6 (id=760): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x62) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0xa}}, 0x20) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200021, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xdf}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) clock_gettime(0xb, &(0x7f0000000040)) 5.512370353s ago: executing program 4 (id=761): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0xee01) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0) 4.082417706s ago: executing program 6 (id=762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, 0x0, 0x25, 0x0, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4, r2}, 0x10) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 2.178689041s ago: executing program 4 (id=763): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, 0x0, 0x0, 0x12}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/7, &(0x7f0000000500)="009ea08f5fcedf5b802da89b010354498b8f118d233d6e235038ee90b259d2d92d14f1c676c553476371338707ac2d65e8a9c9617e15f8695c888172f73ee8cd3647a613fe583370b38b4747324f278e937f9f11c5ae742fe59734d4c560bd572caaa38f52807d17b7b5", &(0x7f00000005c0), 0x81, r5}, 0x38) nanosleep(&(0x7f0000000380), &(0x7f00000003c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 1.851336833s ago: executing program 5 (id=764): unshare(0x2c020600) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0xffffffffffffffff) fdatasync(r1) 160.75382ms ago: executing program 3 (id=765): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0xfffffffe, 0xa466152, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200}}, 0x50) syz_pidfd_open(0x0, 0x0) 70.322881ms ago: executing program 4 (id=766): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgget$private(0x0, 0x3ac) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc093bea3ff08298b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xd, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @generic={0x57, 0x1, 0x7, 0x8000, 0x9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r4, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 0s ago: executing program 6 (id=767): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2, 0x3, 0xffffffff) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000b00)=""/68) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") sendto$inet(r1, 0x0, 0x0, 0x88d0, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file2'}, 0xb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x10001) sendmsg$rds(r4, &(0x7f0000000a00)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000006c0)=""/111, 0x6f}, &(0x7f0000000340), 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x9}, 0x0, &(0x7f0000000500)=0xfffffffffffffff3, 0x0, 0xfffffffffffffffb, 0x3bd7, 0x4, 0xd, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5}, 0x0, 0x0, 0x1, 0xbe0, 0x3, 0xd, 0x2c, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0xfffffff7}, &(0x7f00000007c0)=0x8, &(0x7f0000000800)=0xff, 0x5, 0x0, 0x7fffffff, 0x9, 0x455c3fc85c8fd46, 0x3}}], 0x150, 0x890}, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) getsockopt$bt_hci(r5, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sched_setscheduler(0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): descriptor?? [ 281.290494][ T6977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.315449][ T6977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.325573][ T789] option 5-1:0.0: GSM modem (1-port) converter detected [ 282.328842][ T6985] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 283.243938][ T789] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 283.390314][ T789] usb 5-1: USB disconnect, device number 2 [ 283.402673][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.449061][ T789] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 283.521560][ T789] option 5-1:0.0: device disconnected [ 283.770907][ T6860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.800629][ T6860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.810810][ T6860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 285.957953][ T6860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.666773][ T7011] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 287.065380][ T7011] loop4: detected capacity change from 0 to 512 [ 287.073036][ T7011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.559875][ T7011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.594986][ T7011] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 287.603316][ T7011] EXT4-fs (loop4): orphan cleanup on readonly fs [ 287.615711][ T7011] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 287.627114][ T7011] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 287.636579][ T7011] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.197: Failed to acquire dquot type 1 [ 287.656022][ T7011] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.197: bg 0: block 40: padding at end of block bitmap is not set [ 287.675430][ T7011] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 287.690187][ T7011] EXT4-fs (loop4): 1 truncate cleaned up [ 287.698236][ T7011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.830582][ T6412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.300103][ T2964] dvmrp1 (unregistering): left allmulticast mode [ 288.636617][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.698014][ T7031] process 'syz.3.194' launched './file0' with NULL argv: empty string added [ 290.007095][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.055601][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.062846][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.110790][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.117977][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.676669][ T7045] netlink: 'syz.0.198': attribute type 6 has an invalid length. [ 291.080213][ T7043] Invalid option length (65058) for dns_resolver key [ 291.119592][ T2964] hsr_slave_0: left promiscuous mode [ 291.126423][ T2964] hsr_slave_1: left promiscuous mode [ 291.137753][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.157863][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.186921][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.224709][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.857109][ T7054] loop4: detected capacity change from 0 to 164 [ 292.058252][ T7054] Unable to read rock-ridge attributes [ 292.082748][ T7053] Unable to read rock-ridge attributes [ 292.098872][ T2964] bridge_slave_1: left allmulticast mode [ 292.109283][ T2964] bridge_slave_1: left promiscuous mode [ 292.116425][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.156587][ T2964] bridge_slave_0: left allmulticast mode [ 292.207463][ T2964] bridge_slave_0: left promiscuous mode [ 292.286246][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.428653][ T2964] bond0: left promiscuous mode [ 292.457701][ T2964] bond_slave_0: left promiscuous mode [ 292.463586][ T2964] bond_slave_1: left promiscuous mode [ 292.492287][ T2964] veth1_macvtap: left promiscuous mode [ 292.504256][ T2964] veth0_macvtap: left promiscuous mode [ 292.523719][ T2964] veth1_vlan: left promiscuous mode [ 292.540143][ T2964] veth0_vlan: left promiscuous mode [ 292.710497][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 292.938240][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 293.034425][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 293.149539][ T27] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 293.272922][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.362799][ T27] usb 1-1: Product: syz [ 293.389448][ T27] usb 1-1: Manufacturer: syz [ 293.394118][ T27] usb 1-1: SerialNumber: syz [ 293.416027][ T27] usb 1-1: config 0 descriptor?? [ 293.437609][ T7059] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.448552][ T7059] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.486142][ T27] option 1-1:0.0: GSM modem (1-port) converter detected [ 293.513587][ T27] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 293.531743][ T2964] infiniband syz0: set down [ 293.623840][ T2964] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 293.637971][ T2964] macvlan2 (unregistering): left promiscuous mode [ 293.660426][ T2964] bond1 (unregistering): Released all slaves [ 293.759078][ T23] usb 1-1: USB disconnect, device number 4 [ 293.849896][ T23] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 293.864787][ T23] option 1-1:0.0: device disconnected [ 294.726426][ T7071] binder: 7069:7071 ioctl 400c620e 0 returned -14 [ 298.195865][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 298.264118][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 298.340383][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.432056][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.572390][ T3450] smc: removing ib device syz0 [ 299.046619][ T2964] bond0 (unregistering): Released all slaves [ 299.290441][ T7063] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 299.369955][ T5833] wg2 speed is unknown, defaulting to 1000 [ 299.390025][ T7088] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 299.435103][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.527735][ T7088] team0: Port device bond0 added [ 299.752656][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.916828][ T7126] loop4: detected capacity change from 0 to 512 [ 301.938971][ T7126] EXT4-fs: Ignoring removed nobh option [ 302.107481][ T7126] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.213: iget: bad i_size value: 38620345925642 [ 302.357253][ T7126] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.213: couldn't read orphan inode 15 (err -117) [ 302.659119][ T7126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.750546][ T6860] veth0_vlan: entered promiscuous mode [ 302.831103][ T6860] veth1_vlan: entered promiscuous mode [ 303.125023][ T6860] veth0_macvtap: entered promiscuous mode [ 303.621734][ T6412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.643280][ T6860] veth1_macvtap: entered promiscuous mode [ 303.733534][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.786480][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.889901][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.951646][ T7152] loop0: detected capacity change from 0 to 512 [ 303.981020][ T7152] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 304.020744][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.384341][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.686372][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.375571][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.440441][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.469973][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.481657][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.493498][ T6860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.516395][ T6860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.536691][ T6860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.558866][ T6860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.580908][ T1106] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 307.509807][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.709385][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.921595][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.991269][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.776156][ T7188] netlink: 'syz.0.224': attribute type 33 has an invalid length. [ 309.784133][ T7188] netlink: 51 bytes leftover after parsing attributes in process `syz.0.224'. [ 317.232288][ T7235] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 317.677696][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.687793][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.435203][ T5762] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 319.625472][ T5762] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 319.905569][ T5762] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 320.167135][ T5762] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 320.386852][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.416942][ T5762] usb 1-1: Product: syz [ 320.421907][ T5762] usb 1-1: Manufacturer: syz [ 320.426723][ T5762] usb 1-1: SerialNumber: syz [ 321.998598][ T5762] usb 1-1: config 0 descriptor?? [ 322.355528][ T7270] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 322.436049][ T5762] usb 1-1: can't set config #0, error -71 [ 322.481286][ T5762] usb 1-1: USB disconnect, device number 5 [ 326.299357][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 331.637211][ T7345] loop5: detected capacity change from 0 to 40427 [ 331.698142][ T7345] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 331.706049][ T7345] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 331.716641][ T7345] F2FS-fs (loop5): invalid crc value [ 331.787467][ T7345] F2FS-fs (loop5): Found nat_bits in checkpoint [ 331.842560][ T7348] ip6erspan0: entered promiscuous mode [ 331.926009][ T7345] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 331.933560][ T7345] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 332.200415][ T7360] capability: warning: `syz.5.247' uses deprecated v2 capabilities in a way that may be insecure [ 333.144146][ T7363] vivid-003: disconnect [ 334.142371][ T7364] vivid-003: reconnect [ 337.229347][ T789] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 337.237218][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 339.276974][ T789] usb 1-1: device descriptor read/64, error -32 [ 342.705682][ T7421] loop4: detected capacity change from 0 to 512 [ 344.421788][ T7430] tipc: Enabling of bearer rejected, failed to enable media [ 344.737957][ T7430] netlink: 104 bytes leftover after parsing attributes in process `syz.3.262'. [ 347.710051][ T7455] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)$`6L) ι] [ 347.718950][ T7455] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 347.732538][ T7455] Error parsing options; rc = [-22] [ 355.059885][ T789] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 355.302998][ T789] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.497102][ T789] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 355.847557][ T789] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 355.857001][ T789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 355.868287][ T789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 355.894575][ T789] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 355.951848][ T789] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.003992][ T789] usb 6-1: Product: syz [ 356.008323][ T789] usb 6-1: Manufacturer: syz [ 356.075457][ T789] cdc_wdm 6-1:1.0: skipping garbage [ 356.082774][ T789] cdc_wdm 6-1:1.0: skipping garbage [ 356.299767][ T789] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 356.371250][ T789] cdc_wdm 6-1:1.0: Unknown control protocol [ 356.732048][ T7503] tipc: Started in network mode [ 356.762603][ T789] usb 6-1: USB disconnect, device number 2 [ 356.782071][ T7503] tipc: Node identity 7f000001, cluster identity 4711 [ 356.864976][ T7503] tipc: Enabled bearer , priority 10 [ 357.059516][ T7503] netlink: 104 bytes leftover after parsing attributes in process `syz.5.276'. [ 358.297331][ T7544] loop0: detected capacity change from 0 to 4096 [ 358.644817][ T789] tipc: Node number set to 2130706433 [ 358.663484][ T7544] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 358.992987][ T7077] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 359.047678][ T7544] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 359.073139][ T7544] ntfs3: loop0: mft corrupted [ 359.077990][ T7544] ntfs3: loop0: Failed to load $Extend (-22). [ 359.106276][ T7544] ntfs3: loop0: Failed to initialize $Extend. [ 359.622338][ T7560] loop5: detected capacity change from 0 to 1024 [ 359.731649][ T7077] usb 5-1: device descriptor read/64, error -71 [ 360.069673][ T7077] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 361.736582][ T7560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 361.922747][ T7560] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.287: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=56 fake=0 [ 362.520262][ T7576] netlink: 'syz.4.290': attribute type 1 has an invalid length. [ 362.598584][ T6860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 363.229669][ T7576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.372929][ T7577] bond1: (slave ip6erspan0): making interface the new active one [ 363.385261][ T7577] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 364.143520][ T7588] tipc: Enabling of bearer rejected, failed to enable media [ 364.223593][ T7588] netlink: 104 bytes leftover after parsing attributes in process `syz.3.293'. [ 364.521503][ T7605] loop4: detected capacity change from 0 to 1024 [ 366.362163][ T789] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 366.379618][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 366.636662][ T23] IPVS: starting estimator thread 0... [ 366.766655][ T789] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.775732][ T789] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 366.786733][ T7631] IPVS: using max 22 ests per chain, 52800 per kthread [ 366.787648][ T789] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 366.802701][ T789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 366.818628][ T789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 366.869123][ T789] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 366.880120][ T789] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.890165][ T789] usb 6-1: Product: syz [ 366.894375][ T789] usb 6-1: Manufacturer: syz [ 366.913211][ T789] cdc_wdm 6-1:1.0: skipping garbage [ 366.940832][ T789] cdc_wdm 6-1:1.0: skipping garbage [ 366.956529][ T789] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 366.963098][ T789] cdc_wdm 6-1:1.0: Unknown control protocol [ 367.540510][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.547385][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.554080][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.560747][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.567090][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.573717][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.580063][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.586697][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.593122][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.599758][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.607848][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.614568][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.621063][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.627705][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.634056][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.640791][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.647177][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.653821][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.660519][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 367.667161][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 367.692759][ T789] usb 6-1: USB disconnect, device number 3 [ 367.692840][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 367.904930][ T7644] tipc: Enabling of bearer rejected, already enabled [ 367.964775][ T7619] netlink: 104 bytes leftover after parsing attributes in process `syz.5.296'. [ 368.015732][ T7619] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 368.059699][ T7619] tipc: Enabled bearer , priority 10 [ 368.803388][ T23] libceph: connect (1)[c::]:6789 error -101 [ 368.826684][ T7673] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 368.930834][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 368.953594][ T23] libceph: connect (1)[c::]:6789 error -101 [ 368.962885][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 369.025334][ T7667] ceph: No mds server is up or the cluster is laggy [ 371.749002][ T7687] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)$`6L) ι] [ 371.758310][ T7687] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 371.771934][ T7687] Error parsing options; rc = [-22] [ 372.210087][ T7701] loop4: detected capacity change from 0 to 16 [ 372.255521][ T7701] erofs: (device loop4): mounted with root inode @ nid 36. [ 372.350454][ T7701] erofs: (device loop4): z_erofs_readahead: readahead error at folio 340 @ nid 36 [ 372.364643][ T7701] syz.4.306: attempt to access beyond end of device [ 372.364643][ T7701] loop4: rw=524288, sector=22873858832, nr_sectors = 16 limit=16 [ 372.379581][ T7701] syz.4.306: attempt to access beyond end of device [ 372.379581][ T7701] loop4: rw=524288, sector=22873858840, nr_sectors = 16 limit=16 [ 372.394321][ T7701] syz.4.306: attempt to access beyond end of device [ 372.394321][ T7701] loop4: rw=524288, sector=14519143264, nr_sectors = 16 limit=16 [ 372.409161][ T7701] syz.4.306: attempt to access beyond end of device [ 372.409161][ T7701] loop4: rw=524288, sector=14519143272, nr_sectors = 16 limit=16 [ 372.425004][ T7701] syz.4.306: attempt to access beyond end of device [ 372.425004][ T7701] loop4: rw=524288, sector=63675288, nr_sectors = 16 limit=16 [ 372.439594][ T7701] syz.4.306: attempt to access beyond end of device [ 372.439594][ T7701] loop4: rw=524288, sector=63675296, nr_sectors = 16 limit=16 [ 372.454325][ T7701] syz.4.306: attempt to access beyond end of device [ 372.454325][ T7701] loop4: rw=524288, sector=16240345096, nr_sectors = 16 limit=16 [ 372.469580][ T7701] syz.4.306: attempt to access beyond end of device [ 372.469580][ T7701] loop4: rw=524288, sector=16240345104, nr_sectors = 16 limit=16 [ 372.484292][ T7701] syz.4.306: attempt to access beyond end of device [ 372.484292][ T7701] loop4: rw=524288, sector=16438238104, nr_sectors = 16 limit=16 [ 372.498952][ T7701] syz.4.306: attempt to access beyond end of device [ 372.498952][ T7701] loop4: rw=524288, sector=16438238112, nr_sectors = 16 limit=16 [ 372.979329][ T7077] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 373.281827][ T7077] usb 6-1: config 0 has an invalid interface number: 187 but max is 0 [ 373.361214][ T7705] tipc: Enabling of bearer rejected, failed to enable media [ 373.393117][ T7077] usb 6-1: config 0 has no interface number 0 [ 373.501726][ T7077] usb 6-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=f7.32 [ 373.605052][ T7077] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.719006][ T7077] usb 6-1: Product: syz [ 373.749842][ T7705] tipc: Enabling of bearer rejected, failed to enable media [ 373.777962][ T7077] usb 6-1: Manufacturer: syz [ 373.823171][ T7077] usb 6-1: SerialNumber: syz [ 373.953081][ T7077] usb 6-1: config 0 descriptor?? [ 374.010014][ T7077] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.187/input/input6 [ 374.659905][ T5762] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 375.077698][ T5762] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.094255][ T5762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.221431][ T9] libceph: connect (1)[c::]:6789 error -101 [ 375.233482][ T5762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.290220][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 375.330257][ T7719] ceph: No mds server is up or the cluster is laggy [ 375.341613][ T9] libceph: connect (1)[c::]:6789 error -101 [ 375.347942][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.360029][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 375.366151][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.387834][ T5762] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.397544][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.561612][ T5762] usb 1-1: Product: syz [ 375.569413][ T5762] usb 1-1: Manufacturer: syz [ 375.582699][ T5762] cdc_wdm 1-1:1.0: skipping garbage [ 375.589000][ T5762] cdc_wdm 1-1:1.0: skipping garbage [ 375.596170][ T5762] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 375.602235][ T5762] cdc_wdm 1-1:1.0: Unknown control protocol [ 375.784254][ T7715] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 375.796148][ T5762] usb 1-1: USB disconnect, device number 8 [ 376.006976][ T7715] tipc: Enabled bearer , priority 10 [ 376.019629][ T7715] netlink: 104 bytes leftover after parsing attributes in process `syz.0.307'. [ 376.035945][ T7715] tipc: Bearer : already 2 bearers with priority 10 [ 376.043635][ T7715] tipc: Bearer : trying with adjusted priority [ 376.051274][ T7715] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 376.064191][ T7715] tipc: Enabled bearer , priority 9 [ 376.617249][ T5125] bcm5974 6-1:0.187: could not read from device [ 376.694904][ T5762] usb 6-1: USB disconnect, device number 4 [ 376.708210][ T7209] bcm5974 6-1:0.187: could not read from device [ 378.835268][ T5833] IPVS: starting estimator thread 0... [ 379.240855][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.247326][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.299549][ T7748] IPVS: using max 18 ests per chain, 43200 per kthread [ 379.423000][ T5833] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 380.009520][ T5833] usb 1-1: device descriptor read/64, error -71 [ 381.873225][ T7765] veth0_to_team: entered promiscuous mode [ 381.968949][ T7772] bridge0: port 3(erspan0) entered blocking state [ 382.030828][ T7772] bridge0: port 3(erspan0) entered disabled state [ 382.073070][ T7772] erspan0: entered allmulticast mode [ 382.098040][ T7772] erspan0: entered promiscuous mode [ 382.106249][ T7772] bridge0: port 3(erspan0) entered blocking state [ 382.112887][ T7772] bridge0: port 3(erspan0) entered forwarding state [ 382.131964][ T7781] erspan0: left allmulticast mode [ 382.141465][ T7077] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 382.150219][ T7781] erspan0: left promiscuous mode [ 382.159821][ T7781] bridge0: port 3(erspan0) entered disabled state [ 382.301155][ T7077] usb 6-1: device descriptor read/64, error -71 [ 382.580064][ T7077] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 382.769377][ T7077] usb 6-1: device descriptor read/64, error -71 [ 382.899792][ T7077] usb usb6-port1: attempt power cycle [ 383.739581][ T5762] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 384.321035][ T5762] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.363351][ T5762] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 384.693466][ T5762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.911930][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 384.931437][ T5762] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.941148][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.949330][ T5762] usb 1-1: Product: syz [ 384.953790][ T5762] usb 1-1: Manufacturer: syz [ 385.037126][ T5762] cdc_wdm 1-1:1.0: skipping garbage [ 385.217221][ T5762] cdc_wdm 1-1:1.0: skipping garbage [ 385.225025][ T5762] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 385.309609][ T5762] usb 1-1: USB disconnect, device number 11 [ 385.618995][ T7792] tipc: Enabling of bearer rejected, already enabled [ 385.671550][ T7792] netlink: 104 bytes leftover after parsing attributes in process `syz.0.323'. [ 386.345708][ T7792] tipc: Enabling of bearer rejected, already enabled [ 386.606121][ T7813] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 386.647169][ T7813] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 386.817716][ T7813] kernel profiling enabled (shift: 6) [ 392.125055][ T7872] loop5: detected capacity change from 0 to 1764 [ 392.184591][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 396.882155][ T5762] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 397.111178][ T5762] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 397.140985][ T5762] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 397.169331][ T5762] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 397.178516][ T5762] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 397.231868][ T5762] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 397.259421][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 397.267516][ T5762] usb 5-1: Product: syz [ 397.299308][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 397.307097][ T5762] usb 5-1: Manufacturer: syz [ 397.327814][ T5762] cdc_wdm 5-1:1.0: skipping garbage [ 397.349361][ T5762] cdc_wdm 5-1:1.0: skipping garbage [ 397.354734][ T5762] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 397.529547][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 397.544224][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.561720][ T5762] usb 5-1: USB disconnect, device number 5 [ 397.572790][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 397.600109][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.615027][ T9] usb 1-1: Product: syz [ 397.628264][ T9] usb 1-1: Manufacturer: syz [ 397.636415][ T9] usb 1-1: SerialNumber: syz [ 397.655513][ T9] usb 1-1: config 0 descriptor?? [ 397.764491][ T7897] tipc: Started in network mode [ 397.779613][ T7897] tipc: Node identity 7f000001, cluster identity 4711 [ 397.797667][ T7897] tipc: Enabled bearer , priority 10 [ 397.835812][ T7897] netlink: 104 bytes leftover after parsing attributes in process `syz.4.343'. [ 397.873568][ T7897] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 397.902517][ T7897] tipc: Enabled bearer , priority 10 [ 398.104114][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 398.306295][ T9] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 398.329733][ T9] gs_usb: probe of 1-1:0.0 failed with error -121 [ 398.807408][ T7939] netlink: 755 bytes leftover after parsing attributes in process `syz.5.345'. [ 399.534390][ T789] tipc: Node number set to 2130706433 [ 400.451359][ T789] usb 1-1: USB disconnect, device number 12 [ 401.114164][ T5762] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 401.322491][ T5762] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.349888][ T7971] lo speed is unknown, defaulting to 1000 [ 401.360726][ T5762] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 401.378270][ T7972] pimreg3: entered allmulticast mode [ 401.387957][ T5762] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.399803][ T5762] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 401.414522][ T5762] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 401.441160][ T5762] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 401.453839][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.471044][ T5806] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 401.480955][ T5762] usb 5-1: Product: syz [ 401.485209][ T5762] usb 5-1: Manufacturer: syz [ 401.512864][ T5762] cdc_wdm 5-1:1.0: skipping garbage [ 401.549642][ T5762] cdc_wdm 5-1:1.0: skipping garbage [ 401.588172][ T5762] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 401.610752][ T5762] cdc_wdm 5-1:1.0: Unknown control protocol [ 401.671507][ T5806] usb 1-1: config 0 has an invalid interface number: 187 but max is 0 [ 401.689875][ T5806] usb 1-1: config 0 has no interface number 0 [ 401.714310][ C0] wdm_int_callback: 94 callbacks suppressed [ 401.714334][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 401.725429][ T5806] usb 1-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=f7.32 [ 401.726922][ C0] wdm_int_callback: 94 callbacks suppressed [ 401.726939][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 401.729666][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 401.754663][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 401.764131][ T7976] loop5: detected capacity change from 0 to 512 [ 401.769763][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 401.777050][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 401.783534][ T5762] usb 5-1: USB disconnect, device number 6 [ 401.789437][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 401.789452][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 401.789463][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 401.830829][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.845820][ T7976] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 401.870134][ T5806] usb 1-1: Product: syz [ 401.878473][ T5806] usb 1-1: Manufacturer: syz [ 401.889449][ T7976] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 401.909569][ T5806] usb 1-1: SerialNumber: syz [ 401.923294][ T5806] usb 1-1: config 0 descriptor?? [ 401.933853][ T7976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 401.950872][ T5806] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.187/input/input7 [ 401.961275][ T7976] System zones: 1-12 [ 401.980916][ T7976] EXT4-fs (loop5): 1 truncate cleaned up [ 401.988440][ T7976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.023586][ T7951] netlink: 104 bytes leftover after parsing attributes in process `syz.4.349'. [ 402.054236][ T7951] tipc: Enabling of bearer rejected, already enabled [ 403.583447][ T7997] loop4: detected capacity change from 0 to 512 [ 403.621233][ T7997] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 403.703585][ T7997] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 403.723295][ T7997] EXT4-fs (loop4): 1 truncate cleaned up [ 403.733148][ T7997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.339593][ T9] usb 1-1: USB disconnect, device number 13 [ 404.349781][ T5125] bcm5974 1-1:0.187: could not read from device [ 404.425830][ T5125] bcm5974 1-1:0.187: could not read from device [ 404.463456][ T7720] bcm5974 1-1:0.187: could not read from device [ 404.485291][ T6412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.519699][ T5125] bcm5974 1-1:0.187: could not read from device [ 406.597402][ T8025] (null): rxe_set_mtu: Set mtu to 1024 [ 406.605426][ T8025] rdma_rxe: rxe_newlink: failed to add syz_tun [ 407.727389][ T8035] loop0: detected capacity change from 0 to 8 [ 408.377475][ T8035] SQUASHFS error: lzo decompression failed, data probably corrupt [ 408.386313][ T8035] SQUASHFS error: Failed to read block 0x82: -5 [ 408.392837][ T8035] SQUASHFS error: Unable to read metadata cache entry [80] [ 408.400539][ T8035] SQUASHFS error: Unable to read inode 0x11f [ 411.225332][ T6860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.510257][ T788] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 412.741658][ T788] usb 5-1: config 0 has an invalid interface number: 187 but max is 0 [ 412.782230][ T788] usb 5-1: config 0 has no interface number 0 [ 412.810176][ T788] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=f7.32 [ 412.839564][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.851127][ T788] usb 5-1: Product: syz [ 412.855366][ T788] usb 5-1: Manufacturer: syz [ 412.879339][ T788] usb 5-1: SerialNumber: syz [ 412.887749][ T788] usb 5-1: config 0 descriptor?? [ 412.909653][ T788] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.187/input/input8 [ 413.713309][ T5762] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 414.005536][ T5762] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.106848][ T5762] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 414.236376][ T5762] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.364206][ T5762] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 414.377858][ T5762] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.387541][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.396913][ T5762] usb 6-1: Product: syz [ 414.401585][ T5762] usb 6-1: Manufacturer: syz [ 414.420620][ T5762] cdc_wdm 6-1:1.0: skipping garbage [ 414.433444][ T5762] cdc_wdm 6-1:1.0: skipping garbage [ 414.445197][ T5762] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 414.648849][ T7077] usb 6-1: USB disconnect, device number 8 [ 414.860077][ T8073] tipc: Enabling of bearer rejected, already enabled [ 414.969640][ T8073] netlink: 104 bytes leftover after parsing attributes in process `syz.5.371'. [ 415.022469][ T8083] tipc: Enabling of bearer rejected, already enabled [ 415.544032][ T8093] autofs4:pid:8093:autofs_fill_super: called with bogus options [ 416.201098][ T5125] bcm5974 5-1:0.187: could not read from device [ 416.897072][ T5125] bcm5974 5-1:0.187: could not read from device [ 416.965410][ T8101] ceph: No source [ 416.975742][ T8101] kAFS: unable to lookup cell '\/' [ 417.858746][ T8111] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 417.963959][ T8111] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 417.985041][ T788] usb 5-1: USB disconnect, device number 7 [ 417.991715][ T5125] bcm5974 5-1:0.187: could not read from device [ 418.219326][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 419.115313][ T8123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.216446][ T8127] bond_slave_0: entered promiscuous mode [ 419.222234][ T8127] bond_slave_1: entered promiscuous mode [ 419.554461][ T8127] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.587520][ T8127] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 419.769519][ T788] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 420.525077][ T8132] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 420.542997][ T8133] bridge0: port 3(erspan0) entered blocking state [ 420.576700][ T8133] bridge0: port 3(erspan0) entered disabled state [ 420.599326][ T788] usb 5-1: device descriptor read/64, error -71 [ 420.678002][ T8133] erspan0: entered allmulticast mode [ 420.753661][ T8133] erspan0: entered promiscuous mode [ 420.781044][ T8133] bridge0: port 3(erspan0) entered blocking state [ 420.787652][ T8133] bridge0: port 3(erspan0) entered forwarding state [ 420.870640][ T8140] erspan0: left allmulticast mode [ 420.876086][ T8140] erspan0: left promiscuous mode [ 420.904774][ T8140] bridge0: port 3(erspan0) entered disabled state [ 420.939288][ T788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 421.089455][ T788] usb 5-1: device descriptor read/64, error -71 [ 421.259867][ T788] usb usb5-port1: attempt power cycle [ 421.689425][ T788] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 421.761995][ T788] usb 5-1: device descriptor read/8, error -71 [ 422.059576][ T788] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 422.308548][ T788] usb 5-1: device descriptor read/8, error -71 [ 422.339339][ T789] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 422.541947][ T789] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 422.557750][ T789] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 422.584685][ T789] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 422.680313][ T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.766750][ T789] usb 6-1: Product: syz [ 422.818239][ T789] usb 6-1: Manufacturer: syz [ 422.866221][ T789] usb 6-1: SerialNumber: syz [ 423.010800][ T789] usb 6-1: config 0 descriptor?? [ 423.029361][ T8154] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 423.047728][ T8154] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 423.073710][ T789] option 6-1:0.0: GSM modem (1-port) converter detected [ 423.104578][ T789] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 423.121639][ T788] usb usb5-port1: unable to enumerate USB device [ 423.451596][ T789] usb 6-1: USB disconnect, device number 9 [ 423.476642][ T789] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 423.487331][ T789] option 6-1:0.0: device disconnected [ 425.126570][ T8171] veth0_to_team: entered promiscuous mode [ 425.779309][ T5806] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 426.639913][ T5806] usb 1-1: device descriptor read/64, error -71 [ 426.969308][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 427.143384][ T9] usb 6-1: device descriptor read/64, error -71 [ 427.199362][ T5762] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 427.379687][ T5762] usb 5-1: device descriptor read/64, error -71 [ 427.429439][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 427.637578][ T9] usb 6-1: device descriptor read/64, error -71 [ 427.649428][ T5762] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 427.958695][ T9] usb usb6-port1: attempt power cycle [ 428.060561][ T5762] usb 5-1: device descriptor read/64, error -71 [ 428.181005][ T5762] usb usb5-port1: attempt power cycle [ 428.403618][ T8189] loop0: detected capacity change from 0 to 512 [ 428.422091][ T8189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 428.486009][ T8189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 428.494323][ T8189] System zones: 1-12 [ 428.506842][ T8189] EXT4-fs (loop0): 1 truncate cleaned up [ 428.514098][ T8189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.570285][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 428.611128][ T9] usb 6-1: device descriptor read/8, error -71 [ 428.769663][ T5762] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 428.844544][ T5762] usb 5-1: device descriptor read/8, error -71 [ 428.920372][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 429.372524][ T9] usb 6-1: device descriptor read/8, error -71 [ 429.510881][ T5762] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 429.524257][ T9] usb usb6-port1: unable to enumerate USB device [ 429.657034][ T5762] usb 5-1: device descriptor read/8, error -71 [ 429.780112][ T5762] usb usb5-port1: unable to enumerate USB device [ 429.898174][ T8203] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 431.642685][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.651928][ T789] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 433.296529][ T789] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 433.306713][ T789] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 433.474011][ T789] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 433.483196][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.491543][ T789] usb 5-1: Product: syz [ 433.495871][ T789] usb 5-1: Manufacturer: syz [ 433.509345][ T789] usb 5-1: SerialNumber: syz [ 433.532833][ T789] usb 5-1: config 0 descriptor?? [ 434.150201][ T789] usb 5-1: can't set config #0, error -71 [ 434.384845][ T789] usb 5-1: USB disconnect, device number 16 [ 434.422792][ T8221] veth0_to_team: entered promiscuous mode [ 435.703945][ T8238] loop0: detected capacity change from 0 to 16 [ 436.595783][ T8238] erofs: (device loop0): mounted with root inode @ nid 36. [ 437.398131][ T8238] bio_check_eod: 20 callbacks suppressed [ 437.398145][ T8238] syz.0.405: attempt to access beyond end of device [ 437.398145][ T8238] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 439.267372][ T8259] bridge0: port 3(erspan0) entered blocking state [ 439.274891][ T8259] bridge0: port 3(erspan0) entered disabled state [ 439.285459][ T8259] erspan0: entered allmulticast mode [ 439.301534][ T8259] erspan0: entered promiscuous mode [ 439.314685][ T8259] bridge0: port 3(erspan0) entered blocking state [ 439.321315][ T8259] bridge0: port 3(erspan0) entered forwarding state [ 439.403501][ T8260] erspan0: left allmulticast mode [ 439.408725][ T8260] erspan0: left promiscuous mode [ 439.417102][ T8260] bridge0: port 3(erspan0) entered disabled state [ 439.575716][ T8261] loop4: detected capacity change from 0 to 2048 [ 439.655037][ T8261] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 439.687313][ T8261] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 439.695773][ T8261] UDF-fs: Scanning with blocksize 512 failed [ 439.779268][ T8261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.060005][ T28] audit: type=1800 audit(2000000068.130:5): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.410" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 441.381389][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.387961][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.186301][ T8283] netlink: 'syz.0.413': attribute type 4 has an invalid length. [ 447.632038][ T8296] loop5: detected capacity change from 0 to 512 [ 447.667526][ T8296] ext4: Unknown parameter 'noacl' [ 450.061810][ T8305] bridge0: port 3(gretap0) entered blocking state [ 450.074010][ T8305] bridge0: port 3(gretap0) entered disabled state [ 450.081825][ T8305] gretap0: entered allmulticast mode [ 450.096692][ T8305] gretap0: entered promiscuous mode [ 450.105777][ T8305] bridge0: port 3(gretap0) entered blocking state [ 450.112655][ T8305] bridge0: port 3(gretap0) entered forwarding state [ 452.101071][ T8313] nbd0: detected capacity change from 0 to 8589934655 [ 454.079347][ T5806] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 454.692893][ T5085] block nbd0: Receive control failed (result -104) [ 454.888450][ T5806] usb 1-1: config 0 has an invalid interface number: 187 but max is 0 [ 454.914915][ T5806] usb 1-1: config 0 has no interface number 0 [ 455.661216][ T5806] usb 1-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=f7.32 [ 455.689335][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.724452][ T5806] usb 1-1: Product: syz [ 455.766781][ T5806] usb 1-1: Manufacturer: syz [ 455.772399][ T5806] usb 1-1: SerialNumber: syz [ 455.792603][ T5806] usb 1-1: config 0 descriptor?? [ 456.068466][ T5806] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.187/input/input9 [ 456.477809][ T5125] bcm5974 1-1:0.187: could not read from device [ 456.501978][ T5125] bcm5974 1-1:0.187: could not read from device [ 456.518809][ T5806] usb 1-1: USB disconnect, device number 16 [ 458.799237][ T8358] bridge0: port 3(gretap0) entered blocking state [ 458.809268][ T8358] bridge0: port 3(gretap0) entered disabled state [ 458.834393][ T8358] gretap0: entered allmulticast mode [ 458.964377][ T8358] gretap0: entered promiscuous mode [ 459.029325][ T8358] bridge0: port 3(gretap0) entered blocking state [ 459.036149][ T8358] bridge0: port 3(gretap0) entered forwarding state [ 461.629813][ T8382] loop0: detected capacity change from 0 to 764 [ 462.744008][ T8374] tc_dump_action: action bad kind [ 464.214989][ T8394] loop5: detected capacity change from 0 to 2048 [ 464.399346][ T8394] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 464.415263][ T8394] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 464.423147][ T8394] UDF-fs: Scanning with blocksize 512 failed [ 466.389481][ T8394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.540424][ T28] audit: type=1800 audit(2000000094.750:6): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.440" name="file1" dev="loop5" ino=838 res=0 errno=0 [ 467.162865][ T8399] loop0: detected capacity change from 0 to 256 [ 467.726727][ T8402] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 467.734592][ T8402] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 471.427508][ T8430] loop4: detected capacity change from 0 to 64 [ 471.446840][ T8430] hfs: dir_umask requires a value [ 471.452067][ T8430] hfs: unable to parse mount options [ 471.767894][ T8425] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 472.107153][ T789] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 473.796495][ T789] usb 6-1: device descriptor read/64, error -71 [ 474.549443][ T789] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 475.197263][ T8446] netlink: 'syz.3.454': attribute type 10 has an invalid length. [ 475.205263][ T8446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.454'. [ 475.217321][ T8446] batman_adv: batadv0: Adding interface: virt_wifi0 [ 475.224792][ T8446] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.250593][ T8446] batman_adv: batadv0: Interface activated: virt_wifi0 [ 475.419975][ T28] audit: type=1326 audit(2000000103.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 475.486706][ T28] audit: type=1326 audit(2000000103.710:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 475.767988][ T28] audit: type=1326 audit(2000000103.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 476.279531][ T28] audit: type=1326 audit(2000000103.850:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 476.305226][ T28] audit: type=1326 audit(2000000103.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 476.327941][ T28] audit: type=1326 audit(2000000103.860:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 476.452366][ T28] audit: type=1326 audit(2000000103.870:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 476.529403][ T28] audit: type=1326 audit(2000000103.870:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 476.607770][ T28] audit: type=1326 audit(2000000103.870:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 477.911933][ T28] audit: type=1326 audit(2000000103.900:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 478.358187][ T8468] loop5: detected capacity change from 0 to 16 [ 478.386233][ T8468] erofs: (device loop5): mounted with root inode @ nid 36. [ 478.432389][ T8468] syz.5.462: attempt to access beyond end of device [ 478.432389][ T8468] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 478.792058][ T8470] syz.5.462: attempt to access beyond end of device [ 478.792058][ T8470] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 483.480980][ T24] block nbd0: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 30 seconds [ 483.495517][ T24] block nbd0: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 30 seconds [ 483.503393][ T789] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 483.508256][ T24] block nbd0: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 30 seconds [ 483.525971][ T24] block nbd0: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 30 seconds [ 484.866311][ T8491] loop5: detected capacity change from 0 to 1024 [ 485.048619][ T789] usb 5-1: device descriptor read/64, error -71 [ 485.218825][ T8494] fuse: Invalid rootmode [ 485.329560][ T789] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 485.500932][ T789] usb 5-1: device descriptor read/64, error -71 [ 485.729429][ T789] usb usb5-port1: attempt power cycle [ 486.139717][ T5085] Bluetooth: hci4: unexpected event for opcode 0x0c14 [ 486.346051][ T8509] netlink: 64 bytes leftover after parsing attributes in process `syz.3.469'. [ 489.234398][ T8524] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 489.241201][ T8524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 489.251178][ T8524] vhci_hcd vhci_hcd.0: Device attached [ 489.266589][ T8525] vhci_hcd: connection closed [ 489.274230][ T3450] vhci_hcd: stop threads [ 489.284400][ T3450] vhci_hcd: release socket [ 489.289087][ T3450] vhci_hcd: disconnect device [ 490.149488][ T8536] virtio-fs: tag not found [ 491.232926][ T8535] netlink: 'syz.5.477': attribute type 10 has an invalid length. [ 491.241019][ T8535] netlink: 40 bytes leftover after parsing attributes in process `syz.5.477'. [ 491.252751][ T8535] batman_adv: batadv0: Adding interface: virt_wifi0 [ 491.259423][ T8535] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.560762][ T8535] batman_adv: batadv0: Interface activated: virt_wifi0 [ 491.762538][ T5832] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 492.011330][ T5832] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.021486][ T5832] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 493.903258][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 493.913467][ T5832] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.275872][ T5832] usb 1-1: string descriptor 0 read error: -71 [ 494.298514][ T5832] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.319558][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.337990][ T5832] usb 1-1: can't set config #1, error -71 [ 494.349776][ T5832] usb 1-1: USB disconnect, device number 17 [ 495.030726][ T789] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 495.419491][ T5832] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 498.111026][ T789] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 498.166378][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 498.166394][ T28] audit: type=1326 audit(2000000126.410:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.281592][ T789] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 498.312753][ T28] audit: type=1326 audit(2000000126.410:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.351891][ T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.550251][ T789] usb 6-1: Product: syz [ 498.555237][ T789] usb 6-1: Manufacturer: syz [ 498.561900][ T789] usb 6-1: SerialNumber: syz [ 498.574145][ T789] usb 6-1: config 0 descriptor?? [ 498.579646][ T28] audit: type=1326 audit(2000000126.420:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.603132][ T8565] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 498.612041][ T28] audit: type=1326 audit(2000000126.420:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.668161][ T789] option 6-1:0.0: GSM modem (1-port) converter detected [ 498.676224][ T28] audit: type=1326 audit(2000000126.420:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.742303][ T28] audit: type=1326 audit(2000000126.420:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.766845][ T28] audit: type=1326 audit(2000000126.420:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.797941][ T28] audit: type=1326 audit(2000000126.420:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.820566][ T28] audit: type=1326 audit(2000000126.420:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.843735][ T28] audit: type=1326 audit(2000000126.420:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff3a3f9acb9 code=0x7ffc0000 [ 498.875011][ T789] usb 6-1: USB disconnect, device number 16 [ 498.885080][ T789] option 6-1:0.0: device disconnected [ 502.279207][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.285872][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.587849][ T8589] netlink: 'syz.5.489': attribute type 10 has an invalid length. [ 502.595963][ T8589] netlink: 40 bytes leftover after parsing attributes in process `syz.5.489'. [ 502.994953][ T8597] loop5: detected capacity change from 0 to 2048 [ 503.014005][ T8597] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 503.021912][ T8597] UDF-fs: Scanning with blocksize 512 failed [ 503.182014][ T8597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.961194][ T8605] loop7: detected capacity change from 0 to 7 [ 503.974292][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.983763][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.003726][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.012990][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.222050][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.231351][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.240867][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.250105][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.262531][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.271840][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.281044][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.290337][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.299246][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.308521][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.325066][ T8605] ldm_validate_partition_table(): Disk read failed. [ 504.380453][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.389756][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.437931][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.447245][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.467883][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 504.480078][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.489356][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 504.510377][ T8605] Dev loop7: unable to read RDB block 0 [ 504.534710][ T8606] netlink: 104 bytes leftover after parsing attributes in process `syz.3.493'. [ 504.578106][ T8605] loop7: unable to read partition table [ 504.812555][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 504.841944][ T8605] loop7: partition table beyond EOD, truncated [ 504.848197][ T8605] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 505.619382][ T28] kauditd_printk_skb: 177 callbacks suppressed [ 505.619396][ T28] audit: type=1326 audit(2000000133.860:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 505.648519][ T8618] loop5: detected capacity change from 0 to 1024 [ 505.682304][ T28] audit: type=1326 audit(2000000133.860:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 505.704598][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.711034][ T28] audit: type=1326 audit(2000000133.860:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 505.763496][ T28] audit: type=1326 audit(2000000133.860:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 505.788837][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.375460][ T28] audit: type=1326 audit(2000000133.860:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 507.423825][ T28] audit: type=1326 audit(2000000133.860:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 507.450236][ T28] audit: type=1326 audit(2000000133.860:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 507.472436][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.483415][ T28] audit: type=1326 audit(2000000133.860:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 507.505584][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.519510][ T5806] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 507.542568][ T28] audit: type=1326 audit(2000000133.860:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 507.663602][ T28] audit: type=1326 audit(2000000133.860:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a19acb9 code=0x7ffc0000 [ 507.882220][ T5806] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 508.559673][ T5806] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 508.956423][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.046164][ T5806] usb 1-1: Product: syz [ 509.086962][ T5806] usb 1-1: Manufacturer: syz [ 509.131443][ T5806] usb 1-1: SerialNumber: syz [ 509.228038][ T5806] usb 1-1: config 0 descriptor?? [ 509.252098][ T12] hfsplus: b-tree write err: -5, ino 4 [ 509.264442][ T5806] usb 1-1: can't set config #0, error -71 [ 509.274458][ T5806] usb 1-1: USB disconnect, device number 19 [ 514.233181][ T5140] udevd[5140]: worker [7243] /devices/virtual/block/nbd0 is taking a long time [ 515.264394][ T24] block nbd0: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 60 seconds [ 515.280632][ T24] block nbd0: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 60 seconds [ 515.292150][ T24] block nbd0: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 60 seconds [ 515.303964][ T24] block nbd0: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 60 seconds [ 519.837616][ T8694] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 519.845647][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.514'. [ 520.171342][ T8695] virtio-fs: tag not found [ 520.687635][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 521.026853][ T8705] netlink: 'syz.4.516': attribute type 4 has an invalid length. [ 521.128632][ T8707] ip6t_srh: unknown srh invflags 7F00 [ 523.588642][ T7077] lo speed is unknown, defaulting to 1000 [ 524.803481][ T8723] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 526.623340][ T8733] loop5: detected capacity change from 0 to 512 [ 526.650608][ T8733] EXT4-fs: Ignoring removed nobh option [ 526.700657][ T8733] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.525: iget: bad i_size value: 38620345925642 [ 526.724416][ T8733] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.525: couldn't read orphan inode 15 (err -117) [ 526.784061][ T8733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.760777][ T6860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.542356][ T8752] loop0: detected capacity change from 0 to 16 [ 529.662006][ T8752] erofs: (device loop0): mounted with root inode @ nid 36. [ 530.500086][ T8752] syz.0.520: attempt to access beyond end of device [ 530.500086][ T8752] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 530.987401][ T8760] syz.0.520: attempt to access beyond end of device [ 530.987401][ T8760] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 534.721791][ T8787] loop0: detected capacity change from 0 to 22 [ 534.728865][ T8787] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 535.158593][ T8787] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 536.411242][ T8795] nvme_fabrics: missing parameter 'transport=%s' [ 536.486336][ T8795] nvme_fabrics: missing parameter 'nqn=%s' [ 542.889511][ T8819] tipc: Enabling of bearer rejected, failed to enable media [ 542.946893][ T8819] netlink: 104 bytes leftover after parsing attributes in process `syz.3.550'. [ 542.984750][ T8819] tipc: Enabling of bearer rejected, failed to enable media [ 545.092137][ T8828] loop5: detected capacity change from 0 to 4096 [ 545.855927][ T24] block nbd0: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 90 seconds [ 545.869351][ T24] block nbd0: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 90 seconds [ 545.880982][ T24] block nbd0: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 90 seconds [ 545.895056][ T24] block nbd0: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 90 seconds [ 548.451563][ T8856] overlayfs: failed to resolve './bus': -2 [ 556.479529][ T7077] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 557.845990][ T8907] loop5: detected capacity change from 0 to 8192 [ 562.531010][ T8925] ptrace attach of "./syz-executor exec"[5772] was attempted by "./syz-executor exec"[8925] [ 563.449845][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.456224][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.824023][ T8945] pim6reg: entered allmulticast mode [ 571.735203][ T8966] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 577.070099][ T24] block nbd0: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 120 seconds [ 577.081089][ T24] block nbd0: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 120 seconds [ 577.092197][ T24] block nbd0: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 120 seconds [ 577.103304][ T24] block nbd0: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 120 seconds [ 577.490732][ T789] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 577.657881][ T9012] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 577.708281][ T789] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 577.717145][ T789] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 577.736560][ T789] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 577.785191][ T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 577.846553][ T789] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 577.866376][ T789] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 577.903825][ T789] usb 6-1: Product: syz [ 577.908076][ T789] usb 6-1: Manufacturer: syz [ 577.913118][ T9012] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 577.946841][ T789] cdc_wdm 6-1:1.0: skipping garbage [ 577.965140][ T789] cdc_wdm 6-1:1.0: skipping garbage [ 577.979361][ T789] cdc_wdm 6-1:1.0: skipping garbage [ 577.991002][ T789] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 578.201942][ T789] usb 6-1: USB disconnect, device number 17 [ 578.452161][ T9006] tipc: Enabling of bearer rejected, already enabled [ 578.511531][ T9006] netlink: 104 bytes leftover after parsing attributes in process `syz.5.590'. [ 578.666467][ T9006] tipc: Enabling of bearer rejected, already enabled [ 580.059852][ T9038] xt_bpf: check failed: parse error [ 583.493152][ T9051] syz.3.596 uses obsolete (PF_INET,SOCK_PACKET) [ 583.863130][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 583.874204][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 583.881702][ T5806] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 583.892993][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 583.905140][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 583.924203][ T5873] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 583.932139][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.013977][ T9063] lo speed is unknown, defaulting to 1000 [ 584.081366][ T5806] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 584.109463][ T5806] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 584.139413][ T5806] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 584.148474][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 584.193113][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 584.217126][ T5806] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 584.229591][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.247921][ T5806] usb 6-1: Product: syz [ 584.258048][ T5806] usb 6-1: Manufacturer: syz [ 584.281827][ T5806] cdc_wdm 6-1:1.0: skipping garbage [ 584.287221][ T5806] cdc_wdm 6-1:1.0: skipping garbage [ 584.321170][ T5806] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 584.327156][ T5806] cdc_wdm 6-1:1.0: Unknown control protocol [ 584.353572][ T9063] chnl_net:caif_netlink_parms(): no params data found [ 585.854933][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.861618][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.868113][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.874734][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.881011][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.887627][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.893920][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.900567][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.908616][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.915279][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.921888][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.928540][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.939170][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.945816][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.959515][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.966181][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.974575][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.981220][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 585.989220][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 585.989515][ T5873] Bluetooth: hci1: command tx timeout [ 585.995862][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 586.016485][ T789] usb 6-1: USB disconnect, device number 18 [ 586.022615][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 586.133306][ T9059] tipc: Enabling of bearer rejected, already enabled [ 586.155989][ T9059] netlink: 104 bytes leftover after parsing attributes in process `syz.5.597'. [ 587.154344][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.161747][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.169014][ T9063] bridge_slave_0: entered allmulticast mode [ 587.280636][ T9063] bridge_slave_0: entered promiscuous mode [ 587.310693][ T9059] tipc: Enabling of bearer rejected, already enabled [ 587.321687][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.328877][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.343799][ T9063] bridge_slave_1: entered allmulticast mode [ 587.351787][ T9063] bridge_slave_1: entered promiscuous mode [ 587.442344][ T9063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.465755][ T9063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.695618][ T9063] team0: Port device team_slave_0 added [ 587.725090][ T9063] team0: Port device team_slave_1 added [ 588.058568][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.067112][ T5873] Bluetooth: hci1: command tx timeout [ 588.104087][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.158520][ T9063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.187136][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.218943][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.268200][ T9063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.644875][ T9063] hsr_slave_0: entered promiscuous mode [ 588.728351][ T9114] autofs4:pid:9114:autofs_fill_super: called with bogus options [ 589.266478][ T9063] hsr_slave_1: entered promiscuous mode [ 589.363433][ T9113] syz_tun: entered allmulticast mode [ 589.800747][ T9106] syz_tun: left allmulticast mode [ 590.139874][ T5873] Bluetooth: hci1: command tx timeout [ 590.458715][ T9124] netlink: 104 bytes leftover after parsing attributes in process `syz.3.600'. [ 590.630967][ T9124] tipc: Enabling of bearer rejected, failed to enable media [ 591.089580][ T5806] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 592.645559][ T5873] Bluetooth: hci1: command tx timeout [ 592.651994][ T9063] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 592.737026][ T9063] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 592.916746][ T9063] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 593.099506][ T789] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 593.166799][ T9063] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.400383][ T789] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 593.524822][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.641244][ T789] usb 5-1: Product: syz [ 593.715848][ T789] usb 5-1: Manufacturer: syz [ 593.822648][ T789] usb 5-1: SerialNumber: syz [ 593.879212][ T5806] usb 6-1: device descriptor read/64, error -71 [ 594.634785][ T789] usb 5-1: config 0 descriptor?? [ 594.666312][ T9146] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 594.692861][ T789] usb 5-1: can't set config #0, error -71 [ 594.745358][ T9146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 594.843183][ T789] usb 5-1: USB disconnect, device number 21 [ 594.882303][ T9146] team0: entered promiscuous mode [ 594.887416][ T9146] team_slave_0: entered promiscuous mode [ 594.995196][ T9146] team_slave_1: entered promiscuous mode [ 595.011347][ T9146] bond0: entered promiscuous mode [ 595.016688][ T9146] bond_slave_0: entered promiscuous mode [ 595.042442][ T9146] bond_slave_1: entered promiscuous mode [ 595.053319][ T9146] team0: entered allmulticast mode [ 595.586716][ T9146] team_slave_0: entered allmulticast mode [ 595.596853][ T9146] team_slave_1: entered allmulticast mode [ 595.606536][ T9146] bond0: entered allmulticast mode [ 595.621757][ T9155] loop7: detected capacity change from 0 to 7 [ 595.635014][ C0] blk_print_req_error: 10 callbacks suppressed [ 595.635032][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.650438][ C0] buffer_io_error: 10 callbacks suppressed [ 595.650448][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.664583][ T9146] bond_slave_0: entered allmulticast mode [ 595.671526][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.674331][ T9146] bond_slave_1: entered allmulticast mode [ 595.680721][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.696854][ T9146] bridge0: port 3(team0) entered blocking state [ 595.709050][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.718383][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.730278][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.737031][ T9146] bridge0: port 3(team0) entered disabled state [ 595.739475][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.759511][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.768787][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.779978][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.789243][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.802357][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.811586][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.819547][ T8425] ldm_validate_partition_table(): Disk read failed. [ 595.827939][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.837181][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.838343][ T9146] bridge0: port 3(team0) entered blocking state [ 595.851436][ T9146] bridge0: port 3(team0) entered forwarding state [ 595.858198][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.867447][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.877853][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.887115][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 595.896821][ T8425] Dev loop7: unable to read RDB block 0 [ 595.993072][ T8425] loop7: unable to read partition table [ 595.999074][ T8425] loop7: partition table beyond EOD, truncated [ 596.188833][ T9155] ldm_validate_partition_table(): Disk read failed. [ 596.207047][ T9063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.254046][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.278681][ T9155] Dev loop7: unable to read RDB block 0 [ 597.290031][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.297208][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.320168][ T9155] loop7: unable to read partition table [ 597.329379][ T9155] loop7: partition table beyond EOD, truncated [ 597.345129][ T9155] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 597.376212][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.383488][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.589468][ T5806] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 597.806572][ T5806] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 597.845980][ T5806] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 597.887106][ T5806] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 597.923364][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 598.022928][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 598.050874][ T5806] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 598.071064][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 598.155498][ T5806] usb 6-1: Product: syz [ 598.176896][ T5806] usb 6-1: Manufacturer: syz [ 598.311970][ T5806] cdc_wdm 6-1:1.0: skipping garbage [ 598.443735][ T5806] cdc_wdm 6-1:1.0: skipping garbage [ 598.586171][ T5806] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 598.635244][ T5806] cdc_wdm 6-1:1.0: Unknown control protocol [ 598.698658][ T5806] usb 6-1: USB disconnect, device number 21 [ 598.828811][ T9162] tipc: Enabling of bearer rejected, already enabled [ 598.867487][ T9162] netlink: 104 bytes leftover after parsing attributes in process `syz.5.611'. [ 598.907937][ T9162] tipc: Enabling of bearer rejected, already enabled [ 599.063971][ T9063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.150116][ T9212] netlink: 'syz.3.613': attribute type 13 has an invalid length. [ 601.296204][ T9063] veth0_vlan: entered promiscuous mode [ 601.336137][ T9063] veth1_vlan: entered promiscuous mode [ 601.384204][ T9063] veth0_macvtap: entered promiscuous mode [ 601.394621][ T9063] veth1_macvtap: entered promiscuous mode [ 601.414364][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.425110][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.446821][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.471375][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.497385][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.613431][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.467224][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.486567][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.533638][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.645360][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.799326][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.849315][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.990948][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.031735][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.123785][ T9063] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.154041][ T9063] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.172133][ T9063] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.204022][ T9063] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.670165][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.791485][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.369827][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.377705][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.902051][ T9274] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 606.928936][ T9274] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 606.942958][ T9274] xt_nat: multiple ranges no longer supported [ 608.975145][ T24] block nbd0: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 150 seconds [ 608.986490][ T24] block nbd0: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 150 seconds [ 608.997874][ T24] block nbd0: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 150 seconds [ 609.009345][ T24] block nbd0: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 150 seconds [ 609.055610][ T9279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.335526][ T9279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.544539][ T9279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.663929][ T9279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.992287][ T9279] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.078482][ T9308] tipc: Can't bind to reserved service type 0 [ 612.789354][ T9279] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.805113][ T9279] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.819829][ T9279] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.114909][ T9319] batman_adv: batadv0: Adding interface: dummy0 [ 615.153410][ T9319] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.219619][ T9319] batman_adv: batadv0: Interface activated: dummy0 [ 615.270509][ T9319] batadv0: mtu less than device minimum [ 615.278297][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.291550][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.304074][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.316630][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.329143][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.341664][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.354104][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.366362][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.378781][ T9319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.768454][ T9324] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 618.279545][ T9333] xt_bpf: check failed: parse error [ 618.778719][ T9335] loop7: detected capacity change from 0 to 7 [ 618.813778][ C1] blk_print_req_error: 25 callbacks suppressed [ 618.813798][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.829318][ C1] buffer_io_error: 25 callbacks suppressed [ 618.829333][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 618.859398][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.868624][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 618.878499][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.887735][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 618.897075][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.906271][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 618.929155][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.938421][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 618.955568][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.964940][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 618.974401][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 618.983645][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 618.997138][ T9335] ldm_validate_partition_table(): Disk read failed. [ 619.119717][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.128911][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.137731][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.146927][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.155401][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.164641][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.174241][ T9335] Dev loop7: unable to read RDB block 0 [ 619.184567][ T9335] loop7: unable to read partition table [ 619.190761][ T9335] loop7: partition table beyond EOD, truncated [ 619.202831][ T9335] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 620.513412][ T9346] loop5: detected capacity change from 0 to 65536 [ 620.579054][ T9346] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 620.599227][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 620.609784][ T9346] XFS (loop5): totally zeroed log [ 620.617217][ T9346] XFS (loop5): Internal error hlen <= 0 || hlen > bufsize at line 2952 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x23a/0x380 [ 620.632346][ T9346] CPU: 1 PID: 9346 Comm: syz.5.646 Not tainted syzkaller #0 [ 620.639664][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 620.649773][ T9346] Call Trace: [ 620.653115][ T9346] [ 620.656050][ T9346] dump_stack_lvl+0x18c/0x250 [ 620.660775][ T9346] ? show_regs_print_info+0x20/0x20 [ 620.666011][ T9346] xfs_corruption_error+0x122/0x170 [ 620.671229][ T9346] ? xlog_valid_rec_header+0x23a/0x380 [ 620.676706][ T9346] xlog_valid_rec_header+0x2c9/0x380 [ 620.682025][ T9346] ? xlog_valid_rec_header+0x23a/0x380 [ 620.687515][ T9346] xlog_do_recovery_pass+0x9b9/0xdb0 [ 620.692841][ T9346] ? lock_chain_count+0x20/0x20 [ 620.697698][ T9346] ? xlog_do_io+0x360/0x360 [ 620.702216][ T9346] ? xlog_verify_head+0xea/0x430 [ 620.707156][ T9346] ? __kmem_cache_free+0xba/0x1e0 [ 620.712191][ T9346] xlog_verify_head+0x137/0x430 [ 620.717151][ T9346] xlog_find_tail+0x6c4/0xa00 [ 620.721849][ T9346] xlog_recover+0x4c/0x440 [ 620.726304][ T9346] xfs_log_mount+0x2c2/0x470 [ 620.730924][ T9346] xfs_mountfs+0xc58/0x1d40 [ 620.735446][ T9346] ? lockdep_softirqs_off+0x430/0x430 [ 620.740854][ T9346] ? xfs_default_resblks+0x70/0x70 [ 620.746008][ T9346] ? init_timer_key+0x161/0x2a0 [ 620.750900][ T9346] ? rcu_is_watching+0x15/0xb0 [ 620.755701][ T9346] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 620.761980][ T9346] xfs_fs_fill_super+0x112f/0x13a0 [ 620.767143][ T9346] get_tree_bdev+0x3f3/0x520 [ 620.771762][ T9346] ? vfs_parse_fs_string+0x170/0x170 [ 620.777075][ T9346] ? xfs_mount_set_dax_mode+0x100/0x100 [ 620.782649][ T9346] ? setup_bdev_super+0x660/0x660 [ 620.787700][ T9346] ? apparmor_capable+0x137/0x1a0 [ 620.792765][ T9346] ? bpf_lsm_capable+0x9/0x10 [ 620.797469][ T9346] ? security_capable+0x89/0xb0 [ 620.802344][ T9346] vfs_get_tree+0x8c/0x280 [ 620.806785][ T9346] do_new_mount+0x24b/0xa40 [ 620.811314][ T9346] __se_sys_mount+0x2e7/0x3d0 [ 620.816016][ T9346] ? __x64_sys_mount+0xc0/0xc0 [ 620.820832][ T9346] ? lockdep_hardirqs_on+0x98/0x150 [ 620.826060][ T9346] ? __x64_sys_mount+0x20/0xc0 [ 620.830855][ T9346] do_syscall_64+0x55/0xa0 [ 620.835290][ T9346] ? clear_bhb_loop+0x40/0x90 [ 620.839989][ T9346] ? clear_bhb_loop+0x40/0x90 [ 620.844691][ T9346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.850603][ T9346] RIP: 0033:0x7f2a9a19bf4a [ 620.855046][ T9346] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.874682][ T9346] RSP: 002b:00007f2a9afdae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 620.883118][ T9346] RAX: ffffffffffffffda RBX: 00007f2a9afdaee0 RCX: 00007f2a9a19bf4a [ 620.891118][ T9346] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f2a9afdaea0 [ 620.899129][ T9346] RBP: 0000200000000000 R08: 00007f2a9afdaee0 R09: 0000000000000000 [ 620.907136][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 620.915130][ T9346] R13: 00007f2a9afdaea0 R14: 000000000000b911 R15: 0000200000000080 [ 620.923131][ T9346] [ 620.926908][ T9346] XFS (loop5): Corruption detected. Unmount and run xfs_repair [ 620.934534][ T9346] XFS (loop5): Torn write (CRC failure) detected at log block 0x928. Truncating head block from 0x0. [ 620.957015][ T9346] XFS (loop5): failed to locate log tail [ 620.962939][ T9346] XFS (loop5): log mount/recovery failed: error -74 [ 620.973520][ T9346] XFS (loop5): log mount failed [ 621.116799][ T5833] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 621.127990][ T5833] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 621.139733][ T5833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 621.148858][ T5833] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 621.160667][ T5833] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 621.179640][ T5833] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 621.198383][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 621.214171][ T5833] usb 7-1: Product: syz [ 621.247816][ T5833] usb 7-1: Manufacturer: syz [ 621.272417][ T5833] cdc_wdm 7-1:1.0: skipping garbage [ 621.277683][ T5833] cdc_wdm 7-1:1.0: skipping garbage [ 621.290555][ T5833] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 621.296506][ T5833] cdc_wdm 7-1:1.0: Unknown control protocol [ 621.522234][ T5807] usb 7-1: USB disconnect, device number 2 [ 621.673128][ T9363] fuse: Unknown parameter 'fd0000000000000000000000000000000000000000' [ 622.407175][ T9344] tipc: Started in network mode [ 622.449871][ T9344] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 622.599644][ T9344] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 622.616176][ T9344] tipc: Enabled bearer , priority 10 [ 622.650429][ T9369] batman_adv: batadv0: Adding interface: dummy0 [ 622.677350][ T9369] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.730091][ T9369] batman_adv: batadv0: Interface activated: dummy0 [ 622.775619][ T9372] net_ratelimit: 10 callbacks suppressed [ 622.775635][ T9372] batadv0: mtu less than device minimum [ 622.818440][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 622.830846][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 622.843370][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 622.855805][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 622.868117][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 622.880042][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 622.891759][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 622.903315][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 622.914778][ T9372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 623.088964][ T9374] syz_tun: entered allmulticast mode [ 623.117409][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.652'. [ 624.116993][ T9374] syz_tun (unregistering): left allmulticast mode [ 624.254111][ T9281] tipc: Node number set to 1 [ 625.234040][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.281655][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.698881][ T9394] xt_bpf: check failed: parse error [ 628.569856][ T9404] loop6: detected capacity change from 0 to 256 [ 628.589359][ T9404] exfat: Deprecated parameter 'utf8' [ 628.714885][ T9404] exfat: Deprecated parameter 'namecase' [ 629.325394][ T9404] exFAT-fs (loop6): error, The cluster chain has a loop [ 629.349568][ T9404] exFAT-fs (loop6): Filesystem has been set read-only [ 629.356424][ T9404] exFAT-fs (loop6): failed to count the number of clusters in root [ 629.389346][ T9404] exFAT-fs (loop6): failed to recognize exfat type [ 629.498040][ T789] IPVS: starting estimator thread 0... [ 629.609634][ T9407] IPVS: using max 19 ests per chain, 45600 per kthread [ 631.129992][ T788] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 632.844107][ T9419] ceph: No mds server is up or the cluster is laggy [ 632.983929][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 633.009389][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 633.020723][ T28] kauditd_printk_skb: 160 callbacks suppressed [ 633.020737][ T28] audit: type=1326 audit(2000000261.270:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.6.663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60cfd9acb9 code=0x0 [ 633.140032][ T788] usb 5-1: device descriptor read/64, error -71 [ 633.288676][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 633.296205][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 633.449461][ T788] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 633.630541][ T788] usb 5-1: device descriptor read/64, error -71 [ 633.772725][ T788] usb usb5-port1: attempt power cycle [ 635.352704][ T9436] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 635.861946][ T9438] xt_bpf: check failed: parse error [ 638.505476][ T5806] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 638.690300][ T9451] futex_wake_op: syz.4.671 tries to shift op by -1; fix this program [ 639.129611][ T5806] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 639.149282][ T5806] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 639.172769][ T5806] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 639.197871][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 639.209266][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 639.223139][ T5806] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 639.249217][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 639.291248][ T5806] usb 6-1: Product: syz [ 639.295490][ T5806] usb 6-1: Manufacturer: syz [ 639.340754][ T5806] cdc_wdm 6-1:1.0: skipping garbage [ 639.346031][ T5806] cdc_wdm 6-1:1.0: skipping garbage [ 639.399703][ T5806] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 639.405671][ T5806] cdc_wdm 6-1:1.0: Unknown control protocol [ 641.044432][ T24] block nbd0: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 180 seconds [ 641.055513][ T24] block nbd0: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 180 seconds [ 641.066970][ T24] block nbd0: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 180 seconds [ 641.078580][ T24] block nbd0: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 180 seconds [ 642.037910][ T5762] usb 6-1: USB disconnect, device number 22 [ 642.480565][ T9469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.969590][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.677'. [ 644.202358][ T9462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.594570][ T9488] pim6reg1: entered promiscuous mode [ 645.600064][ T9488] pim6reg1: entered allmulticast mode [ 645.668433][ T9488] loop6: detected capacity change from 0 to 1024 [ 646.258871][ T9488] hfsplus: invalid file type 0120411 for inode 2 [ 646.265985][ T9488] hfsplus: failed to load root directory [ 648.211804][ T5762] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 649.616001][ T5762] usb 5-1: device descriptor read/64, error -71 [ 653.402815][ T9518] bridge0: port 3(gretap0) entered blocking state [ 653.409394][ T9518] bridge0: port 3(gretap0) entered disabled state [ 653.415993][ T9518] gretap0: entered allmulticast mode [ 653.422578][ T9518] gretap0: entered promiscuous mode [ 653.428183][ T9518] bridge0: port 3(gretap0) entered blocking state [ 653.435547][ T9518] bridge0: port 3(gretap0) entered forwarding state [ 653.730512][ T9521] loop5: detected capacity change from 0 to 256 [ 653.912651][ T9521] exfat: Deprecated parameter 'utf8' [ 653.959763][ T9521] exfat: Unknown parameter 'zero_size_dir' [ 654.150489][ T9527] loop6: detected capacity change from 0 to 512 [ 654.157618][ T9527] EXT4-fs: Ignoring removed oldalloc option [ 654.178462][ T9527] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 654.282388][ T9534] xt_bpf: check failed: parse error [ 656.139482][ T9527] EXT4-fs (loop6): 1 truncate cleaned up [ 656.146549][ T9527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.372665][ T9532] tipc: Enabling of bearer rejected, failed to enable media [ 656.470025][ T9532] netlink: 104 bytes leftover after parsing attributes in process `syz.3.691'. [ 656.934255][ T9063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.317985][ T9550] loop6: detected capacity change from 0 to 1024 [ 659.343217][ T9550] hfsplus: unable to parse mount options [ 664.250326][ T9577] bridge0: port 4(gretap0) entered blocking state [ 664.256884][ T9577] bridge0: port 4(gretap0) entered disabled state [ 664.263552][ T9577] gretap0: entered allmulticast mode [ 664.269859][ T9577] gretap0: entered promiscuous mode [ 664.275555][ T9577] bridge0: port 4(gretap0) entered blocking state [ 664.282119][ T9577] bridge0: port 4(gretap0) entered forwarding state [ 666.499442][ T9587] netlink: 'syz.6.702': attribute type 4 has an invalid length. [ 666.784557][ T9589] netlink: 'syz.6.702': attribute type 4 has an invalid length. [ 667.063960][ T5140] udevd[5140]: worker [7243] /devices/virtual/block/nbd0 timeout; kill it [ 667.097013][ T5140] udevd[5140]: seq 12684 '/devices/virtual/block/nbd0' killed [ 668.398194][ T9597] team0: Port device team_slave_0 removed [ 671.223948][ T9616] overlayfs: failed to clone lowerpath [ 671.828613][ T24] block nbd0: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 210 seconds [ 671.844160][ T24] block nbd0: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 210 seconds [ 671.859338][ T24] block nbd0: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 210 seconds [ 671.870377][ T24] block nbd0: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 210 seconds [ 679.310414][ T9665] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 680.150992][ T9669] xt_bpf: check failed: parse error [ 685.183950][ T9689] loop5: detected capacity change from 0 to 16 [ 685.523058][ T9689] erofs: (device loop5): mounted with root inode @ nid 36. [ 685.950402][ T9694] loop7: detected capacity change from 0 to 7 [ 685.958032][ C1] blk_print_req_error: 10 callbacks suppressed [ 685.958049][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 685.973503][ C1] buffer_io_error: 10 callbacks suppressed [ 685.973515][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.009322][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.018568][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.029711][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.038927][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.060839][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.070104][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.078550][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.087815][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.103781][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.113061][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.122836][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.132097][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.140334][ T8425] ldm_validate_partition_table(): Disk read failed. [ 686.154320][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.163552][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.178399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.187689][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.197549][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.206785][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.216845][ T8425] Dev loop7: unable to read RDB block 0 [ 686.230669][ T8425] loop7: unable to read partition table [ 686.236801][ T8425] loop7: partition table beyond EOD, truncated [ 686.255396][ T9694] ldm_validate_partition_table(): Disk read failed. [ 686.278204][ T9694] Dev loop7: unable to read RDB block 0 [ 686.305872][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.354472][ T9694] loop7: unable to read partition table [ 686.533479][ T9694] loop7: partition table beyond EOD, truncated [ 686.540409][ T9694] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 687.397274][ T9704] loop6: detected capacity change from 0 to 1024 [ 688.209436][ T788] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 688.447244][ T788] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 688.466320][ T788] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 688.494560][ T788] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 688.670874][ T788] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 688.682667][ T788] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 688.696024][ T788] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 688.709579][ T788] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 688.717618][ T788] usb 6-1: Product: syz [ 688.722092][ T788] usb 6-1: Manufacturer: syz [ 688.731399][ T788] cdc_wdm 6-1:1.0: skipping garbage [ 688.736655][ T788] cdc_wdm 6-1:1.0: skipping garbage [ 688.744621][ T5762] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 688.756244][ T788] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 688.763365][ T788] cdc_wdm 6-1:1.0: Unknown control protocol [ 688.878063][ T5873] Bluetooth: Frame is too long (len 18, expected len 4) [ 688.956679][ T5762] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 688.985322][ T5762] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 689.066859][ T5762] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.108349][ C0] wdm_int_callback: 57 callbacks suppressed [ 689.108372][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.120981][ C0] wdm_int_callback: 57 callbacks suppressed [ 689.121003][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.138475][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.145133][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.155933][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.162581][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.168889][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.175516][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.182069][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.188698][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.195658][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.202299][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.208788][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.215678][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.222018][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.228654][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.234983][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.241630][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.247942][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 689.254567][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 689.302585][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 689.311415][ T9281] usb 6-1: USB disconnect, device number 23 [ 689.500936][ T5762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 689.552900][ T9723] tipc: Enabling of bearer rejected, already enabled [ 689.561363][ T5762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 689.575913][ T5762] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.585158][ T5762] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.602572][ T9706] netlink: 104 bytes leftover after parsing attributes in process `syz.5.733'. [ 689.648479][ T9706] tipc: Enabling of bearer rejected, already enabled [ 689.697162][ T5762] usb 7-1: Product: syz [ 689.702039][ T5762] usb 7-1: Manufacturer: syz [ 689.712023][ T5762] cdc_wdm 7-1:1.0: skipping garbage [ 689.717299][ T5762] cdc_wdm 7-1:1.0: skipping garbage [ 689.726381][ T5762] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 689.733795][ T5762] cdc_wdm 7-1:1.0: Unknown control protocol [ 689.917808][ T788] usb 7-1: USB disconnect, device number 3 [ 689.923845][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 690.146311][ T9715] netlink: 104 bytes leftover after parsing attributes in process `syz.6.735'. [ 690.162975][ T9715] tipc: Enabling of bearer rejected, already enabled [ 691.326585][ T9736] loop7: detected capacity change from 0 to 7 [ 691.348247][ C1] blk_print_req_error: 25 callbacks suppressed [ 691.348263][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.363745][ C1] buffer_io_error: 25 callbacks suppressed [ 691.363761][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.393062][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.402329][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.412098][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.421332][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.452418][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.461800][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.488074][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.497474][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.519531][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.528792][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.542004][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.551303][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.559608][ T8425] ldm_validate_partition_table(): Disk read failed. [ 691.568121][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.577390][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 692.530870][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.540160][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 692.554228][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.563419][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 692.583818][ T8425] Dev loop7: unable to read RDB block 0 [ 692.630263][ T9749] netlink: 'syz.6.748': attribute type 2 has an invalid length. [ 692.689904][ T8425] loop7: unable to read partition table [ 692.715842][ T8425] loop7: partition table beyond EOD, truncated [ 693.900714][ T9754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.071925][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 694.085332][ T28] audit: type=1326 audit(2000000322.330:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.5.743" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a9a19acb9 code=0x0 [ 694.088317][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 694.399518][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 694.409177][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 694.449522][ T9759] ceph: No mds server is up or the cluster is laggy [ 695.496155][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 695.509817][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 697.198896][ T5806] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 697.721190][ T5806] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 697.781279][ T5806] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 697.865405][ T5806] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 697.943013][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 698.036260][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 698.118734][ T5806] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 698.128314][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 698.149526][ T5806] usb 6-1: Product: syz [ 698.153782][ T5806] usb 6-1: Manufacturer: syz [ 698.187727][ T5806] cdc_wdm 6-1:1.0: skipping garbage [ 698.198175][ T5806] cdc_wdm 6-1:1.0: skipping garbage [ 698.205559][ T5806] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 698.213222][ T5806] cdc_wdm 6-1:1.0: Unknown control protocol [ 698.845078][ T788] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 698.944467][ T5806] usb 6-1: USB disconnect, device number 24 [ 699.133297][ T788] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 699.142613][ T788] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 699.153323][ T788] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 699.162864][ T788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 699.174479][ T788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 699.199817][ T788] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 699.208948][ T788] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 699.217892][ T788] usb 7-1: Product: syz [ 699.222913][ T788] usb 7-1: Manufacturer: syz [ 699.234848][ T9773] tipc: Enabling of bearer rejected, already enabled [ 699.246447][ T9773] netlink: 104 bytes leftover after parsing attributes in process `syz.5.747'. [ 699.276507][ T788] cdc_wdm 7-1:1.0: skipping garbage [ 699.282145][ T788] cdc_wdm 7-1:1.0: skipping garbage [ 699.289789][ T788] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 699.295925][ T788] cdc_wdm 7-1:1.0: Unknown control protocol [ 699.307307][ T9773] tipc: Enabling of bearer rejected, already enabled [ 699.379470][ T9792] delete_channel: no stack [ 699.524493][ C1] wdm_int_callback: 204 callbacks suppressed [ 699.524519][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.537312][ C1] wdm_int_callback: 204 callbacks suppressed [ 699.537332][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.549607][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.557146][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.563799][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.570123][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.576748][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.583056][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.589673][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.595983][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.602696][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.609596][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.616233][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.622553][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.629206][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.635515][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.642135][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.648496][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.655114][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.661427][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 699.668142][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 699.675876][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 699.684795][ T5806] usb 7-1: USB disconnect, device number 4 [ 700.138405][ T9787] delete_channel: no stack [ 700.199934][ T9796] loop7: detected capacity change from 0 to 7 [ 700.206591][ T9795] netlink: 104 bytes leftover after parsing attributes in process `syz.6.751'. [ 700.221993][ C0] blk_print_req_error: 10 callbacks suppressed [ 700.222010][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.237497][ C0] buffer_io_error: 10 callbacks suppressed [ 700.237521][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 700.252793][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.262035][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 700.278243][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.287491][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 700.296072][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.305298][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 700.319123][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.328423][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 700.339193][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.348420][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 700.358072][ T9795] tipc: Enabling of bearer rejected, already enabled [ 700.368724][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.377955][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 700.386750][ T9796] ldm_validate_partition_table(): Disk read failed. [ 700.396360][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.405615][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 701.436480][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.445776][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 701.465921][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.475150][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 701.503951][ T9796] Dev loop7: unable to read RDB block 0 [ 701.523762][ T9796] loop7: unable to read partition table [ 701.549586][ T9796] loop7: partition table beyond EOD, truncated [ 701.556346][ T9796] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 702.350481][ T9808] loop5: detected capacity change from 0 to 164 [ 703.052437][ T9808] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 703.068803][ T9807] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 703.400416][ T8395] block nbd0: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 240 seconds [ 703.411510][ T8395] block nbd0: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 240 seconds [ 703.422737][ T8395] block nbd0: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 240 seconds [ 703.433849][ T8395] block nbd0: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 240 seconds [ 704.977898][ T9813] ceph: No mds server is up or the cluster is laggy [ 708.677740][ T9833] team0: Port device team_slave_0 removed [ 709.896590][ T9828] Bluetooth: hci1: command 0x0406 tx timeout [ 710.051132][ T5832] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 710.241472][ T5832] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 710.453312][ T9851] loop6: detected capacity change from 0 to 2048 [ 711.259904][ T29] INFO: task syz.0.577:8940 blocked for more than 144 seconds. [ 712.097799][ T5832] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 712.159744][ T29] Not tainted syzkaller #0 [ 712.238817][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 712.276069][ T5832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 712.367117][ T29] task:syz.0.577 state:D stack:27880 pid:8940 ppid:5772 flags:0x00004004 [ 712.405982][ T5832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 712.490377][ T29] Call Trace: [ 712.493839][ T29] [ 712.496821][ T29] __schedule+0x1553/0x45a0 [ 712.501641][ T29] ? asan.module_dtor+0x20/0x20 [ 712.506572][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 712.511502][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 712.517044][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 712.523354][ T29] schedule+0xbd/0x170 [ 712.527469][ T29] schedule_preempt_disabled+0x13/0x20 [ 712.533055][ T29] __mutex_lock+0x6a9/0xcc0 [ 712.537705][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 712.542924][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 712.548175][ T29] ? mutex_lock_nested+0x20/0x20 [ 712.553234][ T29] ? iput+0x343/0x920 [ 712.557260][ T29] ? ilookup+0x1c4/0x200 [ 712.561680][ T29] ? disk_block_events+0xa7/0x120 [ 712.566770][ T29] ? blkdev_get_by_dev+0xf7/0x600 [ 712.571895][ T5832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 712.583375][ T29] blkdev_get_by_dev+0x121/0x600 [ 712.588376][ T29] blkdev_open+0x152/0x360 [ 712.592910][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 712.597653][ T29] do_dentry_open+0x8c6/0x1500 [ 712.602696][ T29] path_openat+0x27f1/0x3230 [ 712.607388][ T29] ? do_sys_openat2+0xda/0x1d0 [ 712.612430][ T29] ? verify_lock_unused+0x140/0x140 [ 712.617694][ T29] ? do_filp_open+0x430/0x430 [ 712.626789][ T29] ? __virt_addr_valid+0x18c/0x540 [ 712.643806][ T9851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 712.665501][ T29] do_filp_open+0x1f5/0x430 [ 712.679277][ T29] ? vfs_tmpfile+0x490/0x490 [ 712.685218][ T29] ? _raw_spin_unlock+0x28/0x40 [ 712.690387][ T29] ? alloc_fd+0x58f/0x630 [ 712.696089][ T29] do_sys_openat2+0x134/0x1d0 [ 712.701721][ T29] ? do_sys_open+0xe0/0xe0 [ 712.706470][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 712.721767][ T29] ? lock_chain_count+0x20/0x20 [ 712.732069][ T29] __x64_sys_openat+0x139/0x160 [ 712.755822][ T29] do_syscall_64+0x55/0xa0 [ 712.763978][ T29] ? clear_bhb_loop+0x40/0x90 [ 712.774105][ T29] ? clear_bhb_loop+0x40/0x90 [ 712.786948][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.800362][ T29] RIP: 0033:0x7facb515b58e [ 712.888030][ T29] RSP: 002b:00007facb604fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 712.896885][ T29] RAX: ffffffffffffffda RBX: 00007facb60506c0 RCX: 00007facb515b58e [ 712.916860][ T29] RDX: 0000000000000000 RSI: 00007facb604fc00 RDI: ffffffffffffff9c [ 712.926241][ T29] RBP: 00007facb604fc00 R08: 0000000000000000 R09: 0000000000000000 [ 712.937486][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 712.948629][ T29] R13: 00007facb5416038 R14: 00007facb5415fa0 R15: 00007fffc62cea38 [ 712.972927][ T29] [ 712.976606][ T29] [ 712.976606][ T29] Showing all locks held in the system: [ 712.986612][ T9847] syz.4.766 (9847) used greatest stack depth: 17864 bytes left [ 713.000159][ T29] 1 lock held by ksoftirqd/0/16: [ 713.041209][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 713.059246][ T29] 1 lock held by khungtaskd/29: [ 713.064252][ T29] #0: ffffffff8d12ffe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 713.076535][ T29] 3 locks held by kworker/u4:9/1130: [ 713.082425][ T29] 2 locks held by kworker/u4:11/3450: [ 713.088188][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 713.099027][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 713.108032][ T29] 2 locks held by getty/5529: [ 713.113429][ T29] #0: ffff88802d82e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 713.123720][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 713.142569][ T29] 2 locks held by syz-executor/5760: [ 713.154544][ T29] 2 locks held by syz-executor/5780: [ 713.164479][ T29] 3 locks held by kworker/0:5/5832: [ 713.170131][ T29] #0: ffff888146a6a938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.184500][ T29] #1: ffffc900049ffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.215694][ T29] #2: ffff88814336f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 713.254155][ T29] 1 lock held by udevd/7243: [ 713.274512][ T29] #0: ffff88814133e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 713.307647][ T29] 1 lock held by syz.0.577/8940: [ 713.314248][ T29] #0: ffff88814133e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 713.332236][ T29] 2 locks held by kworker/0:6/9281: [ 713.337705][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.350399][ T29] #1: ffffc9000be9fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.368503][ T29] 1 lock held by syz.5.764/9841: [ 713.376223][ T29] #0: ffffffff8d1359b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 713.391344][ T29] 2 locks held by syz.6.767/9848: [ 713.396544][ T29] #0: ffff8880773d7420 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 713.410619][ T29] #1: ffffffff8d1359b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 713.432280][ T5832] usb 6-1: string descriptor 0 read error: -71 [ 713.450026][ T5832] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 713.465529][ T29] [ 713.468060][ T29] ============================================= [ 713.468060][ T29] [ 713.482331][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 713.490780][ T29] NMI backtrace for cpu 0 [ 713.495165][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 713.502385][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.512484][ T29] Call Trace: [ 713.515791][ T29] [ 713.518753][ T29] dump_stack_lvl+0x18c/0x250 [ 713.523457][ T29] ? show_regs_print_info+0x20/0x20 [ 713.528659][ T29] ? load_image+0x400/0x400 [ 713.533178][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 713.538136][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 713.544299][ T29] ? _printk+0xde/0x130 [ 713.548461][ T29] ? load_image+0x400/0x400 [ 713.552972][ T29] ? load_image+0x400/0x400 [ 713.557486][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 713.563568][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 713.569553][ T29] watchdog+0xf3d/0xf80 [ 713.573722][ T29] ? watchdog+0x1e1/0xf80 [ 713.578060][ T29] kthread+0x2fa/0x390 [ 713.582129][ T29] ? hungtask_pm_notify+0x90/0x90 [ 713.587160][ T29] ? kthread_blkcg+0xd0/0xd0 [ 713.591766][ T29] ret_from_fork+0x48/0x80 [ 713.596190][ T29] ? kthread_blkcg+0xd0/0xd0 [ 713.600785][ T29] ret_from_fork_asm+0x11/0x20 [ 713.605579][ T29] [ 713.610126][ T29] Sending NMI from CPU 0 to CPUs 1: [ 713.615394][ C1] NMI backtrace for cpu 1 [ 713.615403][ C1] CPU: 1 PID: 3450 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 713.615419][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.615429][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 713.615451][ C1] RIP: 0010:unwind_next_frame+0xc3/0x2970 [ 713.615478][ C1] Code: ee e8 11 e0 4b 00 89 ac 24 8c 00 00 00 85 ed 74 77 4c 89 74 24 60 48 89 5c 24 18 bf 01 00 00 00 e8 52 47 21 00 49 8d 6c 24 50 <48> 89 e8 48 c1 e8 03 48 89 44 24 50 42 80 3c 28 00 74 08 48 89 ef [ 713.615491][ C1] RSP: 0018:ffffc9000cf77578 EFLAGS: 00000202 [ 713.615503][ C1] RAX: 0000000000000002 RBX: 1ffff920019eeec9 RCX: ffffffff972ab403 [ 713.615514][ C1] RDX: ffff88802e150000 RSI: 0000000000000001 RDI: 0000000000000001 [ 713.615524][ C1] RBP: ffffc9000cf77698 R08: ffffc9000cf77710 R09: 0000000000000000 [ 713.615534][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000cf77648 [ 713.615544][ C1] R13: dffffc0000000000 R14: ffffc9000cf77680 R15: ffffffff817598da [ 713.615555][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 713.615568][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.615578][ C1] CR2: 00007ff3a41e0ad8 CR3: 0000000045dbe000 CR4: 00000000003506e0 [ 713.615592][ C1] Call Trace: [ 713.615597][ C1] [ 713.615602][ C1] ? arch_stack_walk+0xf8/0x190 [ 713.615621][ C1] ? stack_trace_save+0xaa/0x100 [ 713.615640][ C1] ? stack_trace_save+0xaa/0x100 [ 713.615663][ C1] ? stack_trace_save+0x100/0x100 [ 713.615680][ C1] arch_stack_walk+0x144/0x190 [ 713.615697][ C1] ? stack_trace_save+0xaa/0x100 [ 713.615716][ C1] stack_trace_save+0xaa/0x100 [ 713.615734][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 713.615752][ C1] ? skb_release_data+0x634/0x800 [ 713.615772][ C1] ? kasan_set_track+0x4e/0x70 [ 713.615787][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 713.615804][ C1] kasan_set_track+0x4e/0x70 [ 713.615842][ C1] ? __kmem_cache_alloc_node+0x13a/0x250 [ 713.615863][ C1] ? __alloc_skb+0x138/0x2c0 [ 713.615879][ C1] __kasan_kmalloc+0x8f/0xa0 [ 713.615895][ C1] ? __alloc_skb+0x138/0x2c0 [ 713.615910][ C1] __kmalloc_node_track_caller+0xb2/0x230 [ 713.615933][ C1] ? rcu_is_watching+0x15/0xb0 [ 713.615953][ C1] ? __alloc_skb+0x138/0x2c0 [ 713.615968][ C1] kmalloc_reserve+0x116/0x240 [ 713.615986][ C1] __alloc_skb+0x138/0x2c0 [ 713.616003][ C1] nsim_dev_trap_report_work+0x293/0xb00 [ 713.616031][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 713.616049][ C1] process_scheduled_works+0xa5d/0x15d0 [ 713.616081][ C1] ? assign_work+0x430/0x430 [ 713.616101][ C1] ? assign_work+0x3d0/0x430 [ 713.616122][ C1] worker_thread+0xa55/0xfc0 [ 713.616152][ C1] kthread+0x2fa/0x390 [ 713.616165][ C1] ? pr_cont_work+0x560/0x560 [ 713.616183][ C1] ? kthread_blkcg+0xd0/0xd0 [ 713.616197][ C1] ret_from_fork+0x48/0x80 [ 713.616214][ C1] ? kthread_blkcg+0xd0/0xd0 [ 713.616228][ C1] ret_from_fork_asm+0x11/0x20 [ 713.616269][ C1] [ 713.869635][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 713.869672][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 713.869716][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.869742][ T29] Call Trace: [ 713.869760][ T29] [ 713.869778][ T29] dump_stack_lvl+0x18c/0x250 [ 713.869849][ T29] ? show_regs_print_info+0x20/0x20 [ 713.869894][ T29] ? load_image+0x400/0x400 [ 713.869977][ T29] panic+0x2dc/0x730 [ 713.870032][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 713.870082][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 713.870138][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 713.870200][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 713.870278][ T29] watchdog+0xf7c/0xf80 [ 713.870345][ T29] ? watchdog+0x1e1/0xf80 [ 713.870425][ T29] kthread+0x2fa/0x390 [ 713.870469][ T29] ? hungtask_pm_notify+0x90/0x90 [ 713.870528][ T29] ? kthread_blkcg+0xd0/0xd0 [ 713.870567][ T29] ret_from_fork+0x48/0x80 [ 713.870627][ T29] ? kthread_blkcg+0xd0/0xd0 [ 713.870673][ T29] ret_from_fork_asm+0x11/0x20 [ 713.870768][ T29] [ 713.873980][ T29] Kernel Offset: disabled [ 714.026775][ T29] Rebooting in 86400 seconds..