last executing test programs: 18m49.244802014s ago: executing program 1 (id=485): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10459, &(0x7f0000000780)={[{@usrquota}, {@nodiscard}, {@nombcache}, {@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}, 0x0}, {@noinit_itable}, {@oldalloc}, {@nombcache}, {@noquota}, {@nobh}, {@jqfmt_vfsv0}, {@user_xattr}, {@jqfmt_vfsold}, {@max_batch_time}], [], 0x2c}, 0x1, 0x4e9, &(0x7f0000000240)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x99) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x1e7) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) poll(&(0x7f0000000380)=[{r5, 0x8c}], 0x1, 0x0) 18m46.324132718s ago: executing program 1 (id=490): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @private, @multicast1}, &(0x7f00000006c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0, r2, 0x25, 0x15, @val=@netfilter={0x3, 0x0, 0xffffffd7}}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @private, @loopback}, &(0x7f00000001c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x53b, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x1000, 0x17, &(0x7f0000000bc0)="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", &(0x7f0000000280)=""/23, 0x9, 0x0, 0xf0, 0xfb, &(0x7f0000000300)="9389198bdc88ff67e7bd5b92098384fb361e5d12f78523c51e5de29b795cf14d6478ec461fef67c0d9a618e37449c48a0e9d921e72d1310bf7c971c6207721769a280853383360c2f4a8ac6363e3c89a022fa54107f9a228a8db7e0a01a71a1e54abbaeec6081a7004217474dc9dffb4025a37e83808deab05f5b2318f6b520ea8695c278aca43b90e1faf899835a8a56e445116a554a35c3430261ccb619d888466448fa233985e39fe3e664af8facae870ee0928f7abb6fb34bc19e4af81050844d5890410da774c19bad3fb08349df9d8d219ed969165b2f91d7b09bedca0c5cee3af5a81e85afce2cebd39a49c43", &(0x7f00000004c0)="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", 0x2, 0x0, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00008d0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="fd", 0x1}], 0x1}, 0x0) sendmmsg$unix(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x100000008) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 18m42.284221874s ago: executing program 1 (id=497): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) 18m39.917234517s ago: executing program 1 (id=499): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x3, 0x9, 0x48, 0x0, "e9257fb792464e730d"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x68}, 0x1, 0x7}, 0x0) r2 = mq_open(&(0x7f0000000080)='.pending_reads\x00', 0x40, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x5452, &(0x7f0000000140)) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/175) r3 = semget(0x3, 0x2, 0x21) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/25) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) lsm_set_self_attr(0x0, &(0x7f0000000a00)=ANY=[], 0x20, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f0000000100)=@tcp, 0x2}, 0x20) readv(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) 18m36.647756962s ago: executing program 1 (id=503): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "e0f493"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}]}]}, 0x50}}, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1485544, &(0x7f00000001c0)) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 18m35.16829093s ago: executing program 1 (id=508): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="001db92218ff0e014ef34797fd5556"], 0x1, 0x179, &(0x7f00000003c0)="$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") mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f00000001c0)='net/unix\x00') lseek(r3, 0xae7d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) capget(&(0x7f0000000240)={0x20071026, r0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x10) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x890b, &(0x7f0000000000)=@req={0x28, &(0x7f0000000180)={'vxcan1\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}}) 18m33.059380763s ago: executing program 32 (id=508): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="001db92218ff0e014ef34797fd5556"], 0x1, 0x179, &(0x7f00000003c0)="$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") mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f00000001c0)='net/unix\x00') lseek(r3, 0xae7d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) capget(&(0x7f0000000240)={0x20071026, r0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x10) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x890b, &(0x7f0000000000)=@req={0x28, &(0x7f0000000180)={'vxcan1\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}}) 7m7.364835234s ago: executing program 0 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x2e, 0x4, @tid=r0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r5, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x58, r7, 0x1, 0xffffffff, 0x0, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x58}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x4, 0x7fff, 0x10, @remote, @mcast2, 0x1, 0x40, 0xcb, 0x4}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007", @ANYRES32=r10, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m5.116945372s ago: executing program 0 (id=1531): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) getpeername(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x80) sendfile(r7, r7, 0x0, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) r10 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x24800, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, 0x0) 7m3.516301154s ago: executing program 0 (id=1534): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000006c0)={0x2, @pix={0x7, 0x6, 0x30324c4a, 0x1, 0x0, 0x4, 0x4, 0xffffffff, 0x1, 0x6, 0x2, 0x3}}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r7}, 0x10) 7m0.147926132s ago: executing program 0 (id=1541): r0 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000016404,dir_umask=00000000000000000000006,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30313737370000373737373737373737373737373737332c696f636861727365743563703836352c636f6465706167653d6b6f69382d72750c00cae2aaeeeedb8dc5c45ed9cfe17a2a9bd16ef28a3179aa7eff4288b001ff551ce0544b6d0070091d31754005bb7e4d38403911690b90925981d16b0f3670e41cebe81296d0c5483489"], 0x1, 0x2f5, &(0x7f00000005c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e80), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x178, 0x11, 0x148, 0x0, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3e}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00', 0x104) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x600242, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0/file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x1, 0x40, 0x2, 0x6, {{0x1e, 0x4, 0x1, 0x24, 0x78, 0x66, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x13, 0xcd, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102]}, @cipso={0x86, 0x4e, 0x3, [{0x0, 0xb, "410431d84b0c1f01fd"}, {0x2, 0x2}, {0x5, 0x11, "1acbda1d2ab4367845c98867507003"}, {0x7, 0x8, "33e1c397082d"}, {0x5, 0xc, "53ee2c27702a95011901"}, {0x6, 0x4, "6e06"}, {0x5, 0x12, "6f3ea791ac4f0e9461d8a1d1759bca8d"}]}]}}}}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x38, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x38}}, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r13, 0x89e4, &(0x7f0000000000)={0x0, "ed1cc35f9ad69b9d93f7c73d4936cab84dd3d023be259d67d3f548bac3bfd8d7eb8d6966f32bf5b5034fceddc8f8034f1eb41228a3d846953a612ab225dc50d8f681b94e55b200120f397fa9351e1cd9db31190364fc09f7afd3737abc8ee729cb44494acae615cad5a2038bb066f50c40fd55f580fd95bcb28462f3c949ba1c"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'ipvlan0\x00', {'bond0\x00'}, 0x1ff}) 6m57.473931313s ago: executing program 0 (id=1548): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) socket$inet(0x2, 0x0, 0x84) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r3, &(0x7f0000000380)={{0x3, @null}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x504, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x33, 0x80, [@dsss={0x3, 0x1, 0xc}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @mic={0x8c, 0x10, {0x342, "ef5935c96674", @short="5bc4038d6a590871"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @challenge={0x10, 0x1, 0xa2}]}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8d, 0x3, "ed475c97af27e954b3d36cd6ddc34ce08fe4c637f17650081129dae81b935253a8fc1d04a08c210e29b8947c512802b7c7ac7a311a32643afe896b6a8abe629a4dd45781df82b2ab79e73c6837b2f2dc65b7b4d17efb4caa385dee81b1dc5d65a0f4119ae1206fa83f7661b2c141afcc5daa18c759c81164a21b7317c84f18e116915631dc9b72d82d"}]}, @NL80211_ATTR_BEACON_HEAD={0x1bd, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @from_mac, {0x4, 0xef}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x6, @default, 0x10, @val={0x0, 0x7, @random="67bac8817cb318"}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x99, 0xa}}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x1, 0x0, {0x6, 0x6, 0x0, 0xb2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x200, 0x71}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x40}}, @val={0x76, 0x6, {0xbf, 0xcb, 0x24}}, [{0xdd, 0xc8, "80566d677e4a36228ff6896ab222d3266bbeb71eb64366ff0876c48344a298c307cedd443003f00941307fed42a9a7929b10d9c8a76aa224d8d3896871e425f73cd582fd5fdbbff39d56365428299012646dba44a6d8b76b67159a73be954126bb4ed15d8a8a07106b19af39ff9caaa784a16a50d8eb9d96b1273b1d4c67a078feb5f960db858bf15a66b9c2662b10a8166ea8b748e52f8aa63fa5bc287d21ee78274674c28037f1e34bda0856763409a528b615115015534105552ad1d672501f80ffaace711fd3"}, {0xdd, 0x7, "7e4d7d92ce06d2"}, {0xdd, 0x79, "e86189824a4c959333c46433e76766fa62c7c4880add7fcea98c19b39c1fe878e58df7a86d0ae7f055ebfb3df77ed8719f59cde38ea7fb723f96ae3e51d468b32982931110a765c818c3c837059fd78d5e82dd60bb37063210ff43dcce27a55694a60b7d58f8ce0523c038e9cded753b80971626a531311ee9"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x13, 0x7f, [@ibss={0x6, 0x2, 0x4}, @mesh_chsw={0x76, 0x6, {0x10, 0x9, 0x1a, 0x9}}, @challenge={0x10, 0x1, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x245, 0xf, [@perr={0x84, 0xc8, {0x2, 0xc, [{{}, @broadcast, 0x9, @void, 0x3e}, {{}, @broadcast, 0x7, @void, 0x12}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0x23}, {{}, @device_b, 0x8, @void, 0x3e}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0xf}, {{}, @device_a, 0x5, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value, 0x3c}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x28}, {{0x0, 0x1}, @device_b, 0x99c, @value=@broadcast, 0x35}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x40}, {{}, @device_a, 0x2, @void, 0x3b}]}}, @perr={0x84, 0xfc, {0xf2, 0x10, [{{}, @device_b, 0xb, @void, 0x2}, {{}, @device_b, 0x5, @void, 0x2e}, {{}, @device_a, 0xf4, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0xffffffff, @value=@broadcast, 0x3f}, {{}, @device_b, 0x6, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x28}, {{}, @broadcast, 0x7, @void, 0x7}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x9}, {{}, @device_a, 0x8, @void, 0x10}, {{}, @device_a, 0x2, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0xf}, {{}, @device_a, 0x4, @void, 0x18}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x15}, {{0x0, 0x1}, @broadcast, 0xd, @value, 0x37}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@device_b, 0x2b}, {{}, @broadcast, 0x0, @void, 0x1e}]}}, @measure_req={0x26, 0x4, {0x6, 0xab, 0x7, "1d"}}, @challenge={0x10, 0x1, 0x83}, @supported_rates={0x1, 0x3, [{0x18}, {0x3e}, {0xb, 0x1}]}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x5d, {0x1c, 0x1, "f23efc5a0b2393362a16fd713decb264", "7355f1715f6702db8f3ee4f7e06bfcf345db2e52546a01ff17e2e05344c4d206", "3466595279d28ecca29c353e74e1a31f9b525ca0e3e2a2f6b3580e0735a39134", [{0x2, 0x9, "ef83cf203c098ec4f4"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}]}, 0x504}, 0x1, 0x0, 0x0, 0x801}, 0x800) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_macvtap\x00', {}, 0x8000}) 6m56.936259739s ago: executing program 0 (id=1551): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x388, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r6 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000200)={0x40, 0x4, "f6bdc12abad991705f3e04209420ec1a152c5c5e74ed6f76451c9930b12c11fd", 0x4, 0x8, 0x1, 0x3, 0x82}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) 6m56.582419691s ago: executing program 33 (id=1551): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x388, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r6 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000200)={0x40, 0x4, "f6bdc12abad991705f3e04209420ec1a152c5c5e74ed6f76451c9930b12c11fd", 0x4, 0x8, 0x1, 0x3, 0x82}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) 5m36.543575196s ago: executing program 2 (id=1678): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085000000e8020000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000400)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x56, '\x00', r7, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 5m35.423005576s ago: executing program 2 (id=1682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001000000002000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000e26d492f001000000000f8ffffffb7008500000071000000ae000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1040, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc2}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0xa8, 0x0, 0xfbffffff, 0x0, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x3, @empty, @local, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x7, 0x21ee, 0x9, 0x280, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000090400000000000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000980)='br_fdb_add\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') preadv2(r12, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r13}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) gettid() 5m34.175499255s ago: executing program 2 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) mkdir(0x0, 0x3b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x200000000000}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000300)=""/79, 0x4f}], 0x6, &(0x7f0000000dc0)=""/195, 0xc3}, 0x200}, {{&(0x7f0000000a00)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000a80)=""/94, 0x5e}], 0x2, &(0x7f0000000b00)=""/238, 0xee}, 0xe}, {{&(0x7f0000000c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/144, 0x90}, 0x5}], 0x3, 0x10042, &(0x7f0000001100)={0x0, 0x3938700}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fremovexattr(r7, &(0x7f0000001140)=@known='trusted.overlay.redirect\x00') r8 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000480)='context\xc0\x01\xca\x9f\x98\x887\xa6tqB\xab`\x81\x85i\x16c)\xa5\x00\x00\x00\x00\xb9\xe7\x9fq\xf6\xc3\x92(\xac\x0e\x9c\x16*\xf9*H\xcb\x06\x0e\xa9 \x18y\x1692\xca\x82\xb1\xa0I\xce\xf5\xb3a:&\x0fm\xd2\x17\xd1\xb7b\xf8R\xc04\xe8', &(0x7f00000003c0)='ramfs\x18%\\b\x00\xf5c\xf8\xd2\xf2\xe4,\fq\xda\x92 \xe3X\xd8pdR\xb5\x18:\xb5\xbb\xce>H\xafVH4\xefei\x92T\x17\xeb\xea\xc7\xa7\x16\xd6\xaf\xb3h\x03\x99\x8e+\x97U\xff\xed\"\xf3\xe3\xc6zS\x19\x8e\x86\xb1&Q5\xe1z(iU\a\"\xed\xc1\xf7\xa0\xeb\xd5\xf5\xf2', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) socket$inet6(0xa, 0x3, 0x5) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_SG_TABLESIZE(r9, 0x227f, &(0x7f0000000340)) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) 5m29.981875088s ago: executing program 2 (id=1686): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000002f000400d40a000020000000950000fcab7ce85a3f04000008"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x3, @vbi}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0xc) r5 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f0000000080)=0xfffffffc, 0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRES32=r6], 0x80}}, 0x0) r8 = creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0xa0ed5e, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRESOCT=r8, @ANYRES8], 0x1, 0x120f, &(0x7f0000002a80)="$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") 5m28.241302178s ago: executing program 2 (id=1690): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) setpgid(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000004c0)=ANY=[@ANYBLOB='utf8,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=maccroatian,namecase=1,allow_utime=00000000000000000000007,umask=00000226,\x00'/106], 0x1, 0x14f7, &(0x7f0000001580)="$eJzs3HuYjlXbMPB1rrUuxjTpbpLNsM51XtxpsEySZJOQTZIkSZJdQtIkSUJiyC5pSEK2k2QzhGQzjUljv99knzR5pEmSkOzC+g49z/d6nrfnffve7+n7HO875+841nGvc677PO+15pxjrs0f9w89R9VrUb92MyIS/xL460uKECJGCDFMCHGDECIQQlSKrxR/5XgBBSn/2oewP9ej6dd6Bexa4v7nbdz/vI37n7dx//M27n/exv3P27j/eRv3n7G8bPucYjfyyLuDn//nZXz+/x8kt/zkbzaWv7nXfyGF+5+3cf/zNu5/3sb9z9u4/3kb9/9/vlr/yTHuf97G/WcsL7vWz595XNtxrf/+GGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlDef8VVoIceU1uNaLYowxxhhjjDHG2J/K57/WK2CMMcYYY4wxxtj/eyCkUEKLQOQT+UWMKCBixXUiTlwvCoobRETcKOLFTaKQuFkUFkVEUVFMJIjiooQwAoUVJEJRUpQSUXGLKC1uFYmijCgrygknyoskcZuoIG4XFcUdopK4U1QWd4kqoqqoJqqLu0UNcY+oKWqJ2uJeUUfUFfVEfXGfaCDuFw3FA6KReFA0Fg+JJuJh0VQ8IpqJR0Vz8ZhoIR4XLcUTopVoLdqItqLd/1X+K6KveFX0E/1FihggBorXxCAxWAwRQ8Uw8boYLt4QI8SbIlWMFKPEW2K0eFuMEe+IsWKcGC/eFRPERDFJTBZTxFSRJt4T08T7Yrr4QMwQM8UsMVukizlirvhQzBPzxQLxkVgoPhaLxGKxRCwVGeITkSmWiSzxqVguPhPZYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7eJzsUPsFLvEbrFH7BX7xBdiv/hSHBBfiRzx9X8x/+y/y+8FAgRIkKBBQz7IBzEQA7EQC3EQBwWhIEQgAvEQD4WgEBSGwlAUikICJEAJKAEICAQEJaEkRCEKpaE0JEIilIWy4MBBEiRBBbgdKkJFqASVoDJUhipQFapCdagONaAG1ISaUBtqQx2oA/WgHtwH98H90BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCK2gFbaANtIN20B7aQwfoAJ2gE3SGztAFukAyJENX6ArdoBt0h+7QA3pAT+gJvaA39IZX4BV4FV6F/lBHDoCBMBAGwSAYAkNhKLwOw+ENeAPehFQYCaPgLXgL3oYxcAbGwjgYD+OhhpwIk2AykJwKaZAG02AaTIfpMANmwkyYDekwB+bCXJgH82E+fAQL4WP4GBbDYlgKGZABmbAMsiALlsNZyIYVsBJWwWpYA6thHayHdbARNsFG2AJbYBtsg8/hc9gJO2E37Ia9sBe+gC/gS/gSUiEHcuAgHIRDcAgOw2HIhVw4AkfgKByFY3AMjsNxOAEn4RSchNNwGs7AWTgH5+ACXICL8FLCd833ltmQKuQVWmqZT+aTMTJGxspYGSfjZEFZUEZkRMbLeFlIFpKFZWFZVBaVCTJBlpAlJEqUJENZUpaUURmVpWVpmSgTZVlZVjrpZJJMkhVkBVlRVpSV5J2ysrxLVpFVZUdXXVaXNWQnV1PWkrVlbVlH1pX1ZH1ZXzaQDWRD2VA2ko1kY9lYNpEPy6ZyAAyBR+WVzrSQI6GlHAWtZGvZRraVb8OTsr0cAx1kR9lJPi3HwVjoItu7ZPmc7ConQTf5gpwML8oecir0lC/LXrK37CNfkX1lB9dP9pczYIAcKGfDIDlYDpFD5TyoK690rJ58U6bKkXKUfEsuhbflGPmOHCvHyfHyXTlBTpST5GQ5RU6VafI9OU2+L6fLD+QMOVPOkrNlupwj58oP5Tw5Xy6QH8mF8mO5SC6WS+RSmSE/kZlymcySn8rl8jOZLVfIlXKVXC3XyLVynVwvN8iNcpPcLLfIrXKb3C4/lzvkTrlL7pZ75F65T34h98sv5QH5lcyRX8uD8i/ykPxGHpbfylz5nTwiv5dH5Q/ymPxRHpc/yRPypDwlf5an5S/yjDwrz8nz8oL8VV6Ul+Rl6aVQoKRSSqtA5VP5VYwqoGLVdSpOXa8KqhtURN2o4tVNqpC6WRVWRVRRVUwlqOKqhDIKlVWkQlVSlVJRdYsqrW5ViaqMKqvKKafKqyR1m6qgblcV1R2qkrpTVVZ3qSqqqqqmqqu7VQ11j6qpaqna6l5VR9VV9VR9dZ9qoO5XDdUDqpF6UDVWD6km6mHVVD2imqlHVXP1mGqhHlct1ROqlWqt2qi2qp16UrVXT6kOqqPqpJ5WndUzqot6ViWr51RX9bzqpl5Q3dWLqod6SfVUL6teqrfqoy6py8qrfqq/SlED1ED1mhqkBqshaqgapl5Xw9UbaoR6U6WqkWqUekuNVm+rMeodNVaNU+PVu2qCmqgmqclqipqq0tR7app6X01XH6gZaqaapWardDVHDflbpQX/B/nv/5P8Eb99+ja1XX2udqidapfarfaovWqf2qf2q/3qgDqgclSOOqgOqkPqkDqsDqtclauOqCPqqDqqjqlj6rg6rk6ok+q8+lmdVr+oM+qsOqvOqwvqgrr4t9+B0KClVlrrQOfT+XWMLqBj9XU6Tl+vC+obdETfqOP1TbqQvlkX1kV0UV1MJ+jiuoQ2GrXVpENdUpfSUX2LLq1v1Ym6jC6ry2mny+skfdu/nP9H62un2+n2ur3uoDvoTrqT7qw76y66i07Wybqr7qq76W66u+6ue+geuqfuqXvpXrqP7qP76r66n+6nU3SKHqhf04P0YD1ED9XD9Ot6uB6uR+gROlWn6lF6lB6tR+sxeoweq8fq8Xq8nqAn6El6kp6ip+g0naan6Wl6up6uZ+gZepaepdN1up6r5+p5ep5eoBfohXqhXqQX6SV6ic7QGTpTZ+osnaWX6+U6W6/QK/QqvUqv0Wv0Or1Ob9Ab9Ca9SW/RW3S23q636x16h96ld+k9eo/ep/fp/Xq/PqAP6Bydow/qg/qQPqQP68M6V+fqI/qIPqqP6mP6mD6uj+sT+oQ+pU/p0/q0PqPP6HP6nL6gL+iL+qK+rC9fuewLZCADHeggX5AviAligtggNogL4oKCQcEgEkSC+CA+KBTcHBQOigRFg2JBQlA8KBGYAAMbUBAGJYNSQTS4JSgd3BokBmWCskG5wAXlg6TgtqBCcHtQMbgjqBTcGVQO7gqqBFWDakH14O6gRnBPUDOoFdQO7g3qBHWDekH94L6gQXB/0DB4IGgUPBg0Dh4KmgQPB02DR4JmwaNB8+CxoEXweNAyeCJoFbQO2gRtg3Z/an3vzxR5yvUz/U2KGWAGmtfMIDPYDDFDzTDzuhlu3jAjzJsm1Yw0o8xbZrR524wx75ixZpwZb941E8xEM8lMNlPMVJNm3jPTzPtmuvnAzDAzzSwz26SbOWau+dDMM/PNAvORWWg+NovMYrPELDUZ5hOTaZaZLPOpWW4+M9lmhVlpVpnVZo1Za9aZ9WaD2Wg2mc1mi9lqtpnt5nOzw+w0u8xus8fsNfvMF2a/+dIcMF+ZHPO1OWj+Yg6Zb8xh863JNd+ZI+Z7c9T8YI6ZH81x85M5YU6aU+Znc9r8Ys6Ys+acOW8umF/NRXPJXDb+ysX9ldM7atSYD/NhDMZgLMZiHMZhQSyIEYxgPMZjISyEhbEwFsWimIAJWAJL4BWEhCWxJEYxiqWxNCZiIpbFsujQYRImYQWsgBWxIlbCSlgZK2MVrILVsBrejXfjPXgP1sJaeC/ei3WxLtbH+tgAG2BDbIiNsBE2xsbYBJtgU2yKzbAZNsfm2AJbYEtsia2wFbbBNtgO22F7bI8dsAN2wk7YGTtjF+yCyZiMXbErdsNu2B27Yw/sgT2xJ/bCXtgH+2Bf7Iv9sB+mYAoOxIE4CAfhEByCw3AYDsfhOAJHYCqm4igchaNxNI7BMTgWx+F4fBcn4ESchJNxCk7FNEzDaTgNp+N0nIEzcBbOwnRMx7k4F+fhPFyAC3AhLsRFuAiX4BLMwAzMxEzMwixcjssxG7NxJa7E1bga1+JaXI/rcSNuxM24GbfiVtyO23EH7sBduAv34B7ch/twP+7HA3gAczAHD+JBPISH8DAexlzMxSN4BI/iUTyGx/A4HscTeAJP4Sk8jafxDJ7Bc3gOL+CveBEv4WX0GGOliLXX2Th7vS1ob7AxtoD9+7ioLWYTbHFbwhpb2Bb5hxittYm2jC1ry1lny9ske9vv4iq2qq1mq9u7bQ17j635u7iBvd82tA/YRvZBW9/e9w9xY/uQbWIft03tE7aZbW2b27a2hX3ctrRP2Fa2tW1j29rO9hnbxT5rk+1ztqt9/ndxpl1m19sNdqPdZPfbL+05e94etT/YC/ZX28/2t8Ps63a4fcOOsG/aVDvyd/F4+66dYCfaSXaynWKn/i6eZWfbdDvHzrUf2nl2/u/iDPuJXWiz7CK72C6xS3+Lr6wpy35ql9vPbLZdYVfaVXa1XWPX2nX/ttZVdovdarfZffYLu8PutLvsbrvH7v0tvrKPA/Yrm2O/tkfs9/aQ/cYetsdsrv3ut/jK/o7ZH+1x+5M9YU/aU/Zne9r+Ys/Ys7/t/8ref7aX7GXrrSAgSYo0BZSP8lMMFaBYuo7i6HoqSDdQhG6keLqJCtHNVJiKUFEqRglUnEqQISRLRCGVpFIUpVuoNN1KiVSGylI5clSekug2qkC3U0W6gyrRnVSZ7qIqVJWqUXW6m2rQPVSTalFtupfqUF2qR/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk9Ss3pMWpBj1NLeoJaUWtqQ22pHT1J7ekp6kAdqRM9TZ3pGepCz1IyPUdd6XnqRi9Qd3qRetBL1JNepl7Um/rQK9SXXqV+1J9SaAANpNdoEA2mITSUhtHrNJzeoBH0JqXSSBpFb9FoepvG0Ds0lsbReHqXJtBEmkSTaQpNpTR6j6bR+zSdPqAZNJNm0WxKpzk0lz6keTSfFtBHtJA+pkW0mJbQUsqgTyiTllEWfUrL6TPKphW0klbRalpDa2kdracNtJE20WbaQltpG22nz2kH7aRdtJv20F7aR1/QfvqSDtBXlENf00H6Cx2ib+gwfUu59B0doe/pKP1Ax+hHOk4/0Qk6SafoZzpNv9AZOkvn6DxdoF/pIl2iy+RJhBDKUIU6DMJ8Yf4wJiwQxobXhXHh9WHB8IYwEt4Yxoc3hYXCm8PCYZGwaFgsTAiLhyVCE2JoQwrDsGRYKoyGt4Slw1vDxLBMWDYsF7qwfJgU3hZWCG8PK4Z3hJXCO8PK4V1hlbBq+PiD1cO7wxrhPWHNsFZYO7w3rBPWDeuF9cP7wgbh/WHD8IGwUfhgWDF8KGwSPhw2DR8Jm4WPhs3Dx8IW4eNhy/CJsFXYOmwTtg3bhU+G7cOnwg5hx7BT+HTYOXwm7BI+GyaHz4Vdw+f/8HhKOCAcGL4WvhZ6/4BaEl0azYh+Es2MLotmRT+NLo9+Fs2OroiujK6Kro6uia6Nrouuj26Iboxuim6ObolujW6Lel8/v3DgpFNOu8Dlc/ldjCvgYt11Ls5d7wq6G1zE3eji3U2ukLvZFXZFXFFXzCW44q6EMw6ddeRCV9KVclF3iyvtbnWJrowr68o558q7JNfWtXPtXHv3lOvgOrpO7mn3tHvGPeOedc+651xX97zr5l5w3d2Lrod7yb3kXna9XG/Xx73i+rpXXT/X36W4FDfQDXSD3CA3xA1xw9wwN9wNdyPcCJfqUt0oN8qNdqPdGDfGjXVj3Xg33k1wE9wkN8lNcVNcmktz09w0N91NdzPcDDfLzXLpLt3NdXPdPDfPLXAL3MLEhW6RW+SWuCUuw2W4TJfpslyWW+6Wu2yX7Va6lW61W+3WurVuvVvvNrqNbrPb7La6rW672+52uB1ul9vl9rg9bp/b5/a7/e6AO+ByXI476A66Q+6QO+y+dbnuO3fEfe+Ouh/cMfejO+5+cifcSXfK/exOu1/cGXfWnXPn3QX3q7voLrnLzru0yHuRaZH3I9MjH0RmRGZGZkVmR9IjcyJzIx9G5kXmRxZEPoosjHwcWRRZHFkSWRrJiHwSyYwsi2RFPo0sj3wWyY6siKyMrIqsjqyJeF98R+hL+lI+6m/xpf2tPtGX8WV9Oe98eZ/kb/MV/O2+or/DV/J3+sr+Ll/FV/XV/BO+lW/t2/i2vp1/0rf3T/kOvqPv5J/2nf0zvot/1if753xX/7zv5l/w3f2Lvod/yff0L/tevrfv41/xff2rvp/v71P8AD/Qv+YH+cF+iB/qh/nX/XD/hh/h3/SpfqQf5d/yo/3bfox/x4/14/x4/66f4Cf6SX6yn+Kn+jT/np/m3/fT/Qd+hp/pZ/nZPt3P8XP9h36en+8X+I/8Qv+xX+QX+yV+qc/wn/hMv8xn+U/9cv+Zz/Yr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/sdfqff5Xf7PX6v3+e/8Pv9l/6A/8rn+K/9Qf8Xf8h/4w/7b32u/84f8d/7o/4Hf8z/6I/7n/wJf9Kf8j/70/4Xf8af9ef8eX/B/+ov+kv+svf+Wj9JZ4wxxhj770D9wfEB/+Rn8m/jioFCiOt3Fsv99zU3F/7rfLBM6BwRQjzXv+ej/3vUqZOSkvK392YrEZRaLISIXM3PJ67GK0Qn8YxIFh1FhX+6vsGy9wX6g/rRO4WI/bucGHE1vlr/9v+g/pNPj8+sHJ6L/0/qLxYisdTVnALiany1fsX/oH6R9n+w/gLfpAnR4e9y4sTV+Gr9JPGUeF4k/8M7GWOMMcYYY4yxvxosq3X/o/vnK/fnCfpqTn5xNf6j+3PGGGOMMcYYY4xdey/27vPsk8nJHbvzhCc84cm/Ta71fybGGGOMMcbYn+3qRf+1XgljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZZ3/f/4OrFrvUfGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsWvtfAQAA//9itDg8") ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f000014f000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xfffffffffffffffc, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 5m26.979254916s ago: executing program 2 (id=1692): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085000000e8020000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000400)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x56, '\x00', r8, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0x5452, &(0x7f0000000280)) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 5m12.118208419s ago: executing program 34 (id=1692): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085000000e8020000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000400)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x56, '\x00', r8, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0x5452, &(0x7f0000000280)) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 4m57.061678649s ago: executing program 6 (id=1738): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000000000007110350000000000a5000000000000019500000000000000", @ANYRES64=r5, @ANYRESDEC=r4, @ANYRES32=r3, @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x33c}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x24}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r5, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x400c006, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4m55.440812101s ago: executing program 6 (id=1740): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r5 = socket(0x10, 0x400000000080803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000006c0)={0x2, @pix={0x7, 0x6, 0x30324c4a, 0x1, 0x0, 0x4, 0x4, 0xffffffff, 0x1, 0x6, 0x2, 0x3}}) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0), 0x10) 4m53.994730954s ago: executing program 6 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0x208000) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$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") open(0x0, 0x0, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000050, &(0x7f0000000180)=ANY=[], 0x82, 0x1512, &(0x7f0000001cc0)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x6, 0x11, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x7, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) iopl(0x3) syslog(0x4, &(0x7f0000000bc0), 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="9295a625d274d892c7196c85a7ee02a626c1404119ba315f9d81c101451a02fd979edbe9e4fe96c5ec0c45717aad787640520701ed6a6c21a13bf760b55280c33016b6e083de9ad6caa67fdddfed93fc8e407bacda7f363d3fe18ece35f10ff70f0321eb4f18861f03bf03eca6a3045c096b44bdb89a96ad7807cb4e25"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x9, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) 4m53.058612731s ago: executing program 6 (id=1745): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000680)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x10000a006) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "31eacb679f3f4fd24dab671ab3445ed5"}) 4m49.644450362s ago: executing program 6 (id=1751): r0 = socket(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qgroup_meta_convert\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) add_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="e722751b6f9b1ab48c6bed665e326446148ed6158029d016ed30dc55600da9ee6347", 0x22, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c", 0xb4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r8, r9}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sm3\x00'}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) listen(r0, 0x0) listen(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) socket$inet_mptcp(0x2, 0x1, 0x106) 4m43.431838125s ago: executing program 6 (id=1761): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) socket$inet(0x2, 0x0, 0x84) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r3, &(0x7f0000000380)={{0x3, @null}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x4fc, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x33, 0x80, [@dsss={0x3, 0x1, 0xc}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @mic={0x8c, 0x10, {0x342, "ef5935c96674", @short="5bc4038d6a590871"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @challenge={0x10, 0x1, 0xa2}]}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8d, 0x3, "ed475c97af27e954b3d36cd6ddc34ce08fe4c637f17650081129dae81b935253a8fc1d04a08c210e29b8947c512802b7c7ac7a311a32643afe896b6a8abe629a4dd45781df82b2ab79e73c6837b2f2dc65b7b4d17efb4caa385dee81b1dc5d65a0f4119ae1206fa83f7661b2c141afcc5daa18c759c81164a21b7317c84f18e116915631dc9b72d82d"}]}, @NL80211_ATTR_BEACON_HEAD={0x1bd, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @from_mac, {0x4, 0xef}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x6, @default, 0x10, @val={0x0, 0x7, @random="67bac8817cb318"}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x99, 0xa}}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x1, 0x0, {0x6, 0x6, 0x0, 0xb2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x200, 0x71}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x40}}, @val={0x76, 0x6, {0xbf, 0xcb, 0x24}}, [{0xdd, 0xc8, "80566d677e4a36228ff6896ab222d3266bbeb71eb64366ff0876c48344a298c307cedd443003f00941307fed42a9a7929b10d9c8a76aa224d8d3896871e425f73cd582fd5fdbbff39d56365428299012646dba44a6d8b76b67159a73be954126bb4ed15d8a8a07106b19af39ff9caaa784a16a50d8eb9d96b1273b1d4c67a078feb5f960db858bf15a66b9c2662b10a8166ea8b748e52f8aa63fa5bc287d21ee78274674c28037f1e34bda0856763409a528b615115015534105552ad1d672501f80ffaace711fd3"}, {0xdd, 0x7, "7e4d7d92ce06d2"}, {0xdd, 0x79, "e86189824a4c959333c46433e76766fa62c7c4880add7fcea98c19b39c1fe878e58df7a86d0ae7f055ebfb3df77ed8719f59cde38ea7fb723f96ae3e51d468b32982931110a765c818c3c837059fd78d5e82dd60bb37063210ff43dcce27a55694a60b7d58f8ce0523c038e9cded753b80971626a531311ee9"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x13, 0x7f, [@ibss={0x6, 0x2, 0x4}, @mesh_chsw={0x76, 0x6, {0x10, 0x9, 0x1a, 0x9}}, @challenge={0x10, 0x1, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x23a, 0xf, [@perr={0x84, 0xc8, {0x2, 0xc, [{{}, @broadcast, 0x9, @void, 0x3e}, {{}, @broadcast, 0x7, @void, 0x12}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0x23}, {{}, @device_b, 0x8, @void, 0x3e}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0xf}, {{}, @device_a, 0x5, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value, 0x3c}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x28}, {{0x0, 0x1}, @device_b, 0x99c, @value=@broadcast, 0x35}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x40}, {{}, @device_a, 0x2, @void, 0x3b}]}}, @perr={0x84, 0xfc, {0xf2, 0x10, [{{}, @device_b, 0xb, @void, 0x2}, {{}, @device_b, 0x5, @void, 0x2e}, {{}, @device_a, 0xf4, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0xffffffff, @value=@broadcast, 0x3f}, {{}, @device_b, 0x6, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x28}, {{}, @broadcast, 0x7, @void, 0x7}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x9}, {{}, @device_a, 0x8, @void, 0x10}, {{}, @device_a, 0x2, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0xf}, {{}, @device_a, 0x4, @void, 0x18}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x15}, {{0x0, 0x1}, @broadcast, 0xd, @value, 0x37}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@device_b, 0x2b}, {{}, @broadcast, 0x0, @void, 0x1e}]}}, @measure_req={0x26, 0x4, {0x6, 0xab, 0x7, "1d"}}, @challenge={0x10, 0x1, 0x83}, @supported_rates={0x1, 0x3, [{0x18}, {0x3e}, {0xb, 0x1}]}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x52, {0x1c, 0x0, "f23efc5a0b2393362a16fd713decb264", "7355f1715f6702db8f3ee4f7e06bfcf345db2e52546a01ff17e2e05344c4d206", "3466595279d28ecca29c353e74e1a31f9b525ca0e3e2a2f6b3580e0735a39134"}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x801}, 0x800) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_macvtap\x00', {}, 0x8000}) 4m41.995924787s ago: executing program 35 (id=1761): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) socket$inet(0x2, 0x0, 0x84) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r3, &(0x7f0000000380)={{0x3, @null}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x4fc, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x33, 0x80, [@dsss={0x3, 0x1, 0xc}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @mic={0x8c, 0x10, {0x342, "ef5935c96674", @short="5bc4038d6a590871"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @challenge={0x10, 0x1, 0xa2}]}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8d, 0x3, "ed475c97af27e954b3d36cd6ddc34ce08fe4c637f17650081129dae81b935253a8fc1d04a08c210e29b8947c512802b7c7ac7a311a32643afe896b6a8abe629a4dd45781df82b2ab79e73c6837b2f2dc65b7b4d17efb4caa385dee81b1dc5d65a0f4119ae1206fa83f7661b2c141afcc5daa18c759c81164a21b7317c84f18e116915631dc9b72d82d"}]}, @NL80211_ATTR_BEACON_HEAD={0x1bd, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @from_mac, {0x4, 0xef}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x6, @default, 0x10, @val={0x0, 0x7, @random="67bac8817cb318"}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x99, 0xa}}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x1, 0x0, {0x6, 0x6, 0x0, 0xb2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x200, 0x71}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x40}}, @val={0x76, 0x6, {0xbf, 0xcb, 0x24}}, [{0xdd, 0xc8, "80566d677e4a36228ff6896ab222d3266bbeb71eb64366ff0876c48344a298c307cedd443003f00941307fed42a9a7929b10d9c8a76aa224d8d3896871e425f73cd582fd5fdbbff39d56365428299012646dba44a6d8b76b67159a73be954126bb4ed15d8a8a07106b19af39ff9caaa784a16a50d8eb9d96b1273b1d4c67a078feb5f960db858bf15a66b9c2662b10a8166ea8b748e52f8aa63fa5bc287d21ee78274674c28037f1e34bda0856763409a528b615115015534105552ad1d672501f80ffaace711fd3"}, {0xdd, 0x7, "7e4d7d92ce06d2"}, {0xdd, 0x79, "e86189824a4c959333c46433e76766fa62c7c4880add7fcea98c19b39c1fe878e58df7a86d0ae7f055ebfb3df77ed8719f59cde38ea7fb723f96ae3e51d468b32982931110a765c818c3c837059fd78d5e82dd60bb37063210ff43dcce27a55694a60b7d58f8ce0523c038e9cded753b80971626a531311ee9"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x13, 0x7f, [@ibss={0x6, 0x2, 0x4}, @mesh_chsw={0x76, 0x6, {0x10, 0x9, 0x1a, 0x9}}, @challenge={0x10, 0x1, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x23a, 0xf, [@perr={0x84, 0xc8, {0x2, 0xc, [{{}, @broadcast, 0x9, @void, 0x3e}, {{}, @broadcast, 0x7, @void, 0x12}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0x23}, {{}, @device_b, 0x8, @void, 0x3e}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0xf}, {{}, @device_a, 0x5, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value, 0x3c}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x28}, {{0x0, 0x1}, @device_b, 0x99c, @value=@broadcast, 0x35}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x40}, {{}, @device_a, 0x2, @void, 0x3b}]}}, @perr={0x84, 0xfc, {0xf2, 0x10, [{{}, @device_b, 0xb, @void, 0x2}, {{}, @device_b, 0x5, @void, 0x2e}, {{}, @device_a, 0xf4, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0xffffffff, @value=@broadcast, 0x3f}, {{}, @device_b, 0x6, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x28}, {{}, @broadcast, 0x7, @void, 0x7}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x9}, {{}, @device_a, 0x8, @void, 0x10}, {{}, @device_a, 0x2, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0xf}, {{}, @device_a, 0x4, @void, 0x18}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x15}, {{0x0, 0x1}, @broadcast, 0xd, @value, 0x37}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@device_b, 0x2b}, {{}, @broadcast, 0x0, @void, 0x1e}]}}, @measure_req={0x26, 0x4, {0x6, 0xab, 0x7, "1d"}}, @challenge={0x10, 0x1, 0x83}, @supported_rates={0x1, 0x3, [{0x18}, {0x3e}, {0xb, 0x1}]}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x52, {0x1c, 0x0, "f23efc5a0b2393362a16fd713decb264", "7355f1715f6702db8f3ee4f7e06bfcf345db2e52546a01ff17e2e05344c4d206", "3466595279d28ecca29c353e74e1a31f9b525ca0e3e2a2f6b3580e0735a39134"}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x801}, 0x800) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_macvtap\x00', {}, 0x8000}) 19.997783466s ago: executing program 8 (id=2760): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084) unshare(0x8000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) 19.328679397s ago: executing program 8 (id=2765): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0, 0x6c00}) 19.042454063s ago: executing program 8 (id=2768): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r5 = socket(0x10, 0x400000000080803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000006c0)={0x2, @pix={0x7, 0x6, 0x30324c4a, 0x1, 0x0, 0x4, 0x4, 0xffffffff, 0x1, 0x6, 0x2, 0x3}}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r8}, 0x10) 17.61878826s ago: executing program 8 (id=2772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 17.260321727s ago: executing program 8 (id=2776): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nobarrier}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0xffffffffffffffff, r0, 0xfffffffffffffffe, 0x80000000) 16.956226739s ago: executing program 8 (id=2778): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r4, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r4, 0x0, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r4) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 14.102657994s ago: executing program 5 (id=2783): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) keyctl$chown(0x16, r0, 0x0, 0x0) 13.676496107s ago: executing program 5 (id=2785): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="711f2abf2d0c383d5264df852dfc", 0xe}}, 0x20000000) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x40000000000019e, 0x142, 0x0) 13.08151931s ago: executing program 5 (id=2787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x94, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x5, 0x86, 0x68, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x23}}, {0x4e23, 0x4e24, 0x72, 0x0, @opaque="f4af30d8900ca44debfc1ed31c963d65172b210e6d44e95925ab28273086b004519b82d905dafe8926c33e977afab17c03610b74a230c6b268db05169ee1a4544b31213394d2a2ec0e34d26de25c0a1b2e92e86f666ab0e117e6fd443b3eaa5352743698052e63ca7325"}}}}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r2, 0x5452, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x5) getrusage(0x1, &(0x7f0000000540)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) accept4(r2, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='affs\x00', 0x1) syz_usb_connect$uac1(0x0, 0x8c, &(0x7f00000023c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x2, 0xb0, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x2, 0x40, 0x48, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0x2, 0x2, {0x7, 0x25, 0x1, 0x40, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0xfc}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x80, 0x0, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8000}}}}}}}]}}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x80200, 0x20, 0x11}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', r5) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x4d) 7.007723685s ago: executing program 5 (id=2812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f0b9dee8300ebffff1f"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003cc0)) 5.582628082s ago: executing program 5 (id=2815): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x80002, 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtaction={0x48, 0x13, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB="3790cb480f7133ca5691f0fee99fd406b24cb4d8a245e5031fd84cf30b46e81b78b87ed04cc0b734cefb2d9b930b1389812dcda3a8736ce17cf438cd2473ac482ba85472204aa253163a1f0612de74142a1c710ec7059922ce17e5278bb739efe24517f9c299256e6c29470fd69eaa2ffecd4709a8591b9a88d0b1c18e298aeff83da259a564052e7e9808507801364bc9c8b3cfde4c45d3b8950806f70bcc9c50c46c28ac7024a56f062a6d0c4b85bbb409e0573f816d1b7613650719d77c652d94eb704013192c7c244980dffc876e6ce2d9d33ebc575c618dd34cc0f380708f0e5a", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r1, @ANYRES64], 0x4c}}, 0x10) 5.459282848s ago: executing program 4 (id=2816): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x94, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x5, 0x86, 0x68, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x23}}, {0x4e23, 0x4e24, 0x72, 0x0, @opaque="f4af30d8900ca44debfc1ed31c963d65172b210e6d44e95925ab28273086b004519b82d905dafe8926c33e977afab17c03610b74a230c6b268db05169ee1a4544b31213394d2a2ec0e34d26de25c0a1b2e92e86f666ab0e117e6fd443b3eaa5352743698052e63ca7325"}}}}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r2, 0x5452, 0x0) listen(r2, 0x5) getrusage(0x1, &(0x7f0000000540)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) accept4(r2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='affs\x00', 0x1) syz_usb_connect$uac1(0x0, 0x8c, &(0x7f00000023c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x2, 0xb0, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x2, 0x40, 0x48, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0x2, 0x2, {0x7, 0x25, 0x1, 0x40, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0xfc}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x80, 0x0, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8000}}}}}}}]}}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x80200, 0x20, 0x11}, 0x18) 4.256746243s ago: executing program 7 (id=2819): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000480)}) 4.105465704s ago: executing program 7 (id=2820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 4.036211675s ago: executing program 7 (id=2821): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) 3.862812042s ago: executing program 7 (id=2822): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 3.657664059s ago: executing program 7 (id=2823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x7f, 0xffff}) 3.240247816s ago: executing program 4 (id=2824): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002bc0)=@delchain={0x188, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x20}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0xe4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x64, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xd, 0xc5, 0x1, {0x5, 0x2, 0x7fff, 0x98ca, 0x38e, 0x80000000}, {0x9, 0x2, 0x5, 0x3, 0x4, 0x8}, 0x6, 0x5, 0x8}}]}]}}]}, 0x188}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.223469857s ago: executing program 3 (id=2825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f0b9dee8300ebffff1f"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003cc0)) 3.212763592s ago: executing program 7 (id=2826): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x445d, &(0x7f0000004480)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.409559617s ago: executing program 36 (id=2778): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r4, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r4, 0x0, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r4) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 2.329739322s ago: executing program 5 (id=2828): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r5 = socket(0x10, 0x400000000080803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000006c0)={0x2, @pix={0x7, 0x6, 0x30324c4a, 0x1, 0x0, 0x4, 0x4, 0xffffffff, 0x1, 0x6, 0x2, 0x3}}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r8}, 0x10) 2.329335338s ago: executing program 4 (id=2829): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xffffffff, @mcast1, 0xfff}}, {{0xa, 0x3, 0x0, @empty, 0x4ef}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) 1.497127846s ago: executing program 3 (id=2830): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 1.454401387s ago: executing program 4 (id=2831): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r3 = socket(0x10, 0x400000000080803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) fcntl$dupfd(r3, 0x0, r3) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000006c0)={0x2, @pix={0x7, 0x6, 0x30324c4a, 0x1, 0x0, 0x4, 0x4, 0xffffffff, 0x1, 0x6, 0x2, 0x3}}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r6}, 0x10) 1.191163448s ago: executing program 3 (id=2832): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x1, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x29d}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x44}}, 0x0) 962.114204ms ago: executing program 4 (id=2833): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c}, 0x8) close(r0) 786.550374ms ago: executing program 3 (id=2834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xb8, 0x43, 0xa0, 0xb8, 0x98, 0x1b8, 0x178, 0x178, 0x1b8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xf35}}}, {{@ip={@multicast1, @multicast1, 0x0, 0x0, 'geneve1\x00', 'team_slave_1\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 785.969996ms ago: executing program 4 (id=2835): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x94, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x5, 0x86, 0x68, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x23}}, {0x4e23, 0x4e24, 0x72, 0x0, @opaque="f4af30d8900ca44debfc1ed31c963d65172b210e6d44e95925ab28273086b004519b82d905dafe8926c33e977afab17c03610b74a230c6b268db05169ee1a4544b31213394d2a2ec0e34d26de25c0a1b2e92e86f666ab0e117e6fd443b3eaa5352743698052e63ca7325"}}}}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r2, 0x5452, 0x0) listen(r2, 0x5) getrusage(0x1, &(0x7f0000000540)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) accept4(r2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='affs\x00', 0x1) syz_usb_connect$uac1(0x0, 0x8c, &(0x7f00000023c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x2, 0xb0, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x2, 0x40, 0x48, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0x2, 0x2, {0x7, 0x25, 0x1, 0x40, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0xfc}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x80, 0x0, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8000}}}}}}}]}}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x80200, 0x20, 0x11}, 0x18) 483.155777ms ago: executing program 3 (id=2836): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) connect$pppl2tp(r0, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x3}}, 0x2e) 0s ago: executing program 3 (id=2837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) kernel console output (not intermixed with test programs): 37410][T15424] loop7: detected capacity change from 0 to 512 [ 1305.937585][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.983780][T15424] EXT4-fs: Ignoring removed i_version option [ 1305.992886][T15424] EXT4-fs: Ignoring removed mblk_io_submit option [ 1306.005442][T15424] ext4: Unknown parameter 'seclabel' [ 1306.059729][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.082468][ T2148] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1306.091156][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.127811][T15424] loop7: detected capacity change from 0 to 256 [ 1306.136875][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.156716][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.169618][T15091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.228537][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.239425][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.250990][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.269300][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.282073][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.304698][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.330275][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.349805][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.438524][ T2148] usb 4-1: Using ep0 maxpacket: 8 [ 1306.446177][ T2148] usb 4-1: config index 0 descriptor too short (expected 113, got 80) [ 1306.454657][ T2148] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1306.462864][ T2148] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.476545][ T2148] usb 4-1: config 0 has no interface number 0 [ 1306.491022][T15091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.503472][ T2148] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1306.549672][T15091] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.558916][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.356845][ T2148] usb 4-1: Product: syz [ 1307.361449][T15091] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.380690][ T2148] usb 4-1: Manufacturer: syz [ 1307.385330][ T2148] usb 4-1: SerialNumber: syz [ 1307.428270][T15091] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.451133][ T2148] usb 4-1: config 0 descriptor?? [ 1307.469704][T15091] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.526092][T15432] loop4: detected capacity change from 0 to 1024 [ 1307.618309][T15432] hfsplus: failed to load attributes file [ 1307.811840][ T8396] usb 4-1: USB disconnect, device number 19 [ 1307.905071][T13753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.972668][T13753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.028664][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.040374][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.276658][T15454] loop4: detected capacity change from 0 to 256 [ 1308.323631][T15454] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 1308.421843][T15454] exFAT-fs (loop4): Filesystem has been set read-only [ 1308.659614][T15454] exFAT-fs (loop4): failed to load upcase table [ 1308.988114][ T8396] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1308.998391][T15454] exFAT-fs (loop4): failed to recognize exfat type [ 1309.195652][T15460] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1309.540802][ T8396] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1309.550380][ T8396] usb 6-1: not running at top speed; connect to a high speed hub [ 1309.635749][ T8396] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1309.668412][ T8396] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1309.692769][ T8396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.745882][ T8396] usb 6-1: Product: syz [ 1310.130203][T15472] mkiss: ax0: crc mode is auto. [ 1310.901928][ T8396] usb 6-1: Manufacturer: syz [ 1310.906785][ T8396] usb 6-1: SerialNumber: syz [ 1310.915940][T15449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1312.948167][T15474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1312.958078][T15474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1313.011955][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1900'. [ 1313.399237][ T8396] usb 6-1: bad CDC descriptors [ 1313.408179][ T8396] usb 6-1: USB disconnect, device number 5 [ 1313.432986][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1903'. [ 1313.497778][T15494] netlink: 'syz.4.1903': attribute type 4 has an invalid length. [ 1313.577926][T15493] loop3: detected capacity change from 0 to 4096 [ 1313.618439][T15496] loop8: detected capacity change from 0 to 512 [ 1313.680532][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 1313.696548][T15496] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1313.713046][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 1313.740348][T15496] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1313.754032][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 1313.780136][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 1313.791116][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 1313.799758][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 1313.807925][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 1313.823854][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 1314.059817][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 1314.096091][T15496] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 1314.146256][T15493] ntfs3(loop3): try to read out of volume at offset 0x3fffffe0c00 [ 1314.320324][T15496] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 1314.372109][T15496] System zones: 0-2, 18-18, 34-34 [ 1314.503520][T15496] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1904: bad orphan inode 15 [ 1314.589323][T15496] EXT4-fs (loop8): Remounting filesystem read-only [ 1314.595891][T15496] ext4_test_bit(bit=14, block=18) = 1 [ 1314.658319][T15496] is_bad_inode(inode)=0 [ 1314.663018][T15496] NEXT_ORPHAN(inode)=2264924160 [ 1314.668003][T15496] max_ino=32 [ 1314.671276][T15496] i_nlink=0 [ 1314.676293][T15496] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1314.761978][T15091] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.827078][ T2148] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1314.998399][ T2148] usb 5-1: Using ep0 maxpacket: 32 [ 1315.007493][ T2148] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 1315.026386][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.060735][ T2148] usb 5-1: Product: syz [ 1315.064961][ T2148] usb 5-1: Manufacturer: syz [ 1315.081678][ T2148] usb 5-1: SerialNumber: syz [ 1315.095925][ T2148] usb 5-1: config 0 descriptor?? [ 1315.103685][ T2148] usb 5-1: bad CDC descriptors [ 1315.238600][T15526] loop3: detected capacity change from 0 to 4096 [ 1315.267901][T15526] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1315.319142][T15526] ntfs3(loop3): It is recommened to use chkdsk. [ 1315.359855][ T9] usb 5-1: USB disconnect, device number 20 [ 1315.360548][ T2148] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1315.542299][ T2148] usb 6-1: Using ep0 maxpacket: 8 [ 1315.564021][ T2148] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1315.573410][T15521] loop8: detected capacity change from 0 to 32768 [ 1315.573685][ T2148] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 1315.601573][ T2148] usb 6-1: config 8 has no interface number 0 [ 1315.615649][ T2148] usb 6-1: config 8 interface 255 has no altsetting 0 [ 1315.644561][T15521] ERROR: (device loop8): dbAlloc: unable to allocate blocks [ 1315.644561][T15521] [ 1315.680478][T15521] ERROR: (device loop8): remounting filesystem as read-only [ 1315.702029][T15521] jfs_create: dtInsert returned -EIO [ 1315.711654][T15521] ERROR: (device loop8): jfs_create: [ 1315.711654][T15521] [ 1315.729490][ T2148] usb 6-1: string descriptor 0 read error: -22 [ 1315.736421][ T2148] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1315.746238][ T2148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.827929][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1315.996463][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1316.019551][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 1316.042443][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.054647][ T9] usb 4-1: config 0 descriptor?? [ 1316.073515][ T9] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 1316.131365][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1316.144012][ T9] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 1316.151100][ T9] usb 4-1: media controller created [ 1316.193922][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1316.320935][ T2148] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.5-1, 00:00:00:00:00:00. [ 1316.386364][ T8750] libceph: connect (1)[c::]:6789 error -101 [ 1316.393519][ T8750] libceph: mon0 (1)[c::]:6789 connect error [ 1316.418286][ T9] usb 4-1: selecting invalid altsetting 1 [ 1316.438865][ T9] set interface failed [ 1316.439608][ T9] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1316.474828][ T9] error writing reg: 0xff, val: 0x00 [ 1316.559532][ T2148] usb 6-1: USB disconnect, device number 6 [ 1316.619736][ T9] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1316.853393][T15547] ceph: No mds server is up or the cluster is laggy [ 1317.289988][T13653] libceph: connect (1)[c::]:6789 error -101 [ 1317.296713][T13653] libceph: mon0 (1)[c::]:6789 connect error [ 1317.318035][ T9] usb 4-1: USB disconnect, device number 20 [ 1317.361077][ T8750] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1317.530262][T15561] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1317.604959][ T8750] usb 5-1: config 1 has an invalid interface number: 142 but max is 0 [ 1317.613531][ T8750] usb 5-1: config 1 has no interface number 0 [ 1317.624506][ T8750] usb 5-1: config 1 interface 142 has no altsetting 0 [ 1317.645606][ T8750] usb 5-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c6.7f [ 1317.655414][ T8750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.678544][ T8750] usb 5-1: Product: syz [ 1317.704026][ T8750] usb 5-1: Manufacturer: syz [ 1317.718923][ T8750] usb 5-1: SerialNumber: syz [ 1318.665654][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1318.764660][ T8750] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 1318.805822][ T8750] usb 5-1: selecting invalid altsetting 0 [ 1318.855720][ T2342] pvrusb2: control-write URB failure, status=-71 [ 1318.870721][ T8750] usb 5-1: USB disconnect, device number 21 [ 1318.878087][ T2342] pvrusb2: Device being rendered inoperable [ 1318.896561][T15571] netlink: 'syz.7.1920': attribute type 10 has an invalid length. [ 1318.899542][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1318.965971][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1318.971038][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1920'. [ 1319.222220][T15587] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1922'. [ 1319.349975][T15589] loop8: detected capacity change from 0 to 512 [ 1319.367060][T15589] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 1320.117180][T15597] loop4: detected capacity change from 0 to 128 [ 1320.154632][T15597] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1320.200645][T15597] FAT-fs (loop4): FAT read failed (blocknr 234) [ 1320.214926][T15571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.222474][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.286231][T15571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.293457][T15571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.300873][T15571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.307991][T15571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.406908][T15600] loop4: detected capacity change from 0 to 256 [ 1320.415131][T15571] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1320.425871][T15577] bridge_slave_1: left allmulticast mode [ 1320.432026][T15577] bridge_slave_1: left promiscuous mode [ 1320.438121][T15577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.467896][T15577] bridge_slave_0: left allmulticast mode [ 1320.473710][T15577] bridge_slave_0: left promiscuous mode [ 1320.480074][T15577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.520386][T15600] FAT-fs (loop4): Directory bread(block 64) failed [ 1320.532543][T15600] FAT-fs (loop4): Directory bread(block 65) failed [ 1320.558823][T15600] FAT-fs (loop4): Directory bread(block 66) failed [ 1320.565597][T15600] FAT-fs (loop4): Directory bread(block 67) failed [ 1320.574054][T15577] bond0: (slave bridge0): Releasing backup interface [ 1320.580943][T15600] FAT-fs (loop4): Directory bread(block 68) failed [ 1320.699640][T15600] FAT-fs (loop4): Directory bread(block 69) failed [ 1320.724796][T15600] FAT-fs (loop4): Directory bread(block 70) failed [ 1320.763913][T15600] FAT-fs (loop4): Directory bread(block 71) failed [ 1320.771474][T15600] FAT-fs (loop4): Directory bread(block 72) failed [ 1320.778155][T15600] FAT-fs (loop4): Directory bread(block 73) failed [ 1320.953623][T15607] loop8: detected capacity change from 0 to 8 [ 1321.307428][T15615] tap0: tun_chr_ioctl cmd 1074025677 [ 1321.313722][T15615] tap0: linktype set to 778 [ 1322.750237][T15627] ceph: No mds server is up or the cluster is laggy [ 1323.308647][ T9957] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 1324.831389][T15652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.972035][T15659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1937'. [ 1325.117210][T15660] loop4: detected capacity change from 0 to 512 [ 1325.137510][T15660] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 1326.616055][T15674] loop4: detected capacity change from 0 to 256 [ 1326.631119][T15674] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1327.021182][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1944'. [ 1327.334200][ T8750] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1327.403255][T15654] loop8: detected capacity change from 0 to 32768 [ 1327.460281][T15654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1935 (15654) [ 1327.556420][T15654] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1327.591149][ T8750] usb 5-1: Using ep0 maxpacket: 8 [ 1327.649992][T15654] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1327.671980][T15654] BTRFS info (device loop8): using free-space-tree [ 1327.692568][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1327.693027][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1327.712266][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1327.722541][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1327.736394][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1327.749048][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1327.761273][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1327.788147][ T8750] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1327.813804][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1327.814090][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1327.839569][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1327.859910][ T8750] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1327.894306][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1327.894568][T15654] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1327.918676][ T8750] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1327.953336][T15654] BTRFS error (device loop8): open_ctree failed: -12 [ 1327.964263][ T8750] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1328.008931][T15707] loop5: detected capacity change from 0 to 512 [ 1328.009182][ T8750] usb 5-1: config 1 has no interface number 1 [ 1328.033696][ T8750] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1328.058150][ T8750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.066200][ T8750] usb 5-1: Product: syz [ 1328.077498][ T8750] usb 5-1: Manufacturer: syz [ 1328.082204][ T8750] usb 5-1: SerialNumber: syz [ 1328.376367][ T8750] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1328.386743][T15707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.394143][ T8750] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1328.480508][ T9957] libceph: connect (1)[c::]:6789 error -101 [ 1328.487484][ T9957] libceph: mon0 (1)[c::]:6789 connect error [ 1328.536801][ T8750] usb 5-1: USB disconnect, device number 22 [ 1328.595315][T15707] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.759883][ T9957] libceph: connect (1)[c::]:6789 error -101 [ 1328.766388][ T9957] libceph: mon0 (1)[c::]:6789 connect error [ 1328.958559][T15716] ceph: No mds server is up or the cluster is laggy [ 1329.629670][ T9957] libceph: connect (1)[c::]:6789 error -101 [ 1329.635892][ T9957] libceph: mon0 (1)[c::]:6789 connect error [ 1329.694355][T15738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1329.761073][T15739] netlink: 'syz.3.1950': attribute type 39 has an invalid length. [ 1329.835681][T10111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.170995][T15744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1330.458842][T15758] binder: Bad value for 'stats' [ 1330.578784][T15766] loop5: detected capacity change from 0 to 64 [ 1330.705090][T15768] netlink: 'syz.4.1959': attribute type 11 has an invalid length. [ 1331.186232][T15775] loop4: detected capacity change from 0 to 512 [ 1331.193363][T15775] EXT4-fs: Ignoring removed mblk_io_submit option [ 1331.227103][T15775] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1331.311476][T15775] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1331.320502][T15775] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1331.400623][T15775] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1962: Invalid block bitmap block 0 in block_group 0 [ 1331.420973][T15766] syz.5.1952: attempt to access beyond end of device [ 1331.420973][T15766] loop5: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 1331.424374][T15775] EXT4-fs (loop4): Remounting filesystem read-only [ 1331.443487][T15775] __quota_error: 18 callbacks suppressed [ 1331.443504][T15775] Quota error (device loop4): write_blk: dquota write failed [ 1331.457218][T15775] Quota error (device loop4): write_blk: dquota write failed [ 1331.464816][T15775] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1331.487310][T15775] EXT4-fs (loop4): 1 orphan inode deleted [ 1331.518387][T15775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1331.595011][T15766] Buffer I/O error on dev loop5, logical block 117440531, async page read [ 1331.604324][T15766] syz.5.1952: attempt to access beyond end of device [ 1331.604324][T15766] loop5: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 1331.619534][T15766] Buffer I/O error on dev loop5, logical block 4274257920, async page read [ 1331.675937][T15753] loop3: detected capacity change from 0 to 32768 [ 1331.699956][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.715248][ T29] audit: type=1800 audit(1734768038.813:352): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1952" name="file3" dev="loop5" ino=6 res=0 errno=0 [ 1331.740437][T15753] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1956 (15753) [ 1331.871757][T15753] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1331.935621][T15753] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1331.958407][T15753] BTRFS info (device loop3): disk space caching is enabled [ 1331.965820][T15753] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1333.027913][T15753] BTRFS info (device loop3): rebuilding free space tree [ 1333.252061][T15835] loop8: detected capacity change from 0 to 64 [ 1333.359357][T15753] BTRFS info (device loop3): disabling free space tree [ 1333.387504][T15753] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1333.412772][T15753] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1333.800445][T15847] loop5: detected capacity change from 0 to 512 [ 1334.032367][ T5840] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1334.297318][T15847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1334.509098][T15853] ceph: No mds server is up or the cluster is laggy [ 1334.808767][T15847] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.827438][T15872] loop7: detected capacity change from 0 to 512 [ 1334.914487][T15876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1973'. [ 1335.046131][T15878] loop3: detected capacity change from 0 to 512 [ 1335.426976][T15878] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 1335.624168][T15873] loop8: detected capacity change from 0 to 64 [ 1335.687170][T15872] EXT4-fs: Ignoring removed mblk_io_submit option [ 1335.705268][T15872] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1335.735701][T15872] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1335.770462][T15872] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1335.911228][T15872] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1975: Invalid block bitmap block 0 in block_group 0 [ 1335.932086][T15872] EXT4-fs (loop7): Remounting filesystem read-only [ 1335.959946][T15872] Quota error (device loop7): write_blk: dquota write failed [ 1335.967879][T15872] Quota error (device loop7): write_blk: dquota write failed [ 1335.969540][T10111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.978902][T15872] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1335.994826][T15872] EXT4-fs (loop7): 1 orphan inode deleted [ 1336.001756][T15872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1336.449513][T15898] loop4: detected capacity change from 0 to 4096 [ 1336.486107][T15898] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1336.782884][T15911] loop5: detected capacity change from 0 to 128 [ 1336.929885][T15907] veth1_macvtap: left promiscuous mode [ 1336.935458][T15907] macsec0: entered promiscuous mode [ 1336.940869][T15907] macsec0: entered allmulticast mode [ 1336.948126][T14810] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.967330][T15908] bridge0: port 3(erspan0) entered blocking state [ 1336.974883][T15908] bridge0: port 3(erspan0) entered disabled state [ 1336.981599][T15908] erspan0: entered allmulticast mode [ 1336.994667][T15908] erspan0: entered promiscuous mode [ 1337.010102][T15908] bridge0: port 3(erspan0) entered blocking state [ 1337.016735][T15908] bridge0: port 3(erspan0) entered forwarding state [ 1337.319070][T15913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1337.627491][T15933] netlink: 34 bytes leftover after parsing attributes in process `syz.8.1992'. [ 1338.261434][T15944] ufs: You didn't specify the type of your ufs filesystem [ 1338.261434][T15944] [ 1338.261434][T15944] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1338.261434][T15944] [ 1338.261434][T15944] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1338.303196][T15944] ufs: ufstype=old is supported read-only [ 1338.312900][T15944] syz.3.1995: attempt to access beyond end of device [ 1338.312900][T15944] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1338.431181][T15929] ceph: No mds server is up or the cluster is laggy [ 1339.523861][T15956] loop3: detected capacity change from 0 to 4096 [ 1339.621813][T15956] NILFS (loop3): unsupported revision (superblock rev.=1.0, current rev.=2.0). Please check the version of mkfs.nilfs(2). [ 1340.340543][T15966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1342.652565][ T29] audit: type=1326 audit(1734768050.298:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.8.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad79585d29 code=0x7ffc0000 [ 1342.880112][ T29] audit: type=1326 audit(1734768050.319:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.8.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fad79585d29 code=0x7ffc0000 [ 1342.957231][ T29] audit: type=1326 audit(1734768050.319:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.8.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad79585d29 code=0x7ffc0000 [ 1343.045582][ T29] audit: type=1326 audit(1734768050.319:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.8.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad79585d29 code=0x7ffc0000 [ 1344.494815][T16027] dlm: Unknown command passed to DLM device : 0 [ 1344.494815][T16027] [ 1344.537139][T16029] netlink: 'syz.8.2021': attribute type 5 has an invalid length. [ 1344.622021][T16024] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1344.798383][T16039] netlink: 'syz.3.2023': attribute type 3 has an invalid length. [ 1344.830588][T16033] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2014'. [ 1346.415952][T16062] loop3: detected capacity change from 0 to 2048 [ 1346.703897][T16071] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1346.932369][T16077] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2037'. [ 1347.451799][T16089] dlm: no locking on control device [ 1348.655609][T16114] loop4: detected capacity change from 0 to 2048 [ 1349.230809][T16144] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2055'. [ 1349.371238][T16145] loop7: detected capacity change from 0 to 512 [ 1350.014440][T16145] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 1350.048112][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1350.921951][T16149] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1351.024538][T16149] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1351.332289][T16149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1351.390059][T16149] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1351.641383][T16149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1351.679384][T16149] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1351.903207][T16183] netlink: 'syz.7.2067': attribute type 1 has an invalid length. [ 1352.224548][ T2148] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1352.405866][ T2148] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1352.434236][ T2148] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 1352.565133][ T2148] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1352.585307][ T2148] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1352.598658][ T2148] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1352.607926][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.660457][T16222] xt_SECMARK: invalid mode: 2 [ 1352.824288][ T2148] ath6kl: Failed to submit usb control message: -71 [ 1352.850525][ T2148] ath6kl: unable to send the bmi data to the device: -71 [ 1352.907714][ T2148] ath6kl: Unable to send get target info: -71 [ 1353.015679][ T2148] ath6kl: Failed to init ath6kl core: -71 [ 1353.022268][ T2148] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1353.083380][T16240] netlink: 'syz.5.2083': attribute type 2 has an invalid length. [ 1353.130149][ T2148] usb 5-1: USB disconnect, device number 23 [ 1353.349713][T16249] loop7: detected capacity change from 0 to 2048 [ 1354.811612][T16248] loop8: detected capacity change from 0 to 32768 [ 1354.946362][T16251] loop3: detected capacity change from 0 to 32768 [ 1355.224888][T16277] xt_bpf: check failed: parse error [ 1356.047102][T16284] loop4: detected capacity change from 0 to 4096 [ 1356.197570][T16284] NILFS (loop4): unsupported revision (superblock rev.=1.0, current rev.=2.0). Please check the version of mkfs.nilfs(2). [ 1356.278724][T16251] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 1356.381599][T16251] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 1356.438227][T16251] bcachefs (loop3): Version upgrade required: [ 1356.438227][T16251] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1356.438227][T16251] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors [ 1356.438227][T16251] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1356.523823][T16251] bcachefs (loop3): dropping and reconstructing all alloc info [ 1356.608254][T16251] bcachefs (loop3): accounting_read... done [ 1356.650028][T16251] bcachefs (loop3): alloc_read... done [ 1356.656844][T16251] bcachefs (loop3): stripes_read... done [ 1356.663032][T16251] bcachefs (loop3): snapshots_read... done [ 1356.690232][T16251] bcachefs (loop3): done starting filesystem [ 1357.512738][T16327] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2098'. [ 1357.681831][ T5840] bcachefs (loop3): shutting down [ 1358.032050][ T5840] bcachefs (loop3): shutdown complete [ 1358.372047][T16339] veth1_macvtap: left promiscuous mode [ 1358.377565][T16339] macsec0: entered promiscuous mode [ 1358.382950][T16339] macsec0: entered allmulticast mode [ 1358.653548][T16351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1358.903879][T16362] xt_bpf: check failed: parse error [ 1359.015015][T16362] loop5: detected capacity change from 0 to 4096 [ 1359.083382][T16362] NILFS (loop5): unsupported revision (superblock rev.=1.0, current rev.=2.0). Please check the version of mkfs.nilfs(2). [ 1359.250541][T16365] Cannot find add_set index 0 as target [ 1359.488895][T16374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1359.624201][T16379] loop7: detected capacity change from 0 to 128 [ 1359.646027][T16379] FAT-fs (loop7): bogus number of reserved sectors [ 1359.656375][T16379] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1359.670564][T16379] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1359.750310][T16379] loop7: detected capacity change from 0 to 128 [ 1359.935778][T16386] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1361.071132][T16390] loop4: detected capacity change from 0 to 4096 [ 1361.084910][T16390] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1361.131597][T16390] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1361.189352][T16390] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1361.197594][T16397] loop8: detected capacity change from 0 to 8 [ 1361.204672][T16397] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1361.275317][T16397] cramfs: Error -3 while decompressing! [ 1361.281773][T16397] cramfs: ffffffff9a510b68(26)->ffff888048101000(4096) [ 1361.288963][T16397] cramfs: Error -3 while decompressing! [ 1361.294740][T16397] cramfs: ffffffff9a510b82(26)->ffff8880790dc000(4096) [ 1361.301653][T16397] cramfs: Error -3 while decompressing! [ 1361.307309][T16397] cramfs: ffffffff9a510b9c(16)->ffff88805c6ed000(4096) [ 1361.314269][T16397] cramfs: Error -3 while decompressing! [ 1361.319864][T16397] cramfs: ffffffff9a510b68(26)->ffff888048101000(4096) [ 1361.331971][T16404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.393365][T16450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2128'. [ 1363.419260][T16452] netlink: 'syz.7.2135': attribute type 30 has an invalid length. [ 1363.575910][T16424] loop8: detected capacity change from 0 to 32768 [ 1363.604370][T16456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.946746][T16430] loop3: detected capacity change from 0 to 32768 [ 1364.006445][T16430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2131 (16430) [ 1364.219745][T16430] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1364.254036][T16430] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1364.437754][T16430] BTRFS info (device loop3): using free-space-tree [ 1364.789709][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1364.790002][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1365.774859][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1365.785404][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1365.796765][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1365.806625][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1365.816478][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1365.827015][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1365.838699][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1365.850210][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1365.861028][T16430] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1365.880187][T16430] BTRFS error (device loop3): open_ctree failed: -12 [ 1365.986242][T16472] loop4: detected capacity change from 0 to 32768 [ 1366.381883][T16500] loop7: detected capacity change from 0 to 32768 [ 1366.431384][T16500] (syz.7.2146,16500,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1367.228770][T16472] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1367.238403][T16500] (syz.7.2146,16500,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1367.289268][T16472] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR [ 1367.296540][T16472] XFS (loop4): log mount failed [ 1367.436187][T16500] JBD2: Ignoring recovery information on journal [ 1367.563383][T16531] loop8: detected capacity change from 0 to 64 [ 1367.668092][T16531] hfs: request for non-existent node 16777216 in B*Tree [ 1367.680458][T16531] hfs: request for non-existent node 16777216 in B*Tree [ 1367.688887][T16531] hfs: request for non-existent node 16777216 in B*Tree [ 1367.700955][T16531] hfs: request for non-existent node 16777216 in B*Tree [ 1367.787689][T16500] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1369.419365][T16565] autofs4:pid:16565:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967071), cmd(0xc0189372) [ 1369.433493][T16565] autofs4:pid:16565:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189372) [ 1369.532356][T14810] ocfs2: Unmounting device (7,7) on (node local) [ 1370.914724][T16603] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1374.769564][T16625] loop3: detected capacity change from 0 to 32768 [ 1375.114828][T16625] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2173 (16625) [ 1375.477701][T16625] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1375.543670][T16625] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1375.552448][T16625] BTRFS info (device loop3): using free-space-tree [ 1375.657993][T16625] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1375.658271][T16625] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1375.667916][T16625] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1375.753163][T16625] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1375.809561][T16625] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1375.881013][T16625] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1376.101558][ T2148] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1376.324820][ T2148] usb 5-1: Using ep0 maxpacket: 8 [ 1376.377513][ T2148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1376.544693][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1376.566252][T16625] BTRFS error (device loop3): open_ctree failed: -12 [ 1376.617763][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1376.668457][ T2148] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1376.702098][ T2148] usb 5-1: config 1 has no interface number 1 [ 1376.717207][ T2148] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1376.753227][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.774599][T16682] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 1376.781672][ T2148] usb 5-1: Product: syz [ 1376.786656][ T2148] usb 5-1: Manufacturer: syz [ 1376.819786][ T2148] usb 5-1: SerialNumber: syz [ 1376.833948][T16682] macvlan0: entered promiscuous mode [ 1376.840113][T16682] macvlan0: entered allmulticast mode [ 1376.879733][T16682] veth1_vlan: entered allmulticast mode [ 1376.908567][T16682] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1377.083364][T16660] loop7: detected capacity change from 0 to 32768 [ 1377.096416][ T2148] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1377.103864][ T2148] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1377.165804][ T2148] usb 5-1: USB disconnect, device number 24 [ 1377.193690][T16660] ea_get: invalid extended attribute [ 1377.199648][T16660] ffff888055f7b148: 04 00 00 00 .... [ 1377.292948][T16668] loop8: detected capacity change from 0 to 32768 [ 1377.794795][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1378.227944][T16691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 1378.938641][T16715] usb usb8: usbfs: process 16715 (syz.8.2203) did not claim interface 0 before use [ 1379.004323][T16707] loop4: detected capacity change from 0 to 32768 [ 1379.159592][T16707] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1379.334322][T16730] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2205'. [ 1379.746066][T16707] XFS (loop4): Ending clean mount [ 1379.856784][T16707] XFS (loop4): Quotacheck needed: Please wait. [ 1379.944688][T16707] XFS (loop4): Quotacheck: Done. [ 1379.951033][T16707] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1380.263963][ T29] audit: type=1326 audit(1734768089.781:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529af85d29 code=0x7ffc0000 [ 1380.289316][ T29] audit: type=1326 audit(1734768089.802:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529af85d29 code=0x7ffc0000 [ 1380.331539][ T29] audit: type=1326 audit(1734768089.823:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f529af85d29 code=0x7ffc0000 [ 1380.369297][ T29] audit: type=1326 audit(1734768089.823:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529af85d29 code=0x7ffc0000 [ 1380.408290][ T29] audit: type=1326 audit(1734768089.823:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529af85d29 code=0x7ffc0000 [ 1380.689745][ T2148] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1380.851024][ T2148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.865969][ T2148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.906677][ T2148] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1380.947524][ T2148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.959226][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2216'. [ 1381.075510][ T2148] usb 4-1: config 0 descriptor?? [ 1381.249118][ T5885] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1381.450308][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 1381.471237][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1381.493943][ T5885] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1381.509222][ T2148] uclogic 0003:5543:0042.0003: No inputs registered, leaving [ 1381.517052][ T5885] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1381.526083][ T29] audit: type=1326 audit(1734768091.093:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16757 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75d785d29 code=0x7ffc0000 [ 1381.558339][ T5885] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1381.575492][ T2148] uclogic 0003:5543:0042.0003: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 1381.587123][ T5885] usb 5-1: config 1 has no interface number 1 [ 1381.593530][ T29] audit: type=1326 audit(1734768091.103:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16757 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75d785d29 code=0x7ffc0000 [ 1381.619344][ T5885] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1381.638058][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.647184][ T29] audit: type=1326 audit(1734768091.114:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16757 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd75d785d29 code=0x7ffc0000 [ 1381.670069][ T5885] usb 5-1: Product: syz [ 1381.674260][ T5885] usb 5-1: Manufacturer: syz [ 1381.683753][ T2148] usb 4-1: USB disconnect, device number 21 [ 1381.700057][ T5885] usb 5-1: SerialNumber: syz [ 1381.720683][ T29] audit: type=1326 audit(1734768091.114:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16757 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75d785d29 code=0x7ffc0000 [ 1381.756711][ T29] audit: type=1326 audit(1734768091.114:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16757 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75d785d29 code=0x7ffc0000 [ 1381.945566][ T5885] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1381.953017][ T5885] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1381.979130][ T5885] usb 5-1: USB disconnect, device number 25 [ 1381.989406][T16765] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2221'. [ 1382.194687][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1382.377286][T16780] loop3: detected capacity change from 0 to 16 [ 1382.441399][T16780] erofs (device loop3): mounted with root inode @ nid 36. [ 1382.537524][T16786] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1382.686767][T16786] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1383.178634][T16797] loop8: detected capacity change from 0 to 1024 [ 1383.193134][T16797] EXT4-fs: Ignoring removed bh option [ 1383.231639][T16797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.367620][T15091] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.828645][T16810] loop3: detected capacity change from 0 to 32768 [ 1383.849112][T16810] (syz.3.2242,16810,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1383.885269][T16810] (syz.3.2242,16810,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1383.930494][T16810] JBD2: Ignoring recovery information on journal [ 1383.945066][ T8750] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1384.069334][T16810] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1384.097269][ T8750] usb 5-1: Using ep0 maxpacket: 16 [ 1384.099592][ T8750] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1384.099620][ T8750] usb 5-1: config 0 has no interface number 0 [ 1384.101647][ T8750] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1384.101678][ T8750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.101701][ T8750] usb 5-1: Product: syz [ 1384.101717][ T8750] usb 5-1: Manufacturer: syz [ 1384.101731][ T8750] usb 5-1: SerialNumber: syz [ 1384.103594][ T8750] usb 5-1: config 0 descriptor?? [ 1384.218818][ T5840] ocfs2: Unmounting device (7,3) on (node local) [ 1384.313906][ T8750] usb 5-1: selecting invalid altsetting 1 [ 1384.332128][ T8750] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1384.366010][ T8750] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1384.373755][ T8750] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 1384.392003][ T8750] usb 5-1: USB disconnect, device number 26 [ 1384.587039][T16833] loop8: detected capacity change from 0 to 4096 [ 1384.601593][T16833] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1384.658631][T16839] loop3: detected capacity change from 0 to 256 [ 1384.686934][T16833] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 1384.744862][T16839] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1384.804390][T15091] ntfs3(loop8): ino=1a, ntfs_sync_fs failed, -22. [ 1385.605786][T16861] loop7: detected capacity change from 0 to 2048 [ 1385.628777][T16861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.709642][T16849] loop8: detected capacity change from 0 to 32768 [ 1385.723750][T16849] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2257 (16849) [ 1385.745452][ T5885] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1385.767253][T16849] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1385.800873][T16849] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1385.827120][T16849] BTRFS info (device loop8): using free-space-tree [ 1385.926419][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 1385.959728][ T5885] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1386.001835][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.027761][T16882] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1386.096389][ T5885] usb 4-1: Product: syz [ 1386.100805][ T5885] usb 4-1: Manufacturer: syz [ 1386.105439][ T5885] usb 4-1: SerialNumber: syz [ 1386.115827][ T5885] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1386.302870][T15091] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1386.512979][ T5885] gspca_stk1135: reg_w 0x0 err -71 [ 1386.518406][ T2148] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1386.529406][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.569136][ T5885] gspca_stk1135: Sensor write failed [ 1386.644301][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.670795][ T5885] gspca_stk1135: Sensor write failed [ 1386.702668][ T2148] usb 5-1: Using ep0 maxpacket: 8 [ 1386.708087][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.727372][ T2148] usb 5-1: config 0 has an invalid interface number: 141 but max is 0 [ 1386.735591][ T2148] usb 5-1: config 0 has no interface number 0 [ 1386.752808][ T5885] gspca_stk1135: Sensor read failed [ 1386.772773][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.793061][ T5885] gspca_stk1135: Sensor read failed [ 1386.823703][ T2148] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=ee.8a [ 1386.840363][ T5885] gspca_stk1135: Detected sensor type unknown (0x0) [ 1386.848587][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.869366][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.875740][ T5885] gspca_stk1135: Sensor read failed [ 1386.907147][ T2148] usb 5-1: Product: syz [ 1386.916057][T14810] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.936326][ T2148] usb 5-1: Manufacturer: syz [ 1386.940985][ T2148] usb 5-1: SerialNumber: syz [ 1386.956063][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1386.964770][ T5885] gspca_stk1135: Sensor read failed [ 1386.988271][ T2148] usb 5-1: config 0 descriptor?? [ 1387.004491][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1387.032725][ T2148] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1387.040052][ T5885] gspca_stk1135: Sensor write failed [ 1387.049287][T16892] netlink: 200 bytes leftover after parsing attributes in process `syz.8.2265'. [ 1387.053824][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1387.076139][ T5885] gspca_stk1135: Sensor write failed [ 1387.083709][ T5885] stk1135 4-1:64.0: probe with driver stk1135 failed with error -71 [ 1387.146457][ T5885] usb 4-1: USB disconnect, device number 22 [ 1387.541783][ T5885] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1387.627996][ T2148] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1387.640618][ T2148] sq905 5-1:0.141: probe with driver sq905 failed with error -71 [ 1387.651650][ T2148] usb 5-1: USB disconnect, device number 27 [ 1387.665447][T16910] program syz.5.2274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1387.746270][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 1387.766188][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1387.778135][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1387.790677][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1387.801531][ T5885] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1387.810996][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.822793][ T5885] usb 4-1: config 0 descriptor?? [ 1388.154846][T16918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2277'. [ 1388.240277][ T5885] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.0004/input/input26 [ 1388.272647][T16920] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2278'. [ 1388.368785][ T5885] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.0004/input/input27 [ 1388.458846][ T5885] kye 0003:0458:5005.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 1388.486281][ T5885] usb 4-1: USB disconnect, device number 23 [ 1388.679260][ T2148] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1388.843356][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1388.860835][ T2148] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1388.874772][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.894341][ T2148] usb 5-1: config 0 descriptor?? [ 1389.541326][ T2148] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 1389.601248][ T2148] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 1389.766179][ T2148] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 1389.889385][ T8396] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1389.899529][ T2148] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 1389.907110][ T2148] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 1389.914441][ T2148] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 1389.922446][ T2148] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 1389.932891][ T2148] elecom 0003:056E:00E6.0005: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.4-1/input0 [ 1389.955127][ T2148] usb 5-1: USB disconnect, device number 28 [ 1389.984195][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 1389.999712][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 1390.008934][T16941] netlink: 'syz.3.2287': attribute type 14 has an invalid length. [ 1390.022031][T16941] netlink: 'syz.3.2287': attribute type 11 has an invalid length. [ 1390.042809][ T8396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.073803][ T8396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.105335][ T8396] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1390.139828][ T8396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.175942][ T8396] usb 6-1: config 0 descriptor?? [ 1390.202222][T16945] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 1390.331479][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 1390.635401][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2297'. [ 1390.644878][T16962] tipc: Enabling of bearer rejected, failed to enable media [ 1390.706464][ T8396] cm6533_jd 0003:0D8C:0022.0006: unknown global tag 0xc [ 1390.714397][ T8396] cm6533_jd 0003:0D8C:0022.0006: item 0 1 1 12 parsing failed [ 1390.724145][ T8396] cm6533_jd 0003:0D8C:0022.0006: parse failed [ 1390.735309][ T8396] cm6533_jd 0003:0D8C:0022.0006: probe with driver cm6533_jd failed with error -22 [ 1390.868865][T16968] netlink: 'syz.3.2300': attribute type 6 has an invalid length. [ 1390.944164][ T2148] usb 6-1: USB disconnect, device number 7 [ 1391.075013][T16974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.470244][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1391.485013][ T8750] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1391.642680][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1391.655732][ T8750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.662365][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1391.667207][ T8750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.676499][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1391.698834][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1391.707702][ T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1391.708138][T16985] loop8: detected capacity change from 0 to 1024 [ 1391.723682][ T25] usb 4-1: config 1 has no interface number 1 [ 1391.723696][ T8750] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1391.739002][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1391.739033][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.739053][ T25] usb 4-1: Product: syz [ 1391.739068][ T25] usb 4-1: Manufacturer: syz [ 1391.739084][ T25] usb 4-1: SerialNumber: syz [ 1391.766240][T16985] EXT4-fs: Ignoring removed orlov option [ 1391.769926][ T8750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.778803][T16985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1391.802291][ T8750] usb 5-1: config 0 descriptor?? [ 1392.003721][ T25] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1392.011173][ T25] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1392.044714][T16985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1392.066073][ T25] usb 4-1: USB disconnect, device number 24 [ 1392.141235][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1392.141254][ T29] audit: type=1800 audit(1734768102.242:370): pid=16985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2308" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1392.173721][T16985] __find_get_block_slow() failed. block=72057594037927936, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop8 blocksize: 1024 [ 1392.190508][T16985] grow_buffers: requested out-of-range block 72057594037927936 for device loop8 [ 1392.200134][T16985] EXT4-fs warning (device loop8): ext4_resize_fs:2019: can't read last block, resize aborted [ 1392.216888][ T8750] hid-retrode 0003:0403:97C1.0007: unbalanced collection at end of report description [ 1392.227238][ T8750] hid-retrode 0003:0403:97C1.0007: probe with driver hid-retrode failed with error -22 [ 1392.259606][T15091] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.302197][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1392.390281][T16994] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2310'. [ 1392.421234][ T25] usb 5-1: USB disconnect, device number 29 [ 1392.574453][T16996] loop8: detected capacity change from 0 to 2048 [ 1392.782157][T17003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1392.784685][ T9957] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1392.965886][ T9957] usb 4-1: Using ep0 maxpacket: 16 [ 1392.973251][ T9957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.013401][ T9957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1393.031183][T17007] netlink: 'syz.8.2316': attribute type 1 has an invalid length. [ 1393.032560][ T9957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1393.051028][ T9957] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1393.062725][ T9957] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.077420][ T9957] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1393.111918][T17009] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2317'. [ 1393.125983][ T9957] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1393.134964][ T9957] usb 4-1: Manufacturer: syz [ 1393.151204][ T9957] usb 4-1: config 0 descriptor?? [ 1393.451498][ T9957] rc_core: IR keymap rc-hauppauge not found [ 1393.457475][ T9957] Registered IR keymap rc-empty [ 1393.490918][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.518019][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.561737][ T9957] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1393.580879][T17019] loop8: detected capacity change from 0 to 2048 [ 1393.628836][ T9957] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 1393.677398][T17028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1393.700393][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.746700][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.781700][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.842286][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.880599][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.908897][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.959207][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1393.994700][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1394.032345][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1394.067777][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1394.108955][ T9957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1394.140368][ T9957] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1394.160193][ T9957] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1394.204564][ T9957] usb 4-1: USB disconnect, device number 25 [ 1394.490461][T17057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1394.694326][T17061] loop4: detected capacity change from 0 to 2048 [ 1394.760486][T17063] ieee802154 phy0 wpan0: encryption failed: -22 [ 1394.978044][T17070] loop3: detected capacity change from 0 to 512 [ 1395.108669][T17070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1395.128676][T17070] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.668251][T17095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1395.700059][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1396.010372][T17106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2351'. [ 1396.050178][T17107] IPVS: Unknown mcast interface: pim6reg0 [ 1396.184446][T17109] loop3: detected capacity change from 0 to 2048 [ 1396.199628][T17109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1396.232667][ T29] audit: type=1800 audit(1734768106.535:371): pid=17109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2354" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1396.289988][ T2148] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1396.385946][T17099] loop8: detected capacity change from 0 to 32768 [ 1396.386611][T17099] XFS: ikeep mount option is deprecated. [ 1396.452335][ T2148] usb 5-1: Using ep0 maxpacket: 8 [ 1396.454811][ T2148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1396.456898][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1396.486924][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1396.486952][ T2148] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1396.486973][ T2148] usb 5-1: config 1 has no interface number 1 [ 1396.493817][ T2148] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1396.521290][T17099] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1396.522972][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.541960][ T2148] usb 5-1: Product: syz [ 1396.541982][ T2148] usb 5-1: Manufacturer: syz [ 1396.541997][ T2148] usb 5-1: SerialNumber: syz [ 1396.599237][T17099] XFS (loop8): Ending clean mount [ 1396.791708][T15091] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1396.831668][ T2148] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1396.839274][ T2148] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1396.886814][ T2148] usb 5-1: USB disconnect, device number 30 [ 1396.953661][T17125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.441009][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1397.962736][T17148] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1398.099865][T13653] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1399.147584][T13653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.185946][T13653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.215568][T13653] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1399.240782][T13653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.251373][T17158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1399.280071][T13653] usb 6-1: config 0 descriptor?? [ 1399.357348][ T8750] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1399.380110][T17150] loop8: detected capacity change from 0 to 32768 [ 1399.397842][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2371'. [ 1399.503162][ T8750] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1399.512407][ T8750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.553501][ T8750] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1399.591335][ T8750] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.647328][T17150] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 1399.655122][ T8750] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1399.673333][T17150] bcachefs (loop8): initializing new filesystem [ 1399.685773][ T8750] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1399.697002][ T8750] usb 4-1: Product: syz [ 1399.701297][ T8750] usb 4-1: Manufacturer: syz [ 1399.710671][T17150] bcachefs (loop8): going read-write [ 1399.726095][ T8750] cdc_wdm 4-1:1.0: skipping garbage [ 1399.738141][ T8750] cdc_wdm 4-1:1.0: skipping garbage [ 1399.748682][T17150] bcachefs (loop8): marking superblocks [ 1399.761239][ T8750] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1399.772487][ T8750] cdc_wdm 4-1:1.0: Unknown control protocol [ 1399.903220][T17150] bcachefs (loop8): initializing freespace [ 1399.943803][T17150] bcachefs (loop8): done initializing freespace [ 1399.963577][ T8750] usb 4-1: USB disconnect, device number 26 [ 1399.985558][T17150] bcachefs (loop8): reading snapshots table [ 1400.014505][T17150] bcachefs (loop8): reading snapshots done [ 1400.020316][T13653] arvo 0003:1E7D:30D4.0008: unbalanced collection at end of report description [ 1400.030904][T13653] arvo 0003:1E7D:30D4.0008: parse failed [ 1400.041780][T13653] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -22 [ 1400.104452][T17150] bcachefs (loop8): done starting filesystem [ 1400.185157][T17150] syz.8.2367 (17150) used greatest stack depth: 12240 bytes left [ 1400.230370][T15091] bcachefs (loop8): shutting down [ 1400.239222][T15091] bcachefs (loop8): going read-only [ 1400.246659][T15091] bcachefs (loop8): finished waiting for writes to stop [ 1400.265862][T15091] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2 [ 1400.430800][T15091] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 7 [ 1400.431614][ T9957] usb 6-1: USB disconnect, device number 8 [ 1400.461756][T15091] bcachefs (loop8): clean shutdown complete, journal seq 8 [ 1400.474650][T15091] bcachefs (loop8): marking filesystem clean [ 1400.568226][T15091] bcachefs (loop8): shutdown complete [ 1401.809316][T17186] loop3: detected capacity change from 0 to 4096 [ 1402.198250][T17195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1402.990682][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2383'. [ 1403.034204][T17205] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2383'. [ 1403.052743][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2383'. [ 1403.062233][T17205] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2383'. [ 1403.873046][ T5885] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1404.292416][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 1404.308734][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1404.332555][ T5885] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1404.347393][ T5885] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1404.366676][ T5885] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1404.418953][ T5885] usb 4-1: config 1 has no interface number 1 [ 1404.786655][ T5885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1404.796030][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.808612][ T5885] usb 4-1: Product: syz [ 1404.812814][ T5885] usb 4-1: Manufacturer: syz [ 1404.817607][ T5885] usb 4-1: SerialNumber: syz [ 1404.826855][T17227] pimreg: entered allmulticast mode [ 1404.856037][T17229] bond0: option mode: unable to set because the bond device has slaves [ 1405.616474][ T5885] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1405.624451][ T5885] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1406.545800][ T5885] usb 4-1: USB disconnect, device number 27 [ 1406.762578][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1407.089481][T17254] loop8: detected capacity change from 0 to 8 [ 1407.519697][T17265] mkiss: ax0: crc mode is auto. [ 1407.893706][T17271] pim6reg: entered allmulticast mode [ 1407.911652][T17271] pim6reg: left allmulticast mode [ 1408.123559][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1408.707931][T17282] loop7: detected capacity change from 0 to 256 [ 1408.793949][T17282] FAT-fs (loop7): Directory bread(block 64) failed [ 1408.806645][T17282] FAT-fs (loop7): Directory bread(block 65) failed [ 1408.833643][T17282] FAT-fs (loop7): Directory bread(block 66) failed [ 1408.844849][T17282] FAT-fs (loop7): Directory bread(block 67) failed [ 1408.851484][T17282] FAT-fs (loop7): Directory bread(block 68) failed [ 1408.865681][T17282] FAT-fs (loop7): Directory bread(block 69) failed [ 1408.872886][T17282] FAT-fs (loop7): Directory bread(block 70) failed [ 1408.880876][T17282] FAT-fs (loop7): Directory bread(block 71) failed [ 1408.887967][T17282] FAT-fs (loop7): Directory bread(block 72) failed [ 1408.895449][T17282] FAT-fs (loop7): Directory bread(block 73) failed [ 1409.659067][T17308] loop3: detected capacity change from 0 to 4096 [ 1409.743323][T17311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1409.869381][T17302] loop7: detected capacity change from 0 to 32768 [ 1410.026496][T17313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1410.300111][T17318] netlink: 200 bytes leftover after parsing attributes in process `syz.7.2424'. [ 1410.363660][T17316] loop3: detected capacity change from 0 to 4096 [ 1410.387583][T17316] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1410.528518][ T9957] libceph: connect (1)[c::]:6789 error -101 [ 1410.534846][ T9957] libceph: mon0 (1)[c::]:6789 connect error [ 1410.559020][T17316] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1410.647448][T17329] loop7: detected capacity change from 0 to 764 [ 1410.818525][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 1410.824562][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 1410.970669][T17340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1411.081785][T17319] ceph: No mds server is up or the cluster is laggy [ 1411.489740][T17350] loop8: detected capacity change from 0 to 4096 [ 1411.586521][T17353] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2438'. [ 1411.616565][ T5885] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1411.789863][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.807352][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.866854][ T5885] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1412.074199][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.095010][ T5885] usb 6-1: config 0 descriptor?? [ 1412.164059][T17371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1413.390870][ T5885] elecom 0003:056E:010D.0009: item fetching failed at offset 0/3 [ 1413.399690][ T5885] elecom 0003:056E:010D.0009: probe with driver elecom failed with error -22 [ 1413.593285][ T25] usb 6-1: USB disconnect, device number 9 [ 1413.699372][ T5885] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1413.782296][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2448'. [ 1413.960953][T17390] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2450'. [ 1414.708930][T17396] netlink: 200 bytes leftover after parsing attributes in process `syz.7.2451'. [ 1414.878191][T17400] loop7: detected capacity change from 0 to 4096 [ 1414.913395][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 1414.921555][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1414.938441][ T5885] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1414.979357][ T5885] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1414.991034][ T5885] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1415.014113][ T5885] usb 5-1: config 1 has no interface number 1 [ 1415.024858][T17400] ntfs3(loop7): failed to convert "0080" to koi8-r [ 1415.027701][ T5885] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1415.051489][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.071963][T17400] ntfs3(loop7): failed to convert name for inode 1e. [ 1415.074787][ T5885] usb 5-1: Product: syz [ 1415.086807][ T5885] usb 5-1: Manufacturer: syz [ 1415.091436][ T5885] usb 5-1: SerialNumber: syz [ 1415.267837][ T5885] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1415.283034][ T5885] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1415.346066][ T5885] usb 5-1: USB disconnect, device number 31 [ 1416.636339][T17420] loop5: detected capacity change from 0 to 256 [ 1416.679660][T17427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1417.315540][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1418.100549][T17435] loop7: detected capacity change from 0 to 32768 [ 1418.403580][T17435] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1419.319250][ T29] audit: type=1800 audit(1734768130.775:372): pid=17435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2469" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 1419.757693][T14810] ocfs2: Unmounting device (7,7) on (node local) [ 1420.545633][T17479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2478'. [ 1420.692519][T17485] loop8: detected capacity change from 0 to 512 [ 1420.719233][T17485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1420.755819][T17485] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1420.784984][T17485] EXT4-fs (loop8): blocks per group (64) and clusters per group (32768) inconsistent [ 1420.875968][ T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1421.133011][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1421.344706][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1421.442171][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1421.550870][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1421.660849][ T25] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1421.826633][ T25] usb 5-1: config 1 has no interface number 1 [ 1421.837450][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1421.846567][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.855065][ T25] usb 5-1: Product: syz [ 1421.859682][ T25] usb 5-1: Manufacturer: syz [ 1421.864301][ T25] usb 5-1: SerialNumber: syz [ 1422.042494][T17500] loop3: detected capacity change from 0 to 4096 [ 1422.065169][T17500] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 1422.173035][ T25] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1422.196653][ T25] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1422.216758][ T25] usb 5-1: USB disconnect, device number 32 [ 1422.270150][T17500] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1422.430828][T13475] ntfs3(loop3): ino=5, ntfs3_write_inode failed, -22. [ 1422.539128][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.233998][T17516] loop8: detected capacity change from 0 to 764 [ 1424.268873][T17516] rock: directory entry would overflow storage [ 1424.275525][T17516] rock: sig=0x4654, size=5, remaining=4 [ 1424.283533][T17518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1424.561130][T17528] tipc: Enabled bearer , priority 10 [ 1425.494656][T17534] loop4: detected capacity change from 0 to 1024 [ 1425.524808][T17534] EXT4-fs: Ignoring removed orlov option [ 1425.568794][T17540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2499'. [ 1425.579195][T17534] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1425.607157][T17534] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1425.654025][T17534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.955632][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.002237][ T9957] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1426.110972][T17557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1426.153242][ T9957] usb 4-1: Using ep0 maxpacket: 8 [ 1426.174267][ T9957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1426.205348][ T9957] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1426.216412][ T9957] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1426.253663][ T9957] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1426.269330][ T9957] usb 4-1: config 1 has no interface number 1 [ 1426.278465][ T9957] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1426.288356][ T9957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.304434][ T9957] usb 4-1: Product: syz [ 1426.319534][ T9957] usb 4-1: Manufacturer: syz [ 1426.328679][ T9957] usb 4-1: SerialNumber: syz [ 1426.543515][ T25] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1426.552455][ T9957] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1426.586952][ T9957] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1426.683405][ T9957] usb 4-1: USB disconnect, device number 28 [ 1426.717029][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1426.735167][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1426.756030][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1426.766621][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1426.777128][ T25] usb 5-1: SerialNumber: syz [ 1426.799236][T17573] loop5: detected capacity change from 0 to 2048 [ 1426.810421][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1426.830939][ T25] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1426.844565][ T25] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1426.854534][ T25] scsi host1: usb-storage 5-1:1.0 [ 1426.932687][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1427.119575][T17586] loop3: detected capacity change from 0 to 256 [ 1427.268518][T17592] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2521'. [ 1427.285329][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2521'. [ 1428.145036][T13653] usb 5-1: USB disconnect, device number 33 [ 1429.222098][T17616] loop7: detected capacity change from 0 to 2048 [ 1429.249610][T17611] loop8: detected capacity change from 0 to 2048 [ 1429.266997][T17616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1429.393010][T17620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2532'. [ 1429.706425][ T2148] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1429.751853][T17629] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2531'. [ 1429.884693][ T2148] usb 4-1: Using ep0 maxpacket: 8 [ 1429.954887][ T2148] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1429.973568][ T2148] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1430.048674][ T2148] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1430.083093][ T2148] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1430.117503][ T2148] usb 4-1: config 1 has no interface number 1 [ 1430.137398][T14810] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.161376][ T2148] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1430.193835][T17633] loop8: detected capacity change from 0 to 512 [ 1430.213836][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.239369][ T2148] usb 4-1: Product: syz [ 1430.243593][ T2148] usb 4-1: Manufacturer: syz [ 1430.248204][ T2148] usb 4-1: SerialNumber: syz [ 1430.252067][T17633] EXT4-fs: Ignoring removed oldalloc option [ 1430.287171][T17633] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1430.372283][T17633] EXT4-fs (loop8): 1 truncate cleaned up [ 1430.379386][T17633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1430.488557][T17633] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.2535: corrupted in-inode xattr: overlapping e_value [ 1430.552053][T17633] EXT4-fs warning (device loop8): ext4_xattr_set_entry:1772: inode #15: comm syz.8.2535: unable to update i_inline_off [ 1430.597690][T17641] EXT4-fs error (device loop8): ext4_xattr_ibody_list:797: inode #15: comm syz.8.2535: corrupted in-inode xattr: overlapping e_value [ 1430.606832][ T2148] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1430.621212][ T2148] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1430.635766][ T2148] usb 4-1: USB disconnect, device number 29 [ 1430.836771][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1431.020643][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1431.118378][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1431.423739][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1431.442065][ T25] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1431.455581][ T25] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1431.465951][ T25] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1431.475223][ T25] usb 6-1: config 1 has no interface number 1 [ 1431.515285][T15091] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.520901][ T25] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1431.540663][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.549160][ T25] usb 6-1: Product: syz [ 1431.553444][ T25] usb 6-1: Manufacturer: syz [ 1431.558123][ T25] usb 6-1: SerialNumber: syz [ 1432.010350][ T25] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1432.019283][ T25] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1432.041332][ T25] usb 6-1: USB disconnect, device number 10 [ 1432.250374][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1432.284746][T17640] loop4: detected capacity change from 0 to 32768 [ 1432.463848][T17666] loop3: detected capacity change from 0 to 2048 [ 1432.503568][T17666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.678621][T17640] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc [ 1432.724727][T17640] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 1432.742839][T17640] bcachefs (loop4): Version upgrade required: [ 1432.742839][T17640] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1432.742839][T17640] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors [ 1432.742839][T17640] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1432.817086][T17640] bcachefs (loop4): dropping and reconstructing all alloc info [ 1432.848228][T17640] bcachefs (loop4): accounting_read... done [ 1432.859451][T17640] bcachefs (loop4): alloc_read... done [ 1432.865043][T17640] bcachefs (loop4): stripes_read... done [ 1432.871088][T17640] bcachefs (loop4): snapshots_read... done [ 1432.879996][T17640] bcachefs (loop4): done starting filesystem [ 1432.967228][ T5846] bcachefs (loop4): shutting down [ 1432.995679][ T5846] bcachefs (loop4): shutdown complete [ 1433.286642][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.583760][T13653] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1435.756089][T13653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 1435.768104][T13653] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1435.778190][T13653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.857107][T13653] usb 6-1: config 0 descriptor?? [ 1436.124869][T17712] loop8: detected capacity change from 0 to 2048 [ 1436.163835][T17712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1436.654501][T13653] apple 0003:05AC:026C.000A: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.5-1/input0 [ 1436.985869][T15091] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.168548][ T8396] usb 6-1: USB disconnect, device number 11 [ 1437.766123][T17730] loop4: detected capacity change from 0 to 32768 [ 1437.820104][T17730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2566 (17730) [ 1437.947682][T17730] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1438.089576][T17730] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 1438.103697][T17730] BTRFS info (device loop4): using free-space-tree [ 1439.329070][T17766] loop3: detected capacity change from 0 to 2048 [ 1440.251165][T17773] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1440.262177][ T5846] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1442.232431][ T8396] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1442.402197][ T8396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.438673][ T8396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.469601][ T8396] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1442.488913][ T8396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.263129][ T8396] usb 4-1: config 0 descriptor?? [ 1444.414084][ T8396] magicmouse 0003:05AC:0269.000B: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 1444.434970][ T8396] usb 4-1: USB disconnect, device number 30 [ 1444.485044][T17814] loop5: detected capacity change from 0 to 2048 [ 1444.898383][T17829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1445.755935][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1445.880149][T17848] loop5: detected capacity change from 0 to 2048 [ 1445.929631][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1445.946952][ T25] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1445.955422][ T25] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1445.984047][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1446.004652][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1446.023484][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1446.033795][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1446.046961][ T25] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1446.056085][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.066137][ T25] usb 5-1: config 0 descriptor?? [ 1446.083682][T17848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1446.342828][ T25] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1446.380244][T17858] loop3: detected capacity change from 0 to 2048 [ 1447.038210][ T2148] usb 5-1: USB disconnect, device number 34 [ 1447.083084][ T2148] usblp0: removed [ 1447.193341][T10111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.240772][T17863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1447.331151][T17866] hsr0: entered promiscuous mode [ 1447.337519][T17866] macsec1: entered allmulticast mode [ 1447.343043][T17866] hsr0: entered allmulticast mode [ 1447.348720][T17866] hsr_slave_0: entered allmulticast mode [ 1447.354393][T17866] hsr_slave_1: entered allmulticast mode [ 1447.372063][T17866] hsr0: left allmulticast mode [ 1447.377356][T17866] hsr_slave_0: left allmulticast mode [ 1447.382922][T17866] hsr_slave_1: left allmulticast mode [ 1448.070099][T17886] tipc: Started in network mode [ 1448.082921][T17886] tipc: Node identity 00000000000000000031bb0000000001, cluster identity 4711 [ 1448.098301][T17886] tipc: Enabling of bearer rejected, failed to enable media [ 1448.272895][T17881] loop4: detected capacity change from 0 to 32768 [ 1448.273031][T17880] loop3: detected capacity change from 0 to 32768 [ 1448.308330][T17880] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2617 (17880) [ 1448.334464][T17880] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1448.338159][T17881] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1448.344889][T17880] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1448.382544][T17880] BTRFS info (device loop3): using free-space-tree [ 1448.537999][ T29] audit: type=1800 audit(1734768161.440:373): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2617" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1448.619353][ T5840] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1448.636959][T17881] XFS (loop4): Ending clean mount [ 1448.647030][T17881] XFS (loop4): Quotacheck needed: Please wait. [ 1448.768362][T17881] XFS (loop4): Quotacheck: Done. [ 1448.786757][T17917] loop7: detected capacity change from 0 to 2048 [ 1449.162509][ T5846] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1449.347892][T17919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1449.903213][T17923] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2620'. [ 1450.453682][T13653] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1450.609973][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1450.795670][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1450.848105][ T25] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1450.900390][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.971074][ T25] usb 5-1: Product: syz [ 1451.167186][T13653] usb 4-1: Using ep0 maxpacket: 32 [ 1451.182200][ T25] usb 5-1: Manufacturer: syz [ 1451.186947][ T25] usb 5-1: SerialNumber: syz [ 1451.202455][T13653] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 1451.207069][ T25] usb 5-1: config 0 descriptor?? [ 1451.222421][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 1451.249459][T13653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.258211][T13653] usb 4-1: Product: syz [ 1451.272343][T13653] usb 4-1: Manufacturer: syz [ 1451.276988][T13653] usb 4-1: SerialNumber: syz [ 1451.298738][T13653] usb 4-1: config 0 descriptor?? [ 1451.314702][T13653] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 1451.514011][ T2148] usb 4-1: USB disconnect, device number 31 [ 1451.632936][ T25] gspca_se401: Bayer format not supported! [ 1451.860212][T17952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1451.878107][ T2148] usb 5-1: USB disconnect, device number 35 [ 1452.186919][T13653] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1452.348704][T13653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.359895][T13653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.378543][T13653] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1452.392853][T13653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.413754][T13653] usb 6-1: config 0 descriptor?? [ 1452.433702][T17960] loop3: detected capacity change from 0 to 32768 [ 1452.444265][T17960] XFS: ikeep mount option is deprecated. [ 1452.461216][T17962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1452.515561][T17960] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1452.645965][T17960] XFS (loop3): Ending clean mount [ 1452.660299][T17960] XFS (loop3): Quotacheck needed: Please wait. [ 1452.679671][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'. [ 1452.722635][T17960] XFS (loop3): Quotacheck: Done. [ 1452.851037][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1453.181746][T17982] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2645'. [ 1453.255966][T13653] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 1453.263184][T13653] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 1453.270183][T13653] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 1453.277341][T13653] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 1453.284515][T13653] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 1453.291646][T13653] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 1453.298630][T13653] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 1453.311297][T13653] lenovo 0003:17EF:6067.000C: hidraw0: USB HID v2.00 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0 [ 1453.355323][T17987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2643'. [ 1453.530346][ T5885] usb 6-1: USB disconnect, device number 12 [ 1453.651935][T17985] loop4: detected capacity change from 0 to 40427 [ 1453.705863][T17985] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1453.726965][T17985] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1453.776974][T17985] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1453.857197][T17985] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1453.866267][T17985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1455.242935][T18010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2654'. [ 1455.700755][T18011] ceph: No mds server is up or the cluster is laggy [ 1455.708949][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 1455.730734][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 1455.940860][ T5885] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1456.111268][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 1456.119377][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1456.142616][ T5885] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1456.165832][ T5885] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1456.189280][ T5885] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1456.201945][ T5885] usb 4-1: config 1 has no interface number 1 [ 1456.216949][ T5885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1456.231470][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.240030][ T5885] usb 4-1: Product: syz [ 1456.244776][ T5885] usb 4-1: Manufacturer: syz [ 1456.255046][ T5885] usb 4-1: SerialNumber: syz [ 1456.521837][ T5885] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1456.529365][ T5885] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1456.555047][ T5885] usb 4-1: USB disconnect, device number 32 [ 1457.346572][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1457.576915][T18046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2667'. [ 1458.111936][ T2148] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1458.979233][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 1458.985308][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 1458.991773][ T2148] usb 5-1: Using ep0 maxpacket: 8 [ 1459.003565][ T2148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1459.014121][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1459.023205][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1459.032524][ T2148] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1459.041750][ T2148] usb 5-1: config 1 has no interface number 1 [ 1459.053586][ T2148] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1459.062747][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.070918][ T2148] usb 5-1: Product: syz [ 1459.075149][ T2148] usb 5-1: Manufacturer: syz [ 1459.079732][ T2148] usb 5-1: SerialNumber: syz [ 1459.111173][T18061] ceph: No mds server is up or the cluster is laggy [ 1459.298687][ T2148] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1459.312172][ T2148] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1459.337029][ T2148] usb 5-1: USB disconnect, device number 36 [ 1459.562951][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1459.563418][T18078] loop3: detected capacity change from 0 to 512 [ 1459.610330][T18078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.627290][T18078] ext4 filesystem being mounted at /632/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.681096][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.740482][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1459.908808][T18086] loop4: detected capacity change from 0 to 2048 [ 1459.921294][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1460.150149][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1460.161824][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1460.174939][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1460.931274][ T25] usb 6-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 1460.940987][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.952727][T18095] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2683'. [ 1460.959472][ T25] usb 6-1: Product: syz [ 1460.967473][ T25] usb 6-1: Manufacturer: syz [ 1460.980465][ T25] usb 6-1: SerialNumber: syz [ 1461.137631][ T25] usb 6-1: config 0 descriptor?? [ 1461.214639][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 1461.221264][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 1461.281184][T18108] netlink: 'syz.7.2687': attribute type 6 has an invalid length. [ 1461.337602][T18110] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2688'. [ 1461.448900][ T25] radio-si470x 6-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 1461.483855][ T2148] libceph: connect (1)[c::]:6789 error -101 [ 1461.490171][ T2148] libceph: mon0 (1)[c::]:6789 connect error [ 1461.741369][T18101] ceph: No mds server is up or the cluster is laggy [ 1461.745458][T18122] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2691'. [ 1461.774491][ T25] radio-si470x 6-1:0.0: software version 98, hardware version 86 [ 1462.106792][T18121] loop4: detected capacity change from 0 to 2048 [ 1462.183628][ T25] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1462.207682][ T25] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 1462.227046][ T25] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1462.235680][ T25] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 1462.263822][ T25] usb 6-1: USB disconnect, device number 13 [ 1462.543074][T18129] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2696'. [ 1464.212438][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1464.455539][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1464.672389][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.798863][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1465.113702][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1465.123788][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1465.135801][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1465.177501][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1465.188964][ T25] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1465.198375][ T25] usb 4-1: Manufacturer: syz [ 1465.221639][ T25] usb 4-1: config 0 descriptor?? [ 1465.484387][ T25] rc_core: IR keymap rc-hauppauge not found [ 1465.490365][ T25] Registered IR keymap rc-empty [ 1465.500439][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1465.570306][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1465.606122][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1465.630318][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 1465.667411][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1465.819308][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1465.882739][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1465.941552][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.627394][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.658141][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.703324][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.722894][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.756482][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.789158][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.828558][ T25] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1466.844882][ T25] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1466.858342][ T25] usb 4-1: USB disconnect, device number 33 [ 1467.292148][T18174] netlink: 200 bytes leftover after parsing attributes in process `syz.8.2707'. [ 1467.342066][T18164] loop5: detected capacity change from 0 to 2048 [ 1467.577912][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2711'. [ 1467.589360][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1467.855414][T18176] ceph: No mds server is up or the cluster is laggy [ 1467.890070][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1468.188875][ T25] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1468.213209][ T25] usb 4-1: config 179 has no interface number 0 [ 1468.326081][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1468.343688][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1468.359664][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1468.398712][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1468.417805][ T25] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1468.480061][ T25] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1468.513563][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.539624][T18177] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1470.036916][ T8396] usb 4-1: USB disconnect, device number 34 [ 1470.036939][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1470.051468][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1470.141135][T18200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2714'. [ 1471.244109][T18214] loop4: detected capacity change from 0 to 2048 [ 1471.409374][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1471.580533][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1471.592286][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1471.616504][ T25] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1471.641087][ T25] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1471.663151][ T25] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1471.686185][ T25] usb 6-1: config 1 has no interface number 1 [ 1471.704389][ T8396] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1471.706291][ T25] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1471.747738][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.775858][ T25] usb 6-1: Product: syz [ 1471.781532][ T25] usb 6-1: Manufacturer: syz [ 1471.790081][ T25] usb 6-1: SerialNumber: syz [ 1471.875702][ T8396] usb 5-1: Using ep0 maxpacket: 32 [ 1471.886041][ T8396] usb 5-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 1471.916944][ T8396] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1471.936966][ T8396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.951943][ T8396] usb 5-1: Product: syz [ 1471.960912][ T8396] usb 5-1: Manufacturer: syz [ 1471.981879][ T8396] usb 5-1: SerialNumber: syz [ 1471.993623][ T8396] usb 5-1: config 0 descriptor?? [ 1472.010533][ T8396] cdc_ether 5-1:0.0: More than one union descriptor, skipping ... [ 1472.018501][ T8396] usb 5-1: bad CDC descriptors [ 1472.038990][ T8396] usb 5-1: unsupported MDLM descriptors [ 1472.115693][ T25] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1472.143936][ T25] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1472.215402][ T2148] usb 5-1: USB disconnect, device number 37 [ 1472.256001][ T25] usb 6-1: USB disconnect, device number 14 [ 1472.572619][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1472.666338][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1472.672726][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1472.979645][ T2148] libceph: connect (1)[c::]:6789 error -101 [ 1473.003842][ T2148] libceph: mon0 (1)[c::]:6789 connect error [ 1473.240313][T18226] ceph: No mds server is up or the cluster is laggy [ 1473.744954][T18237] loop7: detected capacity change from 0 to 256 [ 1473.834326][T18237] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1474.529147][ T8396] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1474.709239][ T8396] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1474.769380][ T8396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.941796][T18258] loop8: detected capacity change from 0 to 2048 [ 1475.046597][ T8396] usb 6-1: config 0 descriptor?? [ 1475.116183][ T8396] cp210x 6-1:0.0: cp210x converter detected [ 1475.359634][T18270] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2735'. [ 1475.405957][T18250] loop7: detected capacity change from 0 to 32768 [ 1475.440600][T18250] XFS (loop7): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1475.525865][T18250] XFS (loop7): Ending clean mount [ 1475.620840][ T8396] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1475.648521][ T8396] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1475.657636][T13662] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1475.686026][T14810] XFS (loop7): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1475.819861][T13662] usb 4-1: Using ep0 maxpacket: 32 [ 1475.842089][T13662] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1475.857748][T13662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.871041][T13662] usb 4-1: Product: syz [ 1475.883568][T13662] usb 4-1: Manufacturer: syz [ 1475.912184][T13662] usb 4-1: SerialNumber: syz [ 1475.924504][T13662] usb 4-1: config 0 descriptor?? [ 1476.414362][T13662] airspy 4-1:0.0: Board ID: 00 [ 1476.419203][T13662] airspy 4-1:0.0: Firmware version: [ 1476.627247][ T2148] usb 6-1: USB disconnect, device number 15 [ 1476.636813][ T2148] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1476.766344][ T2148] cp210x 6-1:0.0: device disconnected [ 1476.807783][T13662] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 1476.949357][T18282] ceph: No mds server is up or the cluster is laggy [ 1477.338827][T13662] airspy 4-1:0.0: Registered as swradio24 [ 1477.490230][T13662] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1477.607570][T13662] usb 4-1: USB disconnect, device number 35 [ 1477.861738][T18297] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2741'. [ 1479.158368][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1479.165908][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1479.426687][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1479.527572][T18317] ceph: No mds server is up or the cluster is laggy [ 1479.594009][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1480.070508][T18336] loop7: detected capacity change from 0 to 256 [ 1482.044201][T18351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2742'. [ 1482.351018][T18354] loop3: detected capacity change from 0 to 64 [ 1482.381912][T13653] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1482.399376][T18357] tun0: tun_chr_ioctl cmd 1074025681 [ 1482.563552][T13653] usb 6-1: Using ep0 maxpacket: 8 [ 1482.571608][T13653] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1482.616692][T13653] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1482.754326][T13653] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1482.776873][T13653] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1482.813375][T13653] usb 6-1: config 1 has no interface number 1 [ 1482.860833][T13653] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1482.911609][ T5840] hfs: node 4:3 still has 1 user(s)! [ 1482.954042][T13653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.984230][T13653] usb 6-1: Product: syz [ 1482.988705][T13653] usb 6-1: Manufacturer: syz [ 1482.994662][T13653] usb 6-1: SerialNumber: syz [ 1483.212096][T13653] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1483.221807][T13653] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1483.257297][T13653] usb 6-1: USB disconnect, device number 16 [ 1483.393449][T18367] ceph: No mds server is up or the cluster is laggy [ 1484.646307][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1484.677586][T18395] loop7: detected capacity change from 0 to 256 [ 1484.753566][ T29] audit: type=1800 audit(1734768199.464:374): pid=18395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2773" name="bus" dev="loop7" ino=1048784 res=0 errno=0 [ 1484.755477][T18395] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 202) [ 1484.805822][T18395] FAT-fs (loop7): Filesystem has been set read-only [ 1484.924793][T18401] loop8: detected capacity change from 0 to 512 [ 1485.005712][T18401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1485.033950][T18401] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.038318][T18406] loop3: detected capacity change from 0 to 2048 [ 1485.087801][T18406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1485.234741][T15091] EXT4-fs error (device loop8): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /182/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1486.936667][T18420] netlink: 'syz.5.2779': attribute type 1 has an invalid length. [ 1487.013405][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1487.282266][T18424] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2781'. [ 1487.808045][ T8396] libceph: connect (1)[c::]:6789 error -101 [ 1487.852190][ T8396] libceph: mon0 (1)[c::]:6789 connect error [ 1488.110021][ T8396] libceph: connect (1)[c::]:6789 error -101 [ 1488.129838][ T8396] libceph: mon0 (1)[c::]:6789 connect error [ 1488.175760][T18428] ceph: No mds server is up or the cluster is laggy [ 1489.501038][T18444] loop4: detected capacity change from 0 to 32768 [ 1489.908160][T18458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2787'. [ 1490.327081][T18468] veth1_to_hsr: entered allmulticast mode [ 1490.339649][T13662] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1490.489412][T13662] usb 6-1: Using ep0 maxpacket: 8 [ 1490.500222][T13662] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1490.519302][T13662] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1490.536783][T13662] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1490.545531][T13662] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1490.574855][T13662] usb 6-1: config 1 has no interface number 1 [ 1490.595814][T13662] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1490.614089][T13662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.622138][T13662] usb 6-1: Product: syz [ 1490.631479][T13662] usb 6-1: Manufacturer: syz [ 1490.636859][T13662] usb 6-1: SerialNumber: syz [ 1490.934939][T18469] ceph: No mds server is up or the cluster is laggy [ 1491.268247][T18480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2797'. [ 1492.616306][T18488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1493.710872][T18505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2805'. [ 1493.728923][ T8396] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1493.802453][T18507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1493.889540][ T8396] usb 5-1: Using ep0 maxpacket: 8 [ 1493.906719][ T8396] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1493.945574][ T8396] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1493.975108][ T8396] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1493.996645][ T8396] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1494.013723][ T8396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.032680][ T8396] usb 5-1: Product: syz [ 1494.037077][ T8396] usb 5-1: Manufacturer: syz [ 1494.041700][ T8396] usb 5-1: SerialNumber: syz [ 1494.667061][ T8396] usb 5-1: 0:2 : does not exist [ 1494.727646][ T5885] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1494.874925][ T8396] usb 5-1: USB disconnect, device number 38 [ 1494.920029][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.938167][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.985263][ T5885] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1494.999113][T13662] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1495.006762][T13662] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1495.016551][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.041285][ T5885] usb 4-1: config 0 descriptor?? [ 1495.054410][T13662] usb 6-1: USB disconnect, device number 17 [ 1495.303491][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1496.327070][ T5885] hid-led 0003:0FC5:B080.000D: probe with driver hid-led failed with error -71 [ 1496.577171][ T5885] usb 4-1: USB disconnect, device number 36 [ 1497.711046][ T2148] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1497.849428][T18539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.862354][ T2148] usb 5-1: Using ep0 maxpacket: 8 [ 1497.875830][ T2148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1497.898793][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1497.938140][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1497.946896][ T2148] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1497.995448][ T2148] usb 5-1: config 1 has no interface number 1 [ 1498.016935][ T2148] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1498.045788][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.068323][ T2148] usb 5-1: Product: syz [ 1498.090819][ T2148] usb 5-1: Manufacturer: syz [ 1498.095483][ T2148] usb 5-1: SerialNumber: syz [ 1498.197277][T18537] loop5: detected capacity change from 0 to 2048 [ 1498.336710][ T2148] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1498.366810][ T2148] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1498.414877][ T2148] usb 5-1: USB disconnect, device number 39 [ 1498.636567][T15350] udevd[15350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1498.715592][T18537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1499.884183][T10111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.972037][ C1] vkms_vblank_simulate: vblank timer overrun [ 1500.738729][T16927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.822751][T18573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1501.121602][T18575] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1501.302093][T18579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1501.318408][T18579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1501.339763][T18579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1501.370599][T18579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1501.383680][T18579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1501.393294][T18579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1501.418711][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1501.492793][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1501.500296][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1501.508479][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1501.521466][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1501.529822][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1501.554440][T18564] loop7: detected capacity change from 0 to 32768 [ 1501.592682][T18588] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1501.930105][T18564] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1502.102861][T18564] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1502.119732][ T2148] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1502.144217][T18576] lo speed is unknown, defaulting to 1000 [ 1502.190553][T18564] [ 1502.192927][T18564] ====================================================== [ 1502.199960][T18564] WARNING: possible circular locking dependency detected [ 1502.207098][T18564] 6.13.0-rc3-next-20241220-syzkaller #0 Not tainted [ 1502.213810][T18564] ------------------------------------------------------ [ 1502.220845][T18564] syz.7.2826/18564 is trying to acquire lock: [ 1502.226937][T18564] ffff88804d9a5100 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x132/0x2840 [ 1502.240486][T18564] [ 1502.240486][T18564] but task is already holding lock: [ 1502.247883][T18564] ffff88804845b120 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_extend_dir+0x7f4/0x53c0 [ 1502.258457][T18564] [ 1502.258457][T18564] which lock already depends on the new lock. [ 1502.258457][T18564] [ 1502.268879][T18564] [ 1502.268879][T18564] the existing dependency chain (in reverse order) is: [ 1502.278009][T18564] [ 1502.278009][T18564] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}: [ 1502.286830][T18564] lock_acquire+0x1ed/0x550 [ 1502.291870][T18564] down_write+0x99/0x220 [ 1502.296634][T18564] ocfs2_try_remove_refcount_tree+0xb6/0x330 [ 1502.303622][T18564] ocfs2_xattr_set+0xa4f/0x1930 [ 1502.309722][T18564] ocfs2_set_acl+0x4cb/0x580 [ 1502.314926][T18564] ocfs2_iop_set_acl+0x24a/0x3c0 [ 1502.320914][T18564] vfs_set_acl+0x7fd/0xa60 [ 1502.326040][T18564] filename_setxattr+0x325/0x430 [ 1502.331516][T18564] path_setxattrat+0x440/0x510 [ 1502.336809][T18564] __x64_sys_setxattr+0xbc/0xe0 [ 1502.342622][T18564] do_syscall_64+0xf3/0x230 [ 1502.347739][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.354151][T18564] [ 1502.354151][T18564] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}: [ 1502.361973][T18564] lock_acquire+0x1ed/0x550 [ 1502.366999][T18564] down_read+0xb1/0xa40 [ 1502.371675][T18564] ocfs2_init_acl+0x397/0x930 [ 1502.376896][T18564] ocfs2_mknod+0x1c05/0x2b30 [ 1502.382003][T18564] ocfs2_create+0x1ab/0x470 [ 1502.387026][T18564] path_openat+0x192f/0x3580 [ 1502.392294][T18564] do_filp_open+0x27f/0x4e0 [ 1502.397330][T18564] do_sys_openat2+0x13e/0x1d0 [ 1502.402534][T18564] __x64_sys_openat+0x247/0x2a0 [ 1502.407920][T18564] do_syscall_64+0xf3/0x230 [ 1502.413029][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.419448][T18564] [ 1502.419448][T18564] -> #3 (jbd2_handle){++++}-{0:0}: [ 1502.426774][T18564] lock_acquire+0x1ed/0x550 [ 1502.431792][T18564] start_this_handle+0x1eb4/0x2110 [ 1502.437429][T18564] jbd2__journal_start+0x2da/0x5d0 [ 1502.443053][T18564] jbd2_journal_start+0x29/0x40 [ 1502.448514][T18564] ocfs2_start_trans+0x3c9/0x700 [ 1502.453971][T18564] ocfs2_modify_bh+0xed/0x4d0 [ 1502.459171][T18564] ocfs2_local_read_info+0x158f/0x19f0 [ 1502.465142][T18564] dquot_load_quota_sb+0x762/0xbb0 [ 1502.470776][T18564] dquot_load_quota_inode+0x320/0x600 [ 1502.476744][T18564] ocfs2_enable_quotas+0x169/0x450 [ 1502.482372][T18564] ocfs2_fill_super+0x5adb/0x71f0 [ 1502.487942][T18564] get_tree_bdev_flags+0x48c/0x5c0 [ 1502.493767][T18564] vfs_get_tree+0x90/0x2b0 [ 1502.498751][T18564] do_new_mount+0x2be/0xb40 [ 1502.503815][T18564] __se_sys_mount+0x2d6/0x3c0 [ 1502.509058][T18564] do_syscall_64+0xf3/0x230 [ 1502.514174][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.520609][T18564] [ 1502.520609][T18564] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 1502.531510][T18564] lock_acquire+0x1ed/0x550 [ 1502.536660][T18564] down_read+0xb1/0xa40 [ 1502.541345][T18564] ocfs2_start_trans+0x3be/0x700 [ 1502.546982][T18564] ocfs2_modify_bh+0xed/0x4d0 [ 1502.552177][T18564] ocfs2_local_read_info+0x158f/0x19f0 [ 1502.558182][T18564] dquot_load_quota_sb+0x762/0xbb0 [ 1502.563850][T18564] dquot_load_quota_inode+0x320/0x600 [ 1502.569738][T18564] ocfs2_enable_quotas+0x169/0x450 [ 1502.575361][T18564] ocfs2_fill_super+0x5adb/0x71f0 [ 1502.580896][T18564] get_tree_bdev_flags+0x48c/0x5c0 [ 1502.586545][T18564] vfs_get_tree+0x90/0x2b0 [ 1502.591476][T18564] do_new_mount+0x2be/0xb40 [ 1502.596494][T18564] __se_sys_mount+0x2d6/0x3c0 [ 1502.601688][T18564] do_syscall_64+0xf3/0x230 [ 1502.606709][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.613120][T18564] [ 1502.613120][T18564] -> #1 (sb_internal#7){.+.+}-{0:0}: [ 1502.620601][T18564] lock_acquire+0x1ed/0x550 [ 1502.625625][T18564] ocfs2_start_trans+0x2b9/0x700 [ 1502.631081][T18564] ocfs2_mknod+0x150c/0x2b30 [ 1502.636196][T18564] ocfs2_create+0x1ab/0x470 [ 1502.641224][T18564] path_openat+0x192f/0x3580 [ 1502.646327][T18564] do_filp_open+0x27f/0x4e0 [ 1502.651375][T18564] do_sys_openat2+0x13e/0x1d0 [ 1502.656574][T18564] __x64_sys_openat+0x247/0x2a0 [ 1502.661937][T18564] do_syscall_64+0xf3/0x230 [ 1502.666964][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.673468][T18564] [ 1502.673468][T18564] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}: [ 1502.683992][T18564] validate_chain+0x18ef/0x5920 [ 1502.689377][T18564] __lock_acquire+0x1397/0x2100 [ 1502.694765][T18564] lock_acquire+0x1ed/0x550 [ 1502.699897][T18564] down_write+0x99/0x220 [ 1502.704663][T18564] ocfs2_reserve_local_alloc_bits+0x132/0x2840 [ 1502.711338][T18564] ocfs2_reserve_clusters_with_limit+0x1b8/0xb60 [ 1502.718278][T18564] ocfs2_extend_dir+0x8ab/0x53c0 [ 1502.723729][T18564] ocfs2_prepare_dir_for_insert+0x33b5/0x5c40 [ 1502.730569][T18564] ocfs2_mknod+0xcaf/0x2b30 [ 1502.735593][T18564] ocfs2_create+0x1ab/0x470 [ 1502.740716][T18564] vfs_create+0x23c/0x3d0 [ 1502.745562][T18564] do_mknodat+0x447/0x5b0 [ 1502.750403][T18564] __x64_sys_mknod+0x8c/0xa0 [ 1502.755532][T18564] do_syscall_64+0xf3/0x230 [ 1502.760565][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.766987][T18564] [ 1502.766987][T18564] other info that might help us debug this: [ 1502.766987][T18564] [ 1502.777213][T18564] Chain exists of: [ 1502.777213][T18564] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 1502.777213][T18564] [ 1502.794520][T18564] Possible unsafe locking scenario: [ 1502.794520][T18564] [ 1502.801979][T18564] CPU0 CPU1 [ 1502.807341][T18564] ---- ---- [ 1502.812721][T18564] lock(&ocfs2_file_ip_alloc_sem_key); [ 1502.819958][T18564] lock(&oi->ip_xattr_sem); [ 1502.827089][T18564] lock(&ocfs2_file_ip_alloc_sem_key); [ 1502.835152][T18564] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 1502.842437][T18564] [ 1502.842437][T18564] *** DEADLOCK *** [ 1502.842437][T18564] [ 1502.850570][T18564] 3 locks held by syz.7.2826/18564: [ 1502.856106][T18564] #0: ffff88802a1f0420 (sb_writers#38){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 1502.865792][T18564] #1: ffff88804845b480 (&type->i_mutex_dir_key#27/1){+.+.}-{4:4}, at: filename_create+0x260/0x540 [ 1502.877042][T18564] #2: ffff88804845b120 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_extend_dir+0x7f4/0x53c0 [ 1502.888004][T18564] [ 1502.888004][T18564] stack backtrace: [ 1502.894076][T18564] CPU: 1 UID: 0 PID: 18564 Comm: syz.7.2826 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 1502.894101][T18564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1502.894111][T18564] Call Trace: [ 1502.894116][T18564] [ 1502.894124][T18564] dump_stack_lvl+0x241/0x360 [ 1502.894144][T18564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1502.894159][T18564] ? __pfx__printk+0x10/0x10 [ 1502.894182][T18564] print_circular_bug+0x13a/0x1b0 [ 1502.894198][T18564] check_noncircular+0x36a/0x4a0 [ 1502.894213][T18564] ? __pfx_check_noncircular+0x10/0x10 [ 1502.894226][T18564] ? lockdep_lock+0x123/0x2b0 [ 1502.894244][T18564] ? mark_lock+0x9a/0x360 [ 1502.894262][T18564] validate_chain+0x18ef/0x5920 [ 1502.894288][T18564] ? __pfx_validate_chain+0x10/0x10 [ 1502.894306][T18564] ? __schedule+0x18a7/0x4c80 [ 1502.894325][T18564] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1502.894344][T18564] ? look_up_lock_class+0x77/0x170 [ 1502.894363][T18564] ? register_lock_class+0x102/0x980 [ 1502.894381][T18564] ? __pfx_register_lock_class+0x10/0x10 [ 1502.894403][T18564] ? __pfx_lock_release+0x10/0x10 [ 1502.894420][T18564] ? mark_lock+0x9a/0x360 [ 1502.894438][T18564] __lock_acquire+0x1397/0x2100 [ 1502.894460][T18564] lock_acquire+0x1ed/0x550 [ 1502.894476][T18564] ? ocfs2_reserve_local_alloc_bits+0x132/0x2840 [ 1502.894496][T18564] ? __pfx_lock_acquire+0x10/0x10 [ 1502.894513][T18564] ? __pfx___might_resched+0x10/0x10 [ 1502.894528][T18564] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 1502.894546][T18564] ? __pfx_validate_chain+0x10/0x10 [ 1502.894564][T18564] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1502.894582][T18564] down_write+0x99/0x220 [ 1502.894595][T18564] ? ocfs2_reserve_local_alloc_bits+0x132/0x2840 [ 1502.894611][T18564] ? __pfx_down_write+0x10/0x10 [ 1502.894628][T18564] ocfs2_reserve_local_alloc_bits+0x132/0x2840 [ 1502.894648][T18564] ? mark_lock+0x9a/0x360 [ 1502.894666][T18564] ? __lock_acquire+0x1397/0x2100 [ 1502.894684][T18564] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10 [ 1502.894706][T18564] ? __pfx_lock_acquire+0x10/0x10 [ 1502.894722][T18564] ? ocfs2_alloc_should_use_local+0x155/0x320 [ 1502.894738][T18564] ? __pfx_lock_release+0x10/0x10 [ 1502.894753][T18564] ? do_raw_spin_lock+0x14f/0x370 [ 1502.894770][T18564] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1502.894787][T18564] ? _raw_spin_unlock+0x28/0x50 [ 1502.894802][T18564] ? ocfs2_alloc_should_use_local+0x155/0x320 [ 1502.894818][T18564] ocfs2_reserve_clusters_with_limit+0x1b8/0xb60 [ 1502.894839][T18564] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10 [ 1502.894862][T18564] ? down_write+0x18c/0x220 [ 1502.894875][T18564] ? __pfx_down_write+0x10/0x10 [ 1502.894888][T18564] ? __pfx_validate_chain+0x10/0x10 [ 1502.894909][T18564] ocfs2_extend_dir+0x8ab/0x53c0 [ 1502.894929][T18564] ? validate_chain+0x11e/0x5920 [ 1502.894951][T18564] ? __pfx_ocfs2_extend_dir+0x10/0x10 [ 1502.894966][T18564] ? validate_chain+0x11e/0x5920 [ 1502.894985][T18564] ? validate_chain+0x11e/0x5920 [ 1502.895006][T18564] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 1502.895030][T18564] ? mark_lock+0x9a/0x360 [ 1502.895048][T18564] ? __lock_acquire+0x1397/0x2100 [ 1502.895073][T18564] ? __pfx_lock_acquire+0x10/0x10 [ 1502.895089][T18564] ? ocfs2_buffer_cached+0x3d3/0x830 [ 1502.895105][T18564] ? __pfx_lock_release+0x10/0x10 [ 1502.895121][T18564] ? do_raw_spin_lock+0x14f/0x370 [ 1502.895134][T18564] ? __lock_acquire+0x1397/0x2100 [ 1502.895156][T18564] ? ocfs2_read_blocks+0x11bc/0x1600 [ 1502.895168][T18564] ? ocfs2_buffer_cached+0x47e/0x830 [ 1502.895184][T18564] ? __pfx_lock_release+0x10/0x10 [ 1502.895202][T18564] ? ocfs2_set_buffer_uptodate+0xb5/0x1270 [ 1502.895221][T18564] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1502.895244][T18564] ocfs2_prepare_dir_for_insert+0x33b5/0x5c40 [ 1502.895263][T18564] ? __pfx_lock_release+0x10/0x10 [ 1502.895281][T18564] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 1502.895301][T18564] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 1502.895319][T18564] ? __pfx_ocfs2_prepare_dir_for_insert+0x10/0x10 [ 1502.895335][T18564] ? rcu_is_watching+0x15/0xb0 [ 1502.895348][T18564] ? ocfs2_search_dirblock+0x389/0x830 [ 1502.895363][T18564] ? ocfs2_set_buffer_uptodate+0xb5/0x1270 [ 1502.895380][T18564] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 1502.895404][T18564] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 1502.895418][T18564] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1502.895439][T18564] ? __brelse+0x59/0xa0 [ 1502.895459][T18564] ? ocfs2_find_entry+0x102f/0x2730 [ 1502.895472][T18564] ? rcu_is_watching+0x15/0xb0 [ 1502.895487][T18564] ? rcu_is_watching+0x15/0xb0 [ 1502.895500][T18564] ? ocfs2_read_blocks+0x1246/0x1600 [ 1502.895513][T18564] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 1502.895527][T18564] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 1502.895547][T18564] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 1502.895568][T18564] ? __pfx_lock_acquire+0x10/0x10 [ 1502.895584][T18564] ? ocfs2_inode_lock_full_nested+0x17b/0x1be0 [ 1502.895603][T18564] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 1502.895622][T18564] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 1502.895639][T18564] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1502.895656][T18564] ? ocfs2_inode_lock_full_nested+0xb29/0x1be0 [ 1502.895673][T18564] ? add_lock_to_list+0x1e8/0x2f0 [ 1502.895687][T18564] ? validate_chain+0x11e/0x5920 [ 1502.895705][T18564] ? __kernel_text_address+0xd/0x40 [ 1502.895724][T18564] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 1502.895742][T18564] ? __asan_memset+0x23/0x50 [ 1502.895759][T18564] ? ocfs2_check_dir_for_entry+0x2c9/0x490 [ 1502.895774][T18564] ? __pfx_ocfs2_check_dir_for_entry+0x10/0x10 [ 1502.895792][T18564] ? ocfs2_mknod+0x2c7/0x2b30 [ 1502.895827][T18564] ocfs2_mknod+0xcaf/0x2b30 [ 1502.895844][T18564] ? __pfx_validate_chain+0x10/0x10 [ 1502.895868][T18564] ? __pfx_ocfs2_mknod+0x10/0x10 [ 1502.895884][T18564] ? __lock_acquire+0x1397/0x2100 [ 1502.895906][T18564] ? __lock_acquire+0x1397/0x2100 [ 1502.895931][T18564] ? __pfx_lock_acquire+0x10/0x10 [ 1502.895948][T18564] ? ocfs2_inode_unlock_tracker+0x23e/0x2b0 [ 1502.895966][T18564] ? __pfx_lock_release+0x10/0x10 [ 1502.895981][T18564] ? do_raw_spin_lock+0x14f/0x370 [ 1502.895997][T18564] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1502.896015][T18564] ? put_pid+0xdf/0x120 [ 1502.896031][T18564] ? ocfs2_permission+0x103/0x1c0 [ 1502.896046][T18564] ? __pfx_ocfs2_permission+0x10/0x10 [ 1502.896063][T18564] ocfs2_create+0x1ab/0x470 [ 1502.896080][T18564] ? __pfx_ocfs2_create+0x10/0x10 [ 1502.896096][T18564] ? __pfx_ocfs2_permission+0x10/0x10 [ 1502.896111][T18564] ? bpf_lsm_inode_create+0x9/0x10 [ 1502.896129][T18564] ? security_inode_create+0xbe/0x340 [ 1502.896152][T18564] vfs_create+0x23c/0x3d0 [ 1502.896169][T18564] do_mknodat+0x447/0x5b0 [ 1502.896186][T18564] ? __pfx_do_mknodat+0x10/0x10 [ 1502.896202][T18564] ? getname_flags+0x1e3/0x540 [ 1502.896216][T18564] __x64_sys_mknod+0x8c/0xa0 [ 1502.896233][T18564] do_syscall_64+0xf3/0x230 [ 1502.896247][T18564] ? clear_bhb_loop+0x35/0x90 [ 1502.896266][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.896283][T18564] RIP: 0033:0x7fd75d785d29 [ 1502.896302][T18564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.896315][T18564] RSP: 002b:00007fd75e614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1502.896331][T18564] RAX: ffffffffffffffda RBX: 00007fd75d975fa0 RCX: 00007fd75d785d29 [ 1502.896342][T18564] RDX: 000000000000070f RSI: 0000000000000000 RDI: 0000000020000000 [ 1502.896351][T18564] RBP: 00007fd75d801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1502.896361][T18564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1502.896370][T18564] R13: 0000000000000000 R14: 00007fd75d975fa0 R15: 00007ffc0aad88b8 [ 1502.896385][T18564] [ 1502.896412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1503.641145][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1503.675035][T18579] Bluetooth: hci0: command tx timeout [ 1503.958051][T13753] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.065400][ T2148] usb 5-1: device not accepting address 40, error -71 [ 1504.409368][T13753] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.532068][T13753] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.548319][T17849] bridge0: port 3(syz_tun) entered disabled state [ 1504.560318][T17849] syz_tun (unregistering): left allmulticast mode [ 1504.566989][T17849] syz_tun (unregistering): left promiscuous mode [ 1504.574564][T17849] bridge0: port 3(syz_tun) entered disabled state [ 1504.605629][T13753] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.724172][T18564] ocfs2: Unmounting device (7,7) on (node local) [ 1504.770210][T13753] erspan0: left allmulticast mode [ 1504.775374][T13753] erspan0: left promiscuous mode [ 1504.782128][T13753] bridge0: port 3(erspan0) entered disabled state [ 1504.792443][T13753] bridge_slave_1: left allmulticast mode [ 1504.799035][T13753] bridge_slave_1: left promiscuous mode [ 1504.804835][T13753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.822930][T13753] bridge_slave_0: left allmulticast mode [ 1504.843988][T13753] bridge_slave_0: left promiscuous mode [ 1504.849788][T13753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.977648][T13753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.987798][T13753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.997403][T13753] bond0 (unregistering): Released all slaves [ 1505.455925][T13753] hsr_slave_0: left promiscuous mode [ 1505.481525][T13753] hsr_slave_1: left promiscuous mode [ 1505.492808][T13753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.500369][T13753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.521295][T13753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.529289][T13753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.543872][T13753] veth0_macvtap: left promiscuous mode [ 1505.549580][T13753] veth1_vlan: left promiscuous mode [ 1505.554882][T13753] veth0_vlan: left promiscuous mode [ 1505.793705][T13753] team0 (unregistering): Port device team_slave_1 removed [ 1505.805158][T13753] team0 (unregistering): Port device team_slave_0 removed [ 1506.259192][T13753] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.308351][T13753] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.356964][T13753] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.411272][T13753] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.524491][T13753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.538046][T13753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.547696][T13753] bond0 (unregistering): Released all slaves [ 1506.847613][T13753] hsr_slave_0: left promiscuous mode [ 1506.853472][T13753] hsr_slave_1: left promiscuous mode [ 1506.859465][T13753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1506.887388][T13753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1506.896074][T13753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1506.903955][T13753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1506.914409][T13753] veth0_macvtap: left promiscuous mode [ 1506.920927][T13753] veth1_vlan: left promiscuous mode [ 1506.926219][T13753] veth0_vlan: left promiscuous mode [ 1507.084283][T13753] veth1_to_hsr (unregistering): left allmulticast mode [ 1507.107405][T13753] team0 (unregistering): Port device team_slave_1 removed [ 1507.118397][T13753] team0 (unregistering): Port device team_slave_0 removed