last executing test programs: 9m19.742826575s ago: executing program 0 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f00000002c0)=0x10) shutdown(r3, 0x1) 9m17.989861049s ago: executing program 0 (id=79): syz_init_net_socket$llc(0x1a, 0x1, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x18, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x33c7, 0xe154, 0x0, 0x0, 0x12) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 9m16.324200368s ago: executing program 0 (id=82): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000002c0)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007102100000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800800034000000001040001800c00074000000000000000000900010073797a3000000000c4200380c812008008000340"], 0x219c}}, 0x0) 9m12.257941855s ago: executing program 0 (id=92): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) 9m11.750394077s ago: executing program 0 (id=95): socket$inet6(0xa, 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 9m9.870730392s ago: executing program 0 (id=100): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000040)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@dmask}, {@discard}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x500) accept4(r0, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 8m54.738668045s ago: executing program 32 (id=100): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000040)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@dmask}, {@discard}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL/T+Z1+x/mceb6fz/5Yz6z9rP287/Ne9t6YbzoOqtageuV6RAT/ErzwRxIAxAJAPwC4BgACACgdVzru/Hx2iUn/2kHYX+vh1CtdAbuSuP9ZG/c/a+P+Z23c/6yN+5+1cf+zNu5/1sb9Zywr2zg1/7W8Zd2N7///96vzhzP8/f9fJLPE6C9Wl7i+E0DMn03h/mdt3P//WsGf2Yn7n7Vx/7Oq2CtdAPsPwO//rCDbH85w/7M27j9jWdmVvv98pTeIZO3n4Eq//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ2n/GUKAC6Nr3RdjDHGGGOMMcYY++v4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/ZP7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFY1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiSjOl/If5b/9O/oCfj75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/TL4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufOnfYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi02PBjcERYIbg6LBTUGxoHjgghJBQnBzUDK4JSgV3BqUDm4LygS3B2WDckH5oEJwR1AxuDOoFNwVVA7uDqoEVYNqQfXgnqBGcG9QM7gvqBXcH9QOHgjqBA8GdYOHgnrBw0H94JGgQfBo0DB4LGgUNA6aBE2DZn/p+t6fyPuE66a76yTdQ/fUL+teurfuo/vqfvoV3V+/qgfo13SyHqgH6df1YP2GHqLf1EP1MD1cv6VH6JF6lB6tx+ixOkWP0+P123qCfkdP1JP0ZD1Fp+qpepp+V0/XM/RM/Z6epd/Xs/UcPVfP02n6Az1fL9Dp+kO9UH+kM/QivVgv0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Ta9XX+sd+hP9E69S+/Wn+o9+jO9V3+u9+kv9H79pc7UX+kD+mt9UH+jD+lv9WH9nT6ij+pj+nt9XP+gT+iT+pQ+rc/oH/VZ/ZM+p/35k/vzX+9GGWViTIyJNbEmh8lhcpqcJpfJZSImYuJMnMltcps8Jo/JZ/KZeBNvCpqC5jwyZAqZQiZqoqaIKWKKmqKmmClmnHEmwSSYkqakKWVKmdKmtCljypiypqwpb8qbO8wd5k5zp7nL3GXuNnebqqaqqW6qmxqmhqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWKamGammWlumpsWpoVpZVqZ1qa1aWPamESTaNqatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4mySSZnqan6WV6mT6mj+ln+pn+pr8ZYAaYZJNsBplBZrAZbIaYIWaoGWaGnz9RNSPNKDPajDFjTYpJMePNeDPBTDATzUQz2Uw2qSbVTDPTzHQz3cw0M80sM8vMNrPNXDPXpJk0M9/MN+km3Sw0C02GyTCLzWKz1Cw1y81ys9KsNKvNarMW1pr1Zr3ZaDaazWaz2Wq2mu1mu9lhdpidZqfZbXabPWaP2Wv2mn1mn9lv9ptMk2kOmAPmoDloDplD5rA5bI6YI+aYOWaOm+PmhDlhTplT5ozJe/H70ptYm93msFfZnPZqm8teY/8+zmfz23hbwBa02uaxeX8VG2ttUXuTLWaLW2dL2AR782/isracLW8r2DtsRXunrfSbuIa919a099la9n5b3d7zq7i2fcDWsY/auogAtrGtb5vaBvZR29A+ZhvZxraJbWpb26dsG/u0TbTP2Lb22d/E8+0Cu9KusqvtGrvT7rKn7Gl70H5jz9gfbTfb3fazr9j+9lU7wL5mk+3A38TD7Vt2hB1pR9nRdowd+5t4sp1iU+1UO82+a6fbGb+J0+wHdpZNt7PtHDvXzvs5Pl9Tuv3QLrQf2QwbwGK7xC61y+xyu+L/17rErrPr7Qa7w35iN9stdqvdZrdfOhG2u+xu+6ndYz+zB+zXdp/9wu63h2ym/ern+PzjO2S/tYftd/aIPWqP2e/tcfuD+jl3ZC8A+6P93v5kz1lvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCXyitGxclRCUqgm6kk3UKl6FYqTbdRGbqdylI5Kk8V6A6qSHdSJbqLKtPdVIWqUjWqTvdQDbqXatJ9VIvup9r0ANWhB6kuPUT16GGqT49QA3qUGtJj1IgaUxNqSs3ocWpOT1ALakmt6ElqTU9RG3qaEukZakvPUjv6G7Wn56gDPU8d6QXqRJ2pC71IXekl6kbdKYl6UE96mXpRb+pDfakfvUL96VUaQK9RMg2kQfQ6DaY3aAi9SUNpGA2nt2gEjaRRNJrG0FhKoXE0nt6mCfQOTaRJNJmmUCpNpWn0Lk2nGTST3qNZ9D7Npjk0l+ZRGn1A82kBpdOHtJA+ogxaRItpCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ0+ph30Ce2kXbSbPqU99Bntpc9pH31B++lLyqSv6AB9TQfpGzpE3/ru9B0doaN0jL6n4/QDnaCTdIpO0xn6kc7ST3SOPEGIoQhlqMIgjAmzhbFh9jBHeFWYM7w6zBVeE0bCa8O48Lowd3h9mCfMG+YL84fxYYGwYKhDE9qQwjAsFBYOo+ENYZHwxrBoiGGxsHjowhJhQnhzWDK8JSwV3hqWDm8Ly4S3h2XDcuGj91cI7wgrhneGlcK7wsrh3WGVsGpYLawe3hPWCO8Na4b3hbXC+8NS4QNhnfDBsG74UFgvfDisHz4SNggfDRuGj4WNwsZhk7Bp2Cx8PGwePhG2CFuGrcInw9bhU2Gb8OkwMXwmbBs++/P8Awv+eD4p7BH2DF8OXw69v0/Ojc6LpkU/iM6PLoimRz+MLox+FM2ILoouji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Iel89Gzh0wkmnXOBiXDYX67K7HO4ql9Nd7XK5a1zEXevi3HUut7ve5XF5XT6X38W7Aq6g084468iFrpAr7KLuBlfE3eiKuptcMVfcOVfCJbimrplr5pq7J1wL19K1ck+6J91T7in3tHvaPePaumddO/c319495zq4593z7gXXyXV2XdyLrqsbl+vCezLJ9XQ9XS/Xy/VxfVw/18/1d/3dADfAJbtkN8gNcoPdYDfEDXFD3VA33A13I9wIN8qNcmPcGJfiUtx4N95NcBPcRDfRTXaTXapLddPcNDfdTXcVZ1w4ymw32811c12aS3Pz3flzxnS30C10GS7DLXaL3VK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdDrfD7fTXXFjU7XF73V63z+1z+92XLtN95Q64r91B94075L51h9137og76o65791x94M74U66U+60O+N+dGfdT+6c8y4lMi4yPvJ2ZELkncjEyKTI5MiUSGpkamRa5N3I9MiMyMzIe5FZkfcjsyNzInMj8yJpkQ8i8yMLIumRDyMLIx9FMiKLIosjSyJLI8si3hfYHPpCvrCP+ht8EX+jL+pv8sV8ce98CZ/gb/Yl/S2+lL/Vl/a3+TL+dl/Wl/Pl/WO+kW/sm/imvpl/3Df3T/gWvqVv5Z/0rf1Tvo1/2if6Z3xb/6xv5//m2/vnfAf/vO/oX/CdfGffxb/ou/qXfDff3Sf5Hr6nf9n38r19H9/X9/Ov+P7+VT/Av+aT/UA/yL/uB/s3/BD/ph/qh/nhMW/5EZcukWGsT/Hj/Hj/tp/g3/ET/SQ/2U/xqX6qn+bf9dP9DD/Tv+dn+ff9bD/Hz/XzfJr/wM/3C3y6/9Av9B/5DL/o0k1lv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nr/df+x3+E/8Tr/L7/af+j3+M7/Xf+73+S/8fv+lz/Rf+QP+a3/Qf+MP+W/9Yf+dP+KP+mP+e3/c/+BP+JP+lD/tz/gf/Vn/kz/H/2eNMcYYY+xPGXd5KH49c+F2fo/fyRG/2LknAFy9JX/mL+fPn1GuzXNh3FvEt44AwDPdOz58aatSJSkp6eK+GRKCwnMALv1N0HkxcDleBK3gKUiEllDyd+vvLTqfoX+wfvQ2gBy/yImFy/Hl9T8HwKTfWf/xJ4fPLxOeivsf1p8DULTw5ZzscDleBK1+vr/SEkr9Qf15m/+y/tjfrp/9ixSAFr/IyQmX48v1J8AT8Cwk/mpPxhhjjDHGGGPsgt6ifPtL15+X/sXn712fx6vLOdngcvyPrs8ZY4wxxhhjjDF25T3XucvTjycmtmz/zw8q/a+y/vSgIfxfrcyD3x14D3DpJwoA/sUFAc4P5L/zUWz6txwr+eJb5++nlp72AfxntPKvGFzhDybGGGOMMcbYX+7ySf+vf66uVEGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlgW9O/4dWJX+jEyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9r/CwAA///UxgMC") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x500) accept4(r0, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 4m26.145491815s ago: executing program 4 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001300)={0x4, &(0x7f00000012c0)=[{0x4, 0x18, 0x5, 0xcab}, {0x4, 0x5, 0x4, 0x6}, {0x6, 0x7, 0xad, 0x1}, {0xc8, 0x80, 0x3e, 0x336}]}) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) 4m24.224945747s ago: executing program 4 (id=705): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper}) fanotify_init(0xa00, 0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 4m21.66329599s ago: executing program 4 (id=708): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x5) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m19.828675564s ago: executing program 4 (id=715): socket$kcm(0x10, 0x2, 0x0) r0 = mq_open(&(0x7f0000002200)='\xd6\xe3\xfa,u\xd9+\xd3\x98k\x12Ok\x0eK\xba+\x02', 0x80, 0x8, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xffdffffe) r3 = eventfd(0x6) dup3(r0, r3, 0x80000) mq_timedsend(r0, &(0x7f0000002140)="c825841c23f03133141b6109a726959ec284bf927ed46cac853f1eaa4b43738cf9e36635580100af2c8acbe5debc5bb376981eb6682f3ad324dbb8c91d4ff54ef50efb577e6e2e9277986bfc7ec987039b47027e4b", 0x55, 0x8, &(0x7f00000021c0)={0x77359400}) 4m18.47484314s ago: executing program 4 (id=718): syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004000000000000c9100000000000000000000068"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}}, 0x4000000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffc4) creat(0x0, 0x0) userfaultfd(0x801) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) 4m15.80417377s ago: executing program 4 (id=723): r0 = socket$inet6(0xa, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) 3m58.683702641s ago: executing program 33 (id=723): r0 = socket$inet6(0xa, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) 1m47.225303229s ago: executing program 5 (id=1054): syz_emit_ethernet(0x7b, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}, "a8"}}}}}, 0x0) 1m45.622865698s ago: executing program 5 (id=1056): socket$nl_generic(0x10, 0x3, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) inotify_init1(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc, 0xb7, 0x68, 0x40, 0x45e, 0x283, 0x990b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5c, 0x29, 0x1d}}]}}]}}, 0x0) memfd_secret(0x80000) epoll_create1(0x0) io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0x750f, 0x8, 0x100003}) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffd}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m40.747186058s ago: executing program 5 (id=1064): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r5, 0xc6c3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="3d62a41f3d8d525df6d6040000000900"/30, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0500000003000000040000000900"/28], 0x50) syz_emit_ethernet(0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000069b34786cab1a149e388ca20c79eda28"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004440), 0x200201, 0x0) fcntl$notify(r5, 0x406, 0x39) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 1m39.110192565s ago: executing program 5 (id=1067): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000120000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r5, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 1m37.675191188s ago: executing program 5 (id=1070): syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004000000000000c9100000000000000000000068"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x30}}, 0x4000000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(0x0, 0xee00, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffc4) creat(0x0, 0x0) userfaultfd(0x801) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) 1m28.483713723s ago: executing program 5 (id=1086): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.146344435s ago: executing program 34 (id=1086): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.781061877s ago: executing program 6 (id=1235): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace(0x4208, r0) tkill(r0, 0x12) 22.200674449s ago: executing program 6 (id=1239): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000200001c0012800b00010067656e65766500000c000280060005004e230000080040"], 0x44}}, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 18.740409124s ago: executing program 6 (id=1246): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r7, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40804}, 0x0) 14.167788559s ago: executing program 6 (id=1257): syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) 12.459331062s ago: executing program 8 (id=1261): sendmsg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) io_setup(0x800, &(0x7f0000000040)) 10.786826255s ago: executing program 2 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x48000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) ftruncate(r2, 0x40001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffdbd) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) dup3(r4, r3, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 10.505147189s ago: executing program 8 (id=1267): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 9.718793459s ago: executing program 6 (id=1269): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r7, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40804}, 0x0) 9.623022863s ago: executing program 2 (id=1271): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000120000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r5, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 9.414763026s ago: executing program 8 (id=1272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000200001c0012800b00010067656e65766500000c000280060005004e2300"], 0x44}}, 0x0) 8.588371252s ago: executing program 8 (id=1277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 6.778732047s ago: executing program 6 (id=1281): syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) 6.712011274s ago: executing program 8 (id=1282): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c7072656665727265645f736c6f743d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00b83578110c8182871d1a888ab910bda6ed5eb8d85850b69e5f00a4b2822944f8a40011442cbdd903ae8f5dbd229f91fe1093b9e1d8042b3023b0ec8f09897497044a104701d3013512e0487b6bd6650f232292d8b0155a94728bba1a8248fed123795bcc184683b33d0d5f4455ea61c1cb567c01edd33f14c229437ce876bf88798ec1e2f28b87b591031c3d50710d9cc51b760aff0105a5c3772f54bdf7395bb2bb7b4a0323ca"], 0x1, 0x4440, &(0x7f00000088c0)="$eJzs3b9vHFkdAPA3Y4fYIQE7pAgSEisRCQTIslMFHAnHceLYiQkKJEI0m7W9SQxrb2SvEUUK00WiQqJAFBFIdK4iF7ThT6ChzNWR7opr7nRSdD7tzqy9M96V96xd+5L7fIqdnfdrnvc78+ZNMX5xqvZkZaOwslEorRWqS482Lhf+WK1srpZDfEzaHv/U8R2f7vTjPDnpc+/r7O71m79+cDmE/y7//83u7u5uqBsMbU20fP/k42dLrdumOFen3m425Vb7xo/sdyGECwf6VTcQQvjtf0KIQgjX0rTpdDscQjgXkrwHz/7ysNCj3rx8Xb5afLvwfGfy0vz2i503HQtGIfyj8t2fPl798AcDkx/8uEeHBwAAAAAAAAAAAAAAAADgHTd77+79X41PhFdRGNyODr6vO5tuO70fu9sz3+//HwsAAAAAAAAAAAAAAAAAAABfUfvv/xei823e/59Jt1Md6u/+ov99pH/mfnl35sb4RLr+e3Qg/0qa9NG1gTDaZt33/Prv13L1D67/HtJV13vjShRlVqsfCVE81tKPkRDHY2Mh/Ctd+P1idCauVDdqP3lU3Vxb7lk33lnZ+Cer92eiky7o3238p3Ptt49/L33nwNlU33/Yu1PsvZaN/0DHcv/+c9RV/K/n6h1H/Dm6bPyToXS4tcBUMgDU4//XwcPjP5Nrvz/xP7X3bTgUMiNAfQ5TiDrPV8jKxj/5XTNDZ/pDdrr+P8vF/0au/ZMa/7fyNyLaysb/G420oUyJ/et/ND78+r+Za/8k4l/v/5b7f1ey8T+dJGZm1MnP2+34P5trvyX+n/ay3/fjtJ/fijJnwHaUpHf6f3VkZeM/dCB///kv7mr+dytXv//Pf9njNp//msP/j6Lk+Y/2svEf7liu2+t/Llev3+P/VGP+x1Fl43+mkdacOyd3/pHGZ7fxn8+136/4N/o21Iz//njy+ekk/Z/mf13Jxv+bSWLcWmKr8dmY/0WHz/9v59o/iflfvf9bcX+P+r7Ixv9sx3L1+P+vi/v/nVy9/sc/hHFz/SPLxv9cx3KN63/o8Pgv5Or1O/4/7GfjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+A6XQ7EqJ4LLMfx2NjIVxP9y+GM9Fiabm4WKku/WEjhJk0vRDOR48r1cVSpbiyVl0uF0uVSnUphBtp/oUwFG1UqrXiaunpzb22hqMn5dJ6bbFcqoUQZtP074VzzbYWV2qrpachhFt7ed+Oq+tPn5TWissr6z8fHx8fD3N7fRiNyn+qlddqydGT3BDm9+qORC2da2Tf3uvL2ej31c31tVKlkX6npU6lulSqtNRZSPP+Fkaj2vrm2lKpVi5Wqo+bxztJU+l2Zu7eb+7dmTiQ/zBKttPH2y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvqRXkz/7ewhhMNmLQwhTzS9Ru/IvX5evFt8uPN+ZvDS//WLnzanj7S4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBfswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYZf+URoIojgAvxkL/1Qew2rZ7WxXFNHCFcET6DE8jB7FS3gHCwtbCwkkMyRsspAmKcL3NY/dHzPvwTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgINz+zQ8P7ZdRIqT/+OIz9ev79X8vtT3q83nj/YwI7tz9zBc37Rdefe0ll+WXz99nqd/v28vsaxn9bv6GO3JeJ8Wap/Tybmm9m1qvtr3PFJuIqIv+UXKuWm2uwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA///+NR/5") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0xb36, 0x800, 0x1}) 5.632870588s ago: executing program 3 (id=1285): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.593084952s ago: executing program 2 (id=1286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfbfffffa}]}}) 5.453430169s ago: executing program 1 (id=1287): socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x4e22, 0xe22, 0x8}}}}}}, 0x0) 5.066928026s ago: executing program 3 (id=1289): prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) 4.482964525s ago: executing program 1 (id=1290): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x20100000, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.189838602s ago: executing program 2 (id=1291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.991335476s ago: executing program 7 (id=1292): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x65}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.918347715s ago: executing program 3 (id=1293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r1, &(0x7f0000010140)={0x2020}, 0x2036) 2.786920176s ago: executing program 1 (id=1294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r8, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40804}, 0x0) 2.632127712s ago: executing program 7 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8001, {0x9, 0x3, 0x7, 0x0, 0x0, 0xffffffff, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc000, 0x8, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f00000000c0)={0x50, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3}}}}) 2.120699641s ago: executing program 3 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.062143326s ago: executing program 7 (id=1297): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xc, 0x6, 0x0, 0x861}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.830869759s ago: executing program 8 (id=1298): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000120000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r5, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 1.720569054s ago: executing program 1 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x48000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) ftruncate(r2, 0x40001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffdbd) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) dup3(r4, r3, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.570424939s ago: executing program 2 (id=1300): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000200001c0012800b00010067656e65766500000c000280060005004e230000080040"], 0x44}}, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 852.214128ms ago: executing program 7 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 416.447963ms ago: executing program 3 (id=1302): socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x4e22, 0xe22, 0x8}}}}}}, 0x0) 416.166065ms ago: executing program 7 (id=1303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 415.979215ms ago: executing program 1 (id=1304): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfbfffffa}]}}) 156.613837ms ago: executing program 2 (id=1305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, r1, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 125.49817ms ago: executing program 3 (id=1306): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_adjtime(0x0, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x202040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 111.845391ms ago: executing program 1 (id=1307): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400"], 0x15) r4 = dup(r0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x8000000000000}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) 0s ago: executing program 7 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)='P', 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000005c0)={r5, &(0x7f0000000400)='P', 0x0}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x210, 0x210, 0x138, 0x0, 0x210, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) kernel console output (not intermixed with test programs): peed USB device number 6 using dummy_hcd [ 240.023910][ T25] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 240.054010][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.077080][ T25] usb 4-1: Product: syz [ 240.090232][ T25] usb 4-1: Manufacturer: syz [ 240.127665][ T25] usb 4-1: SerialNumber: syz [ 240.174875][ T25] usb 4-1: config 0 descriptor?? [ 240.300242][ T25] usb 4-1: selecting invalid altsetting 3 [ 240.335065][ T25] comedi comedi0: could not set alternate setting 3 in high speed [ 240.342961][ T25] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 240.616365][ T25] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 242.453869][ T5890] usb 4-1: USB disconnect, device number 6 [ 250.551441][ T7057] netlink: 'syz.6.298': attribute type 10 has an invalid length. [ 250.573654][ T7057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.601997][ T7063] overlayfs: invalid redirect ((null)) [ 250.623287][ T7057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.681720][ T7057] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 253.747144][ T7076] netlink: 4796 bytes leftover after parsing attributes in process `syz.2.305'. [ 254.023548][ T7076] netlink: 4796 bytes leftover after parsing attributes in process `syz.2.305'. [ 258.975152][ T7119] overlayfs: invalid redirect ((null)) [ 259.015318][ T7125] netlink: 188 bytes leftover after parsing attributes in process `syz.5.316'. [ 260.455327][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.462175][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.333594][ T5893] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 262.526420][ T5893] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.574536][ T5893] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 262.640964][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.663713][ T5893] usb 5-1: Product: syz [ 262.668117][ T5893] usb 5-1: Manufacturer: syz [ 262.673032][ T5893] usb 5-1: SerialNumber: syz [ 262.953957][ T5893] usb 5-1: config 0 descriptor?? [ 264.592635][ T7169] overlayfs: invalid redirect ((null)) [ 265.794783][ T5892] usb 5-1: USB disconnect, device number 6 [ 268.823997][ T7204] overlayfs: invalid redirect ((null)) [ 268.839455][ T7203] loop6: detected capacity change from 0 to 1764 [ 268.956919][ T7203] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 270.381284][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.344'. [ 272.710721][ T7250] overlayfs: invalid redirect ((null)) [ 274.333608][ T5893] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 274.342601][ T7257] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 274.637205][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.691906][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.746539][ T5893] usb 3-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 274.812161][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.847113][ T7269] ======================================================= [ 274.847113][ T7269] WARNING: The mand mount option has been deprecated and [ 274.847113][ T7269] and is ignored by this kernel. Remove the mand [ 274.847113][ T7269] option from the mount to silence this warning. [ 274.847113][ T7269] ======================================================= [ 274.885505][ T5893] usb 3-1: config 0 descriptor?? [ 275.336775][ T7272] loop6: detected capacity change from 0 to 32768 [ 275.454722][ T7272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.364 (7272) [ 275.499482][ T7272] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 275.509895][ T7272] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 275.518478][ T7272] BTRFS info (device loop6): using free-space-tree [ 275.566624][ T5893] wacom 0003:056A:0090.0001: hidraw0: USB HID v40.00 Device [HID 056a:0090] on usb-dummy_hcd.2-1/input0 [ 275.694919][ T25] usb 3-1: USB disconnect, device number 6 [ 275.899928][ T7289] loop4: detected capacity change from 0 to 2048 [ 276.084305][ T7289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.007373][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.387798][ T6456] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 277.398734][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 277.452781][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 277.467553][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 277.475042][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 277.482162][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 277.495958][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 278.789778][ T7316] overlayfs: invalid redirect ((null)) [ 279.145918][ T7320] loop2: detected capacity change from 0 to 1024 [ 279.327823][ T7320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.606802][ T7329] netlink: 'syz.6.369': attribute type 21 has an invalid length. [ 279.623779][ T7329] netlink: 164 bytes leftover after parsing attributes in process `syz.6.369'. [ 279.853918][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 280.134815][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.475021][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 280.655817][ T9] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 280.687603][ T9] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 280.725636][ T9] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 280.763641][ T9] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 280.803438][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 280.852996][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.716307][ T7335] loop6: detected capacity change from 0 to 512 [ 281.758820][ T7340] loop2: detected capacity change from 0 to 1024 [ 281.766787][ T7335] EXT4-fs: inline encryption not supported [ 281.845255][ T7335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.867906][ T7335] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.055107][ T7346] input: syz1 as /devices/virtual/input/input8 [ 282.418895][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c761800: rx timeout, send abort [ 282.427363][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c762400: rx timeout, send abort [ 282.436141][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c761800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 282.450652][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c762400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 282.875984][ T9] ath6kl: Failed to submit usb control message: -71 [ 282.889667][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 282.914124][ T9] ath6kl: Unable to send get target info: -71 [ 284.067373][ T5140] Bluetooth: hci6: command 0x0406 tx timeout [ 284.095367][ T9] ath6kl: Failed to init ath6kl core: -71 [ 284.102652][ T9] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 284.203699][ T9] usb 7-1: USB disconnect, device number 3 [ 284.278293][ T7349] hfsplus: xattr search failed [ 285.263125][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.298403][ T5847] hfsplus: node 4:3 still has 1 user(s)! [ 287.227097][ T7380] netlink: 188 bytes leftover after parsing attributes in process `syz.5.392'. [ 287.366008][ T7382] 9pnet_virtio: no channels available for device syz [ 288.558347][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.396'. [ 288.733917][ T7361] loop4: detected capacity change from 0 to 32768 [ 288.780368][ T7361] XFS: attr2 mount option is deprecated. [ 288.956008][ T7361] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop4": -EINTR [ 290.272960][ T7387] loop5: detected capacity change from 0 to 32768 [ 290.276142][ T7401] loop4: detected capacity change from 0 to 1024 [ 290.363609][ T7387] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.394 (7387) [ 290.583244][ T7401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.600061][ T7401] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.610799][ T7387] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.653510][ T7387] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 290.662033][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e796c00: rx timeout, send abort [ 290.662206][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e795c00: rx timeout, send abort [ 290.670701][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e796c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.670853][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e795c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.730797][ T7387] BTRFS info (device loop5): disk space caching is enabled [ 290.761369][ T7387] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 290.833397][ T7387] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 290.835797][ T7387] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 290.869939][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.884316][ T7387] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 290.892353][ T7387] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 290.912986][ T7387] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 290.931261][ T7387] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 290.959167][ T7387] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 291.000516][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 291.222634][ T7387] BTRFS error (device loop5): open_ctree failed: -12 [ 291.335792][ T25] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 291.402737][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.473401][ T25] usb 4-1: Product: syz [ 291.477756][ T25] usb 4-1: Manufacturer: syz [ 291.482386][ T25] usb 4-1: SerialNumber: syz [ 291.554865][ T25] usb 4-1: config 0 descriptor?? [ 291.617112][ T25] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 007 [ 292.537476][ T25] (null): failure reading functionality [ 292.598282][ T25] i2c i2c-1: failure reading functionality [ 293.202595][ T7445] loop1: detected capacity change from 0 to 2048 [ 293.672392][ T5203] loop1: p1 < > p4 [ 293.748317][ T5203] loop1: p4 size 8388608 extends beyond EOD, truncated [ 293.786059][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 293.814021][ T25] usb 4-1: USB disconnect, device number 7 [ 295.146330][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 295.275448][ T7348] udevd[7348]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 295.536018][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 296.719607][ T7452] loop4: detected capacity change from 0 to 32768 [ 297.012751][ T7452] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 297.016536][ T7452] (syz.4.411,7452,1):ocfs2_initialize_super:2226 ERROR: status = -12 [ 297.444562][ T7452] (syz.4.411,7452,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 297.647950][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f17c00: rx timeout, send abort [ 297.656369][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f16400: rx timeout, send abort [ 297.664891][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058f17c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 297.679351][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058f16400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.111994][ T7494] input: syz0 as /devices/virtual/input/input9 [ 303.430393][ T7504] loop2: detected capacity change from 0 to 512 [ 303.584611][ T7504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 303.667770][ T7504] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.143623][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 304.396396][ T25] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 304.436209][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.520466][ T25] usb 2-1: Product: syz [ 304.531016][ T25] usb 2-1: Manufacturer: syz [ 304.558083][ T25] usb 2-1: SerialNumber: syz [ 304.609139][ T25] usb 2-1: config 0 descriptor?? [ 304.636954][ T25] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002 [ 304.822883][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 304.981473][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 305.026590][ T7522] loop5: detected capacity change from 0 to 128 [ 305.051415][ T7522] EXT4-fs: Ignoring removed nobh option [ 305.060945][ T7524] loop2: detected capacity change from 0 to 128 [ 305.086491][ T25] (null): failure reading functionality [ 305.106013][ T7522] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.120275][ T25] i2c i2c-1: failure reading functionality [ 305.143590][ T7522] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.184333][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 305.210619][ T25] usb 2-1: USB disconnect, device number 2 [ 305.248910][ T29] audit: type=1800 audit(1738275392.063:3): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.433" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 305.456000][ T5838] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.728342][ T7553] loop3: detected capacity change from 0 to 512 [ 307.938230][ T7553] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 307.991647][ T7553] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 308.002534][ T7553] EXT4-fs error (device loop3): ext4_acquire_dquot:6925: comm syz.3.441: Failed to acquire dquot type 1 [ 308.063686][ T7560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.443'. [ 308.083027][ T7553] EXT4-fs (loop3): 1 truncate cleaned up [ 308.093619][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.115626][ T7560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.443'. [ 308.133734][ T7553] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.094348][ T7572] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 309.104935][ T7572] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 309.114972][ T7572] EXT4-fs error (device loop3): ext4_acquire_dquot:6925: comm syz.3.441: Failed to acquire dquot type 1 [ 310.384755][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.753459][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 310.929210][ T9] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 310.973821][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.035336][ T9] usb 7-1: Product: syz [ 311.064476][ T9] usb 7-1: Manufacturer: syz [ 311.092957][ T9] usb 7-1: SerialNumber: syz [ 311.165331][ T9] usb 7-1: config 0 descriptor?? [ 311.234790][ T9] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 004 [ 311.877628][ T9] (null): failure reading functionality [ 311.896618][ T9] i2c i2c-1: failure reading functionality [ 312.055394][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 312.433816][ T5890] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 312.442945][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.573033][ T5890] usb 4-1: Product: syz [ 312.604479][ T5890] usb 4-1: Manufacturer: syz [ 312.609118][ T5890] usb 4-1: SerialNumber: syz [ 312.734998][ T7597] loop2: detected capacity change from 0 to 1024 [ 312.764888][ T5890] usb 4-1: config 0 descriptor?? [ 312.894771][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 312.992637][ T9] usb 7-1: USB disconnect, device number 4 [ 313.109655][ T7597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.179205][ T5890] usb 4-1: USB disconnect, device number 8 [ 313.855680][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.935391][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.118466][ T7616] hugetlbfs: syz.1.459 (7616): Using mlock ulimits for SHM_HUGETLB is obsolete [ 314.338211][ T7623] loop3: detected capacity change from 0 to 256 [ 314.394447][ T7623] exfat: Unknown parameter 'ÞÿÿNýO’åúŸ!à?Ú!ýÿO£ÿ¥£¥ÿ›ô?c“þglÒÿŒ' [ 318.813491][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 319.473532][ T29] audit: type=1326 audit(1738275406.203:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ab8cda9 code=0x7ffc0000 [ 320.112860][ T29] audit: type=1326 audit(1738275406.203:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ab8cda9 code=0x7ffc0000 [ 320.277334][ T5893] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 320.293502][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.301571][ T5893] usb 2-1: Product: syz [ 320.323868][ T5893] usb 2-1: Manufacturer: syz [ 320.328591][ T5893] usb 2-1: SerialNumber: syz [ 320.394049][ T5893] usb 2-1: config 0 descriptor?? [ 320.633525][ T7668] loop3: detected capacity change from 0 to 32768 [ 320.696351][ T5893] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 003 [ 320.705948][ T7668] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.473 (7668) [ 320.731335][ T7668] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 320.740238][ T5893] (null): failure setting delay to 10us [ 320.744466][ T7668] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 320.758447][ T7668] BTRFS info (device loop3): using free-space-tree [ 320.788301][ T5893] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 320.891013][ T5893] usb 2-1: USB disconnect, device number 3 [ 322.105259][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.111675][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.609306][ T5840] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 325.446060][ T51] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 325.705775][ T51] usb 7-1: Using ep0 maxpacket: 32 [ 325.718510][ T51] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 325.738015][ T51] usb 7-1: config 0 has no interface number 0 [ 325.757949][ T51] usb 7-1: config 0 interface 184 has no altsetting 0 [ 325.787756][ T51] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 325.831257][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.858303][ T51] usb 7-1: Product: syz [ 325.883386][ T51] usb 7-1: Manufacturer: syz [ 325.923394][ T29] audit: type=1326 audit(1738275412.733:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 325.939975][ T51] usb 7-1: SerialNumber: syz [ 325.997699][ T51] usb 7-1: config 0 descriptor?? [ 326.021796][ T29] audit: type=1326 audit(1738275412.743:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 326.029422][ T51] smsc75xx v1.0.0 [ 326.127226][ T29] audit: type=1326 audit(1738275412.743:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 326.167148][ T29] audit: type=1326 audit(1738275412.743:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 326.190571][ T29] audit: type=1326 audit(1738275412.743:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 326.213048][ T29] audit: type=1326 audit(1738275412.773:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 326.246425][ T29] audit: type=1326 audit(1738275412.773:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 326.269493][ T29] audit: type=1326 audit(1738275412.773:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 326.541799][ T29] audit: type=1326 audit(1738275412.773:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 326.569389][ T7726] syz.3.480 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 326.716394][ T51] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 326.731428][ T51] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 326.797512][ T29] audit: type=1326 audit(1738275412.773:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d178cda9 code=0x7ffc0000 [ 327.003530][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 327.156640][ T51] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 327.184621][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 327.207513][ T51] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 327.218006][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.241818][ T9] usb 2-1: Product: syz [ 327.247015][ T51] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 327.260656][ T9] usb 2-1: Manufacturer: syz [ 327.292233][ T51] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 327.606958][ T7738] loop5: detected capacity change from 0 to 32768 [ 327.623016][ T51] usb 7-1: USB disconnect, device number 5 [ 327.627277][ T7738] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.492 (7738) [ 327.651856][ T9] usb 2-1: SerialNumber: syz [ 327.765401][ T9] usb 2-1: config 0 descriptor?? [ 327.829553][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 004 [ 328.213691][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 328.290208][ T9] (null): failure reading functionality [ 328.323895][ T7738] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 328.334234][ T7738] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 328.342711][ T7738] BTRFS info (device loop5): using free-space-tree [ 328.412800][ T9] i2c i2c-1: failure reading functionality [ 328.423518][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 328.435687][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 328.448467][ T5914] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 328.460459][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.489357][ T5914] usb 5-1: Product: syz [ 328.494323][ T5914] usb 5-1: Manufacturer: syz [ 328.502157][ T5914] usb 5-1: SerialNumber: syz [ 328.517311][ T9] usb 2-1: USB disconnect, device number 4 [ 328.540124][ T5914] usb 5-1: config 0 descriptor?? [ 328.625177][ T5914] gspca_main: sq930x-2.14.0 probing 2770:930c [ 328.983999][ T5838] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.097531][ T51] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 330.913750][ T5914] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 330.924235][ T51] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 330.959364][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.996597][ T51] usb 7-1: Product: syz [ 331.003940][ T51] usb 7-1: Manufacturer: syz [ 331.008590][ T51] usb 7-1: SerialNumber: syz [ 331.252044][ T51] usb 7-1: config 0 descriptor?? [ 332.241779][ T5914] gspca_sq930x: Sensor ov9630 not yet treated [ 333.304534][ T5914] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 333.880181][ T5914] usb 5-1: USB disconnect, device number 7 [ 334.162444][ T51] usb 7-1: can't set config #0, error -71 [ 334.225005][ T51] usb 7-1: USB disconnect, device number 6 [ 336.008328][ T7802] loop3: detected capacity change from 0 to 256 [ 336.646580][ T7811] loop4: detected capacity change from 0 to 256 [ 336.724353][ T7811] vfat: Unknown parameter 'short' [ 336.990074][ T7811] loop4: detected capacity change from 0 to 4096 [ 337.109458][ T7811] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 344.323881][ T7853] netlink: 'syz.6.520': attribute type 4 has an invalid length. [ 345.800488][ T7864] loop2: detected capacity change from 0 to 32768 [ 345.837548][ T7864] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.510 (7864) [ 346.394418][ T7864] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 346.404988][ T7864] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 346.413667][ T7864] BTRFS info (device loop2): using free-space-tree [ 346.544254][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 346.839322][ T8] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 346.884604][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.913133][ T8] usb 4-1: Product: syz [ 346.967370][ T8] usb 4-1: Manufacturer: syz [ 347.009278][ T8] usb 4-1: SerialNumber: syz [ 347.057255][ T8] usb 4-1: config 0 descriptor?? [ 347.106303][ T5847] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 347.141191][ T8] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 009 [ 347.188488][ T8] (null): failure setting delay to 10us [ 347.218055][ T8] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 347.275995][ T8] usb 4-1: USB disconnect, device number 9 [ 347.967825][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 349.046396][ T7916] overlayfs: invalid redirect ((null)) [ 352.317604][ T7935] loop4: detected capacity change from 0 to 32768 [ 352.347185][ T7935] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.542 (7935) [ 352.650653][ T7935] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 352.661344][ T7935] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 352.669940][ T7935] BTRFS info (device loop4): using free-space-tree [ 352.683500][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 354.036472][ T5914] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 354.046262][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.055191][ T5914] usb 2-1: Product: syz [ 354.059431][ T5914] usb 2-1: Manufacturer: syz [ 354.066157][ T5914] usb 2-1: SerialNumber: syz [ 354.073194][ T5914] usb 2-1: config 0 descriptor?? [ 354.132685][ T5914] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 005 [ 356.026228][ T5914] (null): failure reading functionality [ 356.565097][ T7979] loop3: detected capacity change from 0 to 512 [ 356.926331][ T5914] i2c i2c-1: failure reading functionality [ 356.942618][ T5914] i2c i2c-1: connected i2c-tiny-usb device [ 356.943846][ T5841] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 356.965065][ T5914] usb 2-1: USB disconnect, device number 5 [ 357.524332][ T7988] overlayfs: invalid redirect ((null)) [ 357.540360][ T7979] EXT4-fs (loop3): Test dummy encryption mode enabled [ 357.727786][ T7979] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 358.515324][ T7979] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 358.801810][ T7979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 358.843490][ T7979] System zones: 1-12 [ 358.924652][ T7979] EXT4-fs (loop3): 1 truncate cleaned up [ 358.949706][ T7979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.164132][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 359.398948][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 359.509475][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 359.538313][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 359.580253][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 359.643591][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 359.732612][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 359.798133][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 359.823573][ T8] usb 5-1: Product: syz [ 359.857257][ T8] usb 5-1: Manufacturer: syz [ 359.880573][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.881056][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 359.965951][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 359.984956][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 359.990908][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 360.154914][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.403909][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.568893][ T8018] loop3: detected capacity change from 0 to 1024 [ 360.881436][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.074641][ T8018] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.514708][ T8032] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 362.200629][ T936] usb 5-1: USB disconnect, device number 8 [ 362.223133][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.996134][ T936] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 364.265821][ T8068] loop3: detected capacity change from 0 to 2048 [ 364.280090][ T936] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 364.323386][ T936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.441050][ T936] usb 7-1: Product: syz [ 364.480129][ T936] usb 7-1: Manufacturer: syz [ 364.553674][ T936] usb 7-1: SerialNumber: syz [ 364.563697][ T936] usb 7-1: config 0 descriptor?? [ 364.627034][ T936] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 007 [ 364.714221][ T8068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.274035][ T8085] loop4: detected capacity change from 0 to 4096 [ 365.495231][ T936] (null): failure reading functionality [ 365.766531][ T936] i2c i2c-1: failure reading functionality [ 365.996591][ T8088] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 366.544804][ T8085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.558320][ T936] i2c i2c-1: connected i2c-tiny-usb device [ 366.596109][ T936] usb 7-1: USB disconnect, device number 7 [ 367.959957][ T8108] loop5: detected capacity change from 0 to 128 [ 368.044909][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.101253][ T8108] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.150466][ T8108] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.516072][ T8117] loop4: detected capacity change from 0 to 512 [ 368.615056][ T8117] EXT4-fs (loop4): invalid inodes per group: 43113 [ 368.615056][ T8117] [ 368.823831][ T5838] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.663400][ T8129] Zero length message leads to an empty skb [ 372.937791][ T5917] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 373.183718][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 373.183941][ T5917] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.273538][ T5917] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 373.330215][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.364863][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 373.415724][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 373.488424][ T5917] usb 5-1: string descriptor 0 read error: -71 [ 373.503609][ T5890] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 373.523573][ T5917] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.555487][ T8154] loop1: detected capacity change from 0 to 512 [ 373.567499][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.713612][ T5890] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.780319][ T5890] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 373.853528][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.920781][ T5890] usb 6-1: Product: syz [ 373.953504][ T5890] usb 6-1: Manufacturer: syz [ 373.958196][ T5890] usb 6-1: SerialNumber: syz [ 374.052014][ T5890] usb 6-1: config 0 descriptor?? [ 374.073524][ T936] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 374.131598][ T8162] loop2: detected capacity change from 0 to 2048 [ 374.175000][ T5917] usb 5-1: can't set config #1, error -71 [ 374.204715][ T5917] usb 5-1: USB disconnect, device number 9 [ 374.293470][ T936] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 374.321125][ T936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.330761][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.362190][ T8162] loop2: detected capacity change from 0 to 512 [ 374.395677][ T8162] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 374.403085][ T936] usb 7-1: Product: syz [ 374.413390][ T936] usb 7-1: Manufacturer: syz [ 374.418049][ T936] usb 7-1: SerialNumber: syz [ 374.431676][ T936] usb 7-1: config 0 descriptor?? [ 376.099224][ T936] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 377.129503][ T936] usb 7-1: USB disconnect, device number 8 [ 377.216409][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.678036][ T936] usb 6-1: USB disconnect, device number 4 [ 379.120067][ T8194] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 379.896243][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 380.056503][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 380.086211][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.126999][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 380.412594][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.394449][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 381.411595][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 381.426058][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.430528][ T8210] loop3: detected capacity change from 0 to 2048 [ 381.440731][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.450063][ T8] usb 6-1: Product: syz [ 381.454697][ T8] usb 6-1: Manufacturer: syz [ 381.498868][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 381.499124][ T8210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.523424][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 381.606219][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 381.788593][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.813844][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 381.821702][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.971738][ T8223] dccp_flush_write_queue: CCID did not manage to send all packets [ 383.404157][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.410671][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.495769][ T8217] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 383.839187][ T8] usb 6-1: USB disconnect, device number 5 [ 385.633593][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 387.416738][ T8] usb 5-1: device descriptor read/all, error -71 [ 387.465323][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 387.662619][ T5890] kernel read not supported for file /367/net/igmp (pid: 5890 comm: kworker/1:3) [ 388.688040][ T8280] netlink: 188 bytes leftover after parsing attributes in process `syz.4.623'. [ 391.833516][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 392.019870][ T8] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 392.050615][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.074874][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.082482][ T8] usb 7-1: Product: syz [ 392.094904][ T8] usb 7-1: Manufacturer: syz [ 392.112261][ T8] usb 7-1: SerialNumber: syz [ 392.151581][ T8] usb 7-1: config 0 descriptor?? [ 392.438674][ T8] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 393.306842][ T8] usb 7-1: USB disconnect, device number 9 [ 393.485707][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.823952][ T8308] loop4: detected capacity change from 0 to 4096 [ 394.737107][ T8308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.599469][ T8328] loop2: detected capacity change from 0 to 128 [ 396.615461][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.954459][ T8334] netlink: 188 bytes leftover after parsing attributes in process `syz.2.640'. [ 401.329393][ T8362] loop2: detected capacity change from 0 to 2048 [ 401.531684][ T8362] loop2: p2 < > p3 p4 [ 401.614000][ T8362] loop2: p3 start 65535 is beyond EOD, truncated [ 401.620429][ T8362] loop2: p4 size 8192 extends beyond EOD, truncated [ 401.819376][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 401.856193][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 402.094697][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 402.344167][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 402.510734][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 402.714022][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.723137][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 402.813516][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 402.908394][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.954687][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.034748][ T8] usb 6-1: Product: syz [ 403.059513][ T8] usb 6-1: Manufacturer: syz [ 403.075757][ T51] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 403.130262][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 403.145977][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 403.164634][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 403.174462][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 403.264937][ T51] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 403.291621][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.315643][ T51] usb 3-1: Product: syz [ 403.319893][ T51] usb 3-1: Manufacturer: syz [ 403.333662][ T51] usb 3-1: SerialNumber: syz [ 403.348992][ T51] usb 3-1: config 0 descriptor?? [ 403.365463][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.384013][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.474480][ T51] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 403.579544][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.654515][ T8] usb 3-1: USB disconnect, device number 7 [ 403.654973][ T51] usb 6-1: USB disconnect, device number 6 [ 405.271174][ T8386] overlayfs: invalid redirect ((null)) [ 405.463975][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 406.857809][ T51] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 408.319813][ T8414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.999861][ T51] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 410.430113][ T8420] input: syz1 as /devices/virtual/input/input10 [ 412.428028][ T8427] loop5: detected capacity change from 0 to 512 [ 412.887695][ T8427] EXT4-fs error (device loop5): ext4_read_inode_bitmap:138: comm syz.5.667: Invalid inode bitmap blk 4 in block_group 0 [ 412.948387][ T51] usb 2-1: string descriptor 0 read error: -71 [ 412.965680][ T51] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 412.993392][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.011217][ T51] usb 2-1: config 0 descriptor?? [ 413.019041][ T51] usb 2-1: can't set config #0, error -71 [ 413.031121][ T51] usb 2-1: USB disconnect, device number 6 [ 413.048145][ T8427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.204826][ T8442] loop1: detected capacity change from 0 to 2048 [ 413.232052][ T8427] netlink: 'syz.5.667': attribute type 4 has an invalid length. [ 413.297455][ T8442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.127507][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.555110][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.564384][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 414.582926][ T8451] overlayfs: invalid redirect ((null)) [ 414.758059][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.803703][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 414.852865][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.897455][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 415.119209][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 415.221038][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.803411][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.811520][ T9] usb 4-1: Product: syz [ 415.816744][ T9] usb 4-1: Manufacturer: syz [ 415.884654][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 415.916941][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 415.983557][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 415.983593][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 416.149235][ T8475] 9pnet_virtio: no channels available for device syz [ 416.152731][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.153036][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.308833][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 417.309070][ T29] audit: type=1326 audit(1738275504.103:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 418.258889][ T29] audit: type=1326 audit(1738275504.103:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 418.315389][ T5914] usb 4-1: USB disconnect, device number 10 [ 418.556370][ T8488] loop3: detected capacity change from 0 to 1024 [ 418.581577][ T8488] hfsplus: Bad value for 'part' [ 418.626680][ T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 418.903470][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 418.950686][ T51] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 418.993626][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.015990][ T51] usb 3-1: config 0 descriptor?? [ 419.027242][ T51] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 420.417183][ T8507] overlayfs: invalid redirect ((null)) [ 420.591784][ T51] gspca_sonixj: reg_w1 err -71 [ 420.613490][ T51] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 420.623211][ T51] usb 3-1: USB disconnect, device number 8 [ 421.101797][ T8522] loop2: detected capacity change from 0 to 1024 [ 421.214550][ T8522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.275991][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.591508][ T8578] loop6: detected capacity change from 0 to 1024 [ 428.655113][ T8578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.188813][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.576403][ T8615] overlayfs: invalid redirect ((null)) [ 439.666211][ T8647] 9pnet_virtio: no channels available for device syz [ 439.771922][ T8649] loop1: detected capacity change from 0 to 2048 [ 439.830974][ T8649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.900599][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.076109][ T8668] overlayfs: invalid redirect ((null)) [ 442.123964][ T8672] x_tables: unsorted entry at hook 2 [ 444.915108][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.693480][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.183226][ T8695] loop6: detected capacity change from 0 to 512 [ 447.115055][ T8702] loop1: detected capacity change from 0 to 16 [ 447.857243][ T8702] erofs (device loop1): mounted with root inode @ nid 36. [ 451.524230][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 451.535394][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 451.546798][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 451.555499][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 451.567640][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 451.575835][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 452.087168][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 452.936784][ T5917] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 452.982779][ T5917] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 453.020754][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 453.033905][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 453.047351][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 453.060976][ T5917] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 453.080439][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.096436][ T5917] usb 3-1: Product: syz [ 453.103576][ T5917] usb 3-1: Manufacturer: syz [ 453.309162][ T5917] cdc_wdm 3-1:1.0: skipping garbage [ 454.265891][ T5842] Bluetooth: hci0: command tx timeout [ 454.299178][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.316522][ T5917] cdc_wdm 3-1:1.0: skipping garbage [ 455.348446][ T5917] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 455.354895][ T5917] cdc_wdm 3-1:1.0: Unknown control protocol [ 455.864457][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.051304][ T8725] chnl_net:caif_netlink_parms(): no params data found [ 456.156721][ T8749] loop6: detected capacity change from 0 to 512 [ 456.328692][ T5842] Bluetooth: hci0: command tx timeout [ 457.817229][ T936] usb 3-1: USB disconnect, device number 9 [ 458.386497][ T5842] Bluetooth: hci0: command tx timeout [ 459.396938][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.604170][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.633821][ T8725] bridge_slave_0: entered allmulticast mode [ 459.653524][ T8725] bridge_slave_0: entered promiscuous mode [ 459.854667][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.861847][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.895836][ T8725] bridge_slave_1: entered allmulticast mode [ 459.922342][ T8725] bridge_slave_1: entered promiscuous mode [ 461.223141][ T8725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.306901][ T8725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.417828][ T5842] Bluetooth: hci0: command tx timeout [ 462.702132][ T8725] team0: Port device team_slave_0 added [ 462.843533][ T5914] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 463.009330][ T8725] team0: Port device team_slave_1 added [ 463.065647][ T29] audit: type=1326 audit(1738275549.883:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 464.004000][ T29] audit: type=1326 audit(1738275549.883:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 464.260818][ T5914] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 464.300387][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.353442][ T5914] usb 7-1: Product: syz [ 464.357707][ T5914] usb 7-1: Manufacturer: syz [ 464.362356][ T5914] usb 7-1: SerialNumber: syz [ 464.425137][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.427188][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.779'. [ 464.456856][ T5914] usb 7-1: config 0 descriptor?? [ 464.483410][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.634070][ T5914] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 464.654540][ T8725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.741430][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.791917][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.878807][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.926236][ T9] usb 7-1: USB disconnect, device number 10 [ 464.991839][ T8725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.960321][ T8725] hsr_slave_0: entered promiscuous mode [ 466.552673][ T8725] hsr_slave_1: entered promiscuous mode [ 466.606201][ T8725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.649676][ T8725] Cannot create hsr debugfs directory [ 467.283525][ T5890] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 467.456921][ T5890] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 467.478948][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.515286][ T5890] usb 6-1: Product: syz [ 467.521772][ T5890] usb 6-1: Manufacturer: syz [ 467.541225][ T5890] usb 6-1: SerialNumber: syz [ 467.570979][ T5890] usb 6-1: config 0 descriptor?? [ 467.622598][ T5890] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 007 [ 468.526643][ T8725] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.607590][ T8725] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.636111][ T5890] i2c i2c-1: failure reading functionality [ 468.838922][ T5890] i2c i2c-1: connected i2c-tiny-usb device [ 468.865496][ T8725] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 469.796611][ T5890] usb 6-1: USB disconnect, device number 7 [ 469.840142][ T8725] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 472.259897][ T8787] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 472.406341][ T8725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.425659][ T8725] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.649454][ T8787] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.948275][ T8787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.983689][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.990922][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.008735][ T8787] usb 6-1: Product: syz [ 473.015109][ T8787] usb 6-1: Manufacturer: syz [ 473.030251][ T8787] usb 6-1: SerialNumber: syz [ 473.040465][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.047629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.066566][ T8787] usb 6-1: config 0 descriptor?? [ 473.229245][ T8854] overlayfs: invalid redirect ((null)) [ 473.233997][ T8787] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 473.357731][ T8787] usb 6-1: USB disconnect, device number 8 [ 473.549641][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.035089][ T8725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.445876][ T8894] netlink: 'syz.6.787': attribute type 21 has an invalid length. [ 477.477103][ T8894] netlink: 164 bytes leftover after parsing attributes in process `syz.6.787'. [ 477.982422][ T8725] veth0_vlan: entered promiscuous mode [ 478.038332][ T8725] veth1_vlan: entered promiscuous mode [ 478.129774][ T8725] veth0_macvtap: entered promiscuous mode [ 478.161960][ T8725] veth1_macvtap: entered promiscuous mode [ 478.221229][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.352834][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.363680][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.375886][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.387092][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.398019][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.408204][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.419458][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.455773][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.475736][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.507310][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.546712][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.580927][ T8725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.645845][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.681349][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.873543][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.514074][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.524046][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.534703][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.544974][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.556448][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.568469][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.604656][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.636026][ T8886] loop5: detected capacity change from 0 to 32768 [ 479.656661][ T8902] loop3: detected capacity change from 0 to 512 [ 479.668446][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.689724][ T8886] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.802 (8886) [ 479.716848][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.735643][ T8886] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 479.753591][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.769222][ T8886] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 479.790494][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.810882][ T8886] BTRFS info (device loop5): using free-space-tree [ 479.849207][ T8725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.006916][ T8725] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.053728][ T8725] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.135651][ T8725] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.160756][ T8725] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.382274][ T8924] overlayfs: invalid redirect ((null)) [ 480.414329][ T5838] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 480.582020][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 480.634370][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 480.766875][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.811220][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.820747][ T25] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 480.874226][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.882302][ T25] usb 2-1: Product: syz [ 480.940831][ T25] usb 2-1: Manufacturer: syz [ 480.949932][ T25] usb 2-1: SerialNumber: syz [ 480.981782][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.994865][ T25] usb 2-1: config 0 descriptor?? [ 481.043716][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.048919][ T25] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 007 [ 481.343993][ T51] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 481.559077][ T51] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 481.591809][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.623422][ T51] usb 4-1: Product: syz [ 481.627707][ T51] usb 4-1: Manufacturer: syz [ 481.652409][ T51] usb 4-1: SerialNumber: syz [ 481.686275][ T25] i2c i2c-1: failure reading functionality [ 481.700371][ T51] usb 4-1: config 0 descriptor?? [ 481.708632][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 482.801265][ T25] usb 2-1: USB disconnect, device number 7 [ 482.898878][ T51] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 483.036667][ T51] usb 4-1: USB disconnect, device number 11 [ 483.772464][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.372124][ T29] audit: type=1326 audit(1738275571.163:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.6.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ab8cda9 code=0x7ffc0000 [ 485.361209][ T29] audit: type=1326 audit(1738275571.163:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.6.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ab8cda9 code=0x7ffc0000 [ 487.163909][ T8974] overlayfs: invalid redirect ((null)) [ 487.228662][ T8972] loop5: detected capacity change from 0 to 512 [ 487.609031][ T8983] loop1: detected capacity change from 0 to 256 [ 487.616468][ T8983] exfat: Bad value for 'uid' [ 487.621111][ T8983] exfat: Bad value for 'uid' [ 488.018333][ T8990] process 'syz.1.829' launched '/dev/fd/9' with NULL argv: empty string added [ 489.104094][ T8951] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 490.437842][ T8951] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 490.757686][ T8951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.776896][ T936] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 490.822781][ T8951] usb 3-1: Product: syz [ 490.834717][ T8951] usb 3-1: Manufacturer: syz [ 490.866804][ T8951] usb 3-1: SerialNumber: syz [ 490.894129][ T8951] usb 3-1: config 0 descriptor?? [ 490.920401][ T8951] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 010 [ 490.999215][ T936] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 491.046361][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.100901][ T8951] (null): failure setting delay to 10us [ 491.107168][ T936] usb 4-1: Product: syz [ 491.118499][ T936] usb 4-1: Manufacturer: syz [ 491.123160][ T936] usb 4-1: SerialNumber: syz [ 491.141941][ T8951] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 491.168511][ T936] usb 4-1: config 0 descriptor?? [ 491.189239][ T8951] usb 3-1: USB disconnect, device number 10 [ 491.320395][ T936] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 491.794024][ T8787] usb 4-1: USB disconnect, device number 12 [ 492.119219][ T9018] overlayfs: invalid redirect ((null)) [ 492.274272][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.190696][ T9031] loop3: detected capacity change from 0 to 512 [ 496.572927][ T9053] Bluetooth: MGMT ver 1.23 [ 496.579762][ T9052] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 497.479104][ T9067] netlink: 'syz.3.857': attribute type 21 has an invalid length. [ 497.511808][ T9067] netlink: 164 bytes leftover after parsing attributes in process `syz.3.857'. [ 497.593624][ T8951] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 497.803649][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 497.858311][ T8951] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 497.883453][ T8951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.916818][ T8951] usb 7-1: Product: syz [ 497.921065][ T8951] usb 7-1: Manufacturer: syz [ 497.953252][ T8951] usb 7-1: SerialNumber: syz [ 497.993099][ T9] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 497.995242][ T8951] usb 7-1: config 0 descriptor?? [ 498.015257][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.053669][ T9] usb 2-1: Product: syz [ 498.063453][ T9] usb 2-1: Manufacturer: syz [ 498.068106][ T9] usb 2-1: SerialNumber: syz [ 498.295486][ T9] usb 2-1: config 0 descriptor?? [ 498.332661][ T8951] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 498.553609][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 498.562621][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 499.178801][ T9] usb 2-1: selecting invalid altsetting 3 [ 499.184739][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 499.193000][ T9] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 499.206453][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 499.220130][ T5893] usb 7-1: USB disconnect, device number 11 [ 499.261073][ T9] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 499.414509][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.674002][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 501.219792][ T29] audit: type=1326 audit(1738275588.033:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.7.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 502.201724][ T29] audit: type=1326 audit(1738275588.033:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.7.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 502.449004][ T8951] usb 2-1: USB disconnect, device number 8 [ 502.741198][ T9100] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 503.616012][ T9119] netlink: 'syz.6.874': attribute type 21 has an invalid length. [ 503.666421][ T9119] netlink: 164 bytes leftover after parsing attributes in process `syz.6.874'. [ 505.593886][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 505.600281][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 506.228457][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.235173][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.487093][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.879'. [ 507.653682][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 507.970621][ T29] audit: type=1326 audit(1738275594.713:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.7.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 508.784103][ T29] audit: type=1326 audit(1738275594.723:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.7.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 511.442444][ T9167] netlink: 'syz.1.889': attribute type 21 has an invalid length. [ 512.510912][ T9167] netlink: 164 bytes leftover after parsing attributes in process `syz.1.889'. [ 515.588053][ T5893] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 515.702913][ T9192] loop2: detected capacity change from 0 to 2048 [ 515.794380][ T5893] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 516.043111][ T5893] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 516.066120][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 516.076405][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 516.080579][ T9192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.088228][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 516.139912][ T5893] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 516.160542][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 516.207259][ T5893] usb 2-1: Product: syz [ 516.211509][ T5893] usb 2-1: Manufacturer: syz [ 516.511072][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 516.535670][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 516.564248][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.304179][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.338047][ T5893] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 517.363701][ T5893] cdc_wdm 2-1:1.0: Unknown control protocol [ 517.537171][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.735842][ T25] usb 2-1: USB disconnect, device number 9 [ 519.443451][ T5893] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 519.947921][ T5893] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.980002][ T5893] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 520.253573][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.349036][ T9229] input: syz0 as /devices/virtual/input/input11 [ 521.043509][ T5893] usb 6-1: Product: syz [ 521.047750][ T5893] usb 6-1: Manufacturer: syz [ 521.052371][ T5893] usb 6-1: SerialNumber: syz [ 521.094250][ T5893] usb 6-1: config 0 descriptor?? [ 523.781319][ T25] usb 6-1: USB disconnect, device number 9 [ 524.258960][ T9251] loop5: detected capacity change from 0 to 1024 [ 524.376988][ T9251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.646936][ T29] audit: type=1326 audit(1738275611.443:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ab8cda9 code=0x7ffc0000 [ 525.653536][ T29] audit: type=1326 audit(1738275611.443:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ab8cda9 code=0x7ffc0000 [ 526.857368][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.879676][ T9269] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 528.690074][ T9296] input: syz0 as /devices/virtual/input/input12 [ 528.936146][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 528.944986][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 530.007970][ T9295] loop6: detected capacity change from 0 to 512 [ 531.013499][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 533.613736][ T29] audit: type=1326 audit(1738275620.343:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9319 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 534.393766][ T29] audit: type=1326 audit(1738275620.343:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9319 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 535.105265][ T9329] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 535.661057][ T9344] loop6: detected capacity change from 0 to 1024 [ 536.965820][ T9347] loop5: detected capacity change from 0 to 512 [ 537.923960][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 538.020606][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 538.451150][ T9344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.850048][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.033484][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 540.850303][ T9387] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 542.797262][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 542.804670][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 543.011857][ T9406] loop3: detected capacity change from 0 to 1024 [ 543.225122][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.966'. [ 543.254048][ T9406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.436565][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.849110][ T9431] overlayfs: invalid redirect ((null)) [ 544.855693][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 546.902300][ T9444] loop7: detected capacity change from 0 to 512 [ 547.029444][ T9444] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 547.215097][ T9444] EXT4-fs (loop7): 1 truncate cleaned up [ 547.434657][ T9444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.676486][ T8725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.697440][ T9464] loop5: detected capacity change from 0 to 1024 [ 549.790755][ T9464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.035676][ T8951] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 551.185110][ T8951] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 551.721847][ T8951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.982256][ T8951] usb 2-1: Product: syz [ 552.102641][ T8951] usb 2-1: Manufacturer: syz [ 552.225461][ T8951] usb 2-1: SerialNumber: syz [ 552.343133][ T8951] usb 2-1: config 0 descriptor?? [ 552.445941][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.489553][ T8951] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 552.687449][ T8951] usb 2-1: USB disconnect, device number 10 [ 552.764081][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.279850][ T9502] input: syz0 as /devices/virtual/input/input13 [ 557.219641][ T9521] loop2: detected capacity change from 0 to 1024 [ 559.274473][ T9521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.900028][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.470972][ T51] hid-generic 1AA0:0002:0386.0002: item fetching failed at offset 0/1 [ 562.494135][ T51] hid-generic 1AA0:0002:0386.0002: probe with driver hid-generic failed with error -22 [ 562.655151][ T5893] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 563.903877][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.913154][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.007077][ T9559] loop6: detected capacity change from 0 to 512 [ 564.083523][ T5893] usb 2-1: Product: syz [ 564.087932][ T5893] usb 2-1: Manufacturer: syz [ 564.103509][ T5893] usb 2-1: SerialNumber: syz [ 564.120531][ T5893] usb 2-1: config 0 descriptor?? [ 564.286653][ T5893] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 564.459280][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.509775][ T8787] usb 2-1: USB disconnect, device number 11 [ 565.938164][ T9587] loop6: detected capacity change from 0 to 1024 [ 566.194514][ T9587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.402980][ T29] audit: type=1326 audit(1738275653.213:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.7.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 567.009907][ T29] audit: type=1326 audit(1738275653.213:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.7.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 567.600790][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.659837][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.660770][ T9585] loop3: detected capacity change from 0 to 32768 [ 567.675038][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.703533][ T9585] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1018 (9585) [ 567.772120][ T51] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 567.802309][ T9585] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 567.853288][ T9585] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 567.862683][ T9585] BTRFS info (device loop3): using free-space-tree [ 567.946064][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 567.956106][ T51] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.970605][ T51] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 567.990872][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.025713][ T51] usb 6-1: Product: syz [ 568.072561][ T51] usb 6-1: Manufacturer: syz [ 568.127747][ T5893] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 568.137022][ T51] usb 6-1: SerialNumber: syz [ 568.158403][ T51] usb 6-1: config 0 descriptor?? [ 568.266190][ T5893] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 568.277327][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 568.286861][ T5893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 568.318641][ T5893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 568.414090][ T5893] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 568.433445][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 568.464962][ T5893] usb 3-1: Product: syz [ 568.469210][ T5893] usb 3-1: Manufacturer: syz [ 568.509849][ T5893] cdc_wdm 3-1:1.0: skipping garbage [ 568.522519][ T5893] cdc_wdm 3-1:1.0: skipping garbage [ 568.539559][ T9628] loop6: detected capacity change from 0 to 2048 [ 568.568772][ T5893] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 568.584748][ T5893] cdc_wdm 3-1:1.0: Unknown control protocol [ 568.593698][ T9628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.615767][ T5840] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 568.784546][ T9607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.844014][ T9607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.108704][ T51] usb 3-1: USB disconnect, device number 11 [ 569.112262][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1031'. [ 569.823661][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 571.035473][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 571.093644][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.101759][ T5892] usb 6-1: USB disconnect, device number 10 [ 571.147248][ T9] usb 4-1: Product: syz [ 571.151512][ T9] usb 4-1: Manufacturer: syz [ 571.204386][ T9] usb 4-1: SerialNumber: syz [ 571.226591][ T9] usb 4-1: config 0 descriptor?? [ 571.264296][ T9] usb 4-1: selecting invalid altsetting 3 [ 571.270292][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 571.309095][ T9] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 571.354037][ T9] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 571.454146][ T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 571.871397][ T29] audit: type=1326 audit(1738275658.683:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 572.776130][ T51] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 572.806336][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.829959][ T29] audit: type=1326 audit(1738275658.683:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 572.925356][ T51] usb 2-1: Product: syz [ 572.953494][ T51] usb 2-1: Manufacturer: syz [ 573.953903][ T9591] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 573.962265][ T51] usb 2-1: SerialNumber: syz [ 574.559197][ T51] usb 2-1: config 0 descriptor?? [ 574.579083][ T51] usb 2-1: can't set config #0, error -71 [ 574.610244][ T9674] loop5: detected capacity change from 0 to 1024 [ 574.652329][ T51] usb 2-1: USB disconnect, device number 12 [ 574.687262][ T5927] usb 4-1: USB disconnect, device number 13 [ 574.800872][ T9676] loop2: detected capacity change from 0 to 512 [ 574.814564][ T9674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.857781][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 575.270953][ T9684] input: syz0 as /devices/virtual/input/input14 [ 576.926843][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 579.235724][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.193694][ T5917] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 581.545056][ T5917] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.977472][ T5917] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 582.003428][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.011617][ T5917] usb 2-1: Product: syz [ 582.129819][ T5917] usb 2-1: Manufacturer: syz [ 582.200288][ T5917] usb 2-1: SerialNumber: syz [ 582.672405][ T5917] usb 2-1: config 0 descriptor?? [ 582.757649][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.098000][ T5917] usb 2-1: USB disconnect, device number 13 [ 583.249293][ T8951] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 583.401144][ T9727] input: syz0 as /devices/virtual/input/input15 [ 584.365078][ T8951] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 584.400015][ T8951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.500066][ T8951] usb 6-1: Product: syz [ 584.543624][ T8951] usb 6-1: Manufacturer: syz [ 584.574602][ T8951] usb 6-1: SerialNumber: syz [ 584.601810][ T8951] usb 6-1: config 0 descriptor?? [ 584.698071][ T8951] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 584.990317][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.013631][ T5917] usb 6-1: USB disconnect, device number 11 [ 586.740468][ T9741] overlayfs: invalid redirect ((null)) [ 591.222804][ T9768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1072'. [ 591.348967][ T9767] loop6: detected capacity change from 0 to 2048 [ 591.373920][ T9769] loop3: detected capacity change from 0 to 1024 [ 591.429759][ T9767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.671611][ T9772] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 593.172141][ T9769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.226827][ T9783] input: syz0 as /devices/virtual/input/input16 [ 594.580015][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.599418][ T9786] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 595.736858][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.373533][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 607.533587][ T8787] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 607.747844][ T8787] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 607.757518][ T8787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.804454][ T8787] usb 4-1: Product: syz [ 607.818986][ T8787] usb 4-1: Manufacturer: syz [ 607.843933][ T8787] usb 4-1: SerialNumber: syz [ 607.891251][ T8787] usb 4-1: config 0 descriptor?? [ 607.960879][ T8787] usb 4-1: selecting invalid altsetting 3 [ 607.992347][ T8787] comedi comedi0: could not set alternate setting 3 in high speed [ 608.020878][ T8787] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 608.055657][ T8787] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 609.000468][ T29] audit: type=1326 audit(1738275695.813:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 609.984737][ T29] audit: type=1326 audit(1738275695.813:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05858cda9 code=0x7ffc0000 [ 610.113687][ T9847] overlayfs: invalid redirect ((null)) [ 612.687211][ T9867] ALSA: mixer_oss: invalid OSS volume '' [ 613.515677][ T9] usb 4-1: USB disconnect, device number 14 [ 614.397522][ T9874] vlan2: entered promiscuous mode [ 614.613621][ T9874] macvtap0: entered promiscuous mode [ 619.553241][ T9906] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1114'. [ 619.774618][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 619.973571][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 619.984039][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 619.996226][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 620.010400][ T5140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 620.018338][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 622.154074][ T5842] Bluetooth: hci1: command tx timeout [ 622.579562][ T9910] chnl_net:caif_netlink_parms(): no params data found [ 624.267917][ T5842] Bluetooth: hci1: command tx timeout [ 624.306477][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.312620][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.322839][ T9910] bridge_slave_0: entered allmulticast mode [ 625.765311][ T9910] bridge_slave_0: entered promiscuous mode [ 625.777320][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.785050][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.792329][ T9910] bridge_slave_1: entered allmulticast mode [ 625.801798][ T9910] bridge_slave_1: entered promiscuous mode [ 626.247168][ T9910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.214337][ T5842] Bluetooth: hci1: command tx timeout [ 628.220008][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.942644][ T9910] team0: Port device team_slave_0 added [ 629.001466][ T9979] loop1: detected capacity change from 0 to 128 [ 629.016311][ T9979] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 629.030413][ T9979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.059608][ T9910] team0: Port device team_slave_1 added [ 629.107398][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.114362][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.343541][ T5842] Bluetooth: hci1: command tx timeout [ 630.146686][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.258103][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.536172][ T9910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.664078][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.664107][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.664156][ T9910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.978173][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 632.037943][ T9910] hsr_slave_0: entered promiscuous mode [ 632.038938][ T9910] hsr_slave_1: entered promiscuous mode [ 632.039515][ T9910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.039613][ T9910] Cannot create hsr debugfs directory [ 632.980502][ T51] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 633.843518][ T51] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 633.843568][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.843609][ T51] usb 3-1: Product: syz [ 633.843638][ T51] usb 3-1: Manufacturer: syz [ 633.843670][ T51] usb 3-1: SerialNumber: syz [ 633.849018][ T51] usb 3-1: config 0 descriptor?? [ 633.935669][ T51] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 633.980543][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.095816][ T9] usb 3-1: USB disconnect, device number 12 [ 634.298022][ T9910] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 634.336304][ T9910] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 634.382038][ T9910] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 634.418607][ T9910] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 634.706087][ T9910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.780906][ T9910] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.910548][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.917821][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.022390][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.029663][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.325162][ T9910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 635.413515][ T9910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.337865][T10024] loop6: detected capacity change from 0 to 32768 [ 636.414209][T10024] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1145 (10024) [ 636.455271][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 636.461791][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 636.539427][T10024] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 636.629250][T10024] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 636.669203][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1155'. [ 636.689508][T10067] loop2: detected capacity change from 0 to 256 [ 636.802883][T10067] exfat: Bad value for 'uid' [ 636.836842][T10067] exfat: Bad value for 'uid' [ 636.858336][ T9910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.997879][T10024] BTRFS error (device loop6): open_ctree failed: -4 [ 639.181356][T10099] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 640.899894][T10112] warning: `syz.2.1166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 640.936080][T10117] loop7: detected capacity change from 0 to 512 [ 641.173566][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 641.179865][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 641.339045][ T9910] veth0_vlan: entered promiscuous mode [ 641.448040][ T9910] veth1_vlan: entered promiscuous mode [ 641.679924][ T9910] veth0_macvtap: entered promiscuous mode [ 641.717678][ T9910] veth1_macvtap: entered promiscuous mode [ 641.791113][T10143] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 641.792379][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.861341][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.901135][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.920126][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.944317][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.956782][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.967213][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.981784][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.005052][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.023493][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.051637][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.100712][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.138925][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.160741][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.198875][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.251062][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.272509][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.563750][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.616742][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.663432][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.695566][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.734849][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.772919][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.089702][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.105819][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.116181][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.127236][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.137347][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.148566][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.159464][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.170701][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.234688][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.268796][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 643.394560][ T9910] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.461456][ T9910] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.509327][ T9910] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.550830][ T9910] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.901069][T10157] syz.2.1176 uses obsolete (PF_INET,SOCK_PACKET) [ 644.150064][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.188184][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.317332][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.505938][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.013860][ T51] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 646.164528][T10173] loop8: detected capacity change from 0 to 2048 [ 646.214772][ T51] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.224311][ T51] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 646.263385][ T51] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.286279][T10173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.583859][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 646.596401][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 646.611354][ T51] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.643807][ T51] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.751738][ T51] usb 4-1: Product: syz [ 646.911214][ T51] usb 4-1: Manufacturer: syz [ 646.963962][ T51] cdc_wdm 4-1:1.0: skipping garbage [ 646.969246][ T51] cdc_wdm 4-1:1.0: skipping garbage [ 646.984657][T10183] loop7: detected capacity change from 0 to 512 [ 647.043823][ T51] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 647.049805][ T51] cdc_wdm 4-1:1.0: Unknown control protocol [ 647.202311][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.220880][T10187] loop1: detected capacity change from 0 to 512 [ 647.260285][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.300880][T10187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 647.363658][ T8951] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 647.393159][T10187] EXT4-fs (loop1): 1 truncate cleaned up [ 647.444511][T10187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.461282][ T9910] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.554175][T10187] EXT4-fs error (device loop1): ext4_lookup:1813: comm syz.1.1185: inode #13: comm syz.1.1185: iget: illegal inode # [ 647.578983][ T8951] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 647.611725][ T8951] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 647.645439][ T8951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.675548][ T8951] usb 3-1: Product: syz [ 647.688370][ T8951] usb 3-1: Manufacturer: syz [ 647.711838][ T8951] usb 3-1: SerialNumber: syz [ 647.739911][ T8951] usb 3-1: config 0 descriptor?? [ 648.158155][ T51] usb 3-1: USB disconnect, device number 13 [ 648.987748][ T8951] usb 4-1: USB disconnect, device number 15 [ 649.444478][T10205] loop8: detected capacity change from 0 to 64 [ 649.672718][T10207] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 650.054018][T10212] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 650.182016][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.093057][T10223] 9pnet_virtio: no channels available for device syz [ 651.518841][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1198'. [ 651.973645][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 651.993783][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 652.129283][T10234] loop3: detected capacity change from 0 to 2048 [ 652.151209][T10229] loop8: detected capacity change from 0 to 512 [ 652.164844][T10234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.504779][T10239] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 653.638039][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.093513][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 655.019367][T10261] loop8: detected capacity change from 0 to 1024 [ 655.051038][T10263] loop2: detected capacity change from 0 to 256 [ 655.104963][ T5917] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 655.166683][T10263] FAT-fs (loop2): Directory bread(block 64) failed [ 655.213812][T10263] FAT-fs (loop2): Directory bread(block 65) failed [ 655.220543][T10263] FAT-fs (loop2): Directory bread(block 66) failed [ 655.270426][T10263] FAT-fs (loop2): Directory bread(block 67) failed [ 655.292360][T10263] FAT-fs (loop2): Directory bread(block 68) failed [ 655.311203][ T5917] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 655.342783][T10267] loop7: detected capacity change from 0 to 512 [ 655.352324][ T8083] hfsplus: b-tree write err: -5, ino 4 [ 655.359523][T10263] FAT-fs (loop2): Directory bread(block 69) failed [ 655.373267][T10263] FAT-fs (loop2): Directory bread(block 70) failed [ 655.378945][ T5917] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 655.425263][T10263] FAT-fs (loop2): Directory bread(block 71) failed [ 655.432019][T10263] FAT-fs (loop2): Directory bread(block 72) failed [ 655.432235][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.468195][T10263] FAT-fs (loop2): Directory bread(block 73) failed [ 655.487363][ T5917] usb 4-1: Product: syz [ 655.495377][T10269] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 655.497882][T10267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.526878][ T5917] usb 4-1: Manufacturer: syz [ 655.526915][T10267] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 655.531532][ T5917] usb 4-1: SerialNumber: syz [ 655.644878][ T5917] usb 4-1: config 0 descriptor?? [ 657.539757][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 657.547547][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 657.626427][ T8725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.658977][ T9] usb 4-1: USB disconnect, device number 16 [ 657.895111][T10287] loop1: detected capacity change from 0 to 512 [ 658.293786][ T29] audit: type=1326 audit(1738275745.093:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.7.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 658.322932][ T29] audit: type=1326 audit(1738275745.093:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.7.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 659.573771][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 664.210104][T10343] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 664.609495][T10352] loop3: detected capacity change from 0 to 2048 [ 664.690687][T10352] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 664.754894][T10352] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 664.762627][T10352] UDF-fs: Scanning with blocksize 512 failed [ 664.929727][T10352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.094370][T10352] udf: Unknown parameter 'jqfmt' [ 666.246090][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 666.253541][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 667.722559][T10383] loop2: detected capacity change from 0 to 2048 [ 668.224155][T10388] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 668.294744][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 668.375826][ T29] audit: type=1804 audit(1738275755.183:102): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1243" name="/newroot/222/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 669.237299][T10400] loop3: detected capacity change from 0 to 512 [ 669.884958][T10406] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 671.385555][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029cf3c00: rx timeout, send abort [ 671.393974][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035b50000: rx timeout, send abort [ 671.402626][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029cf3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 671.418326][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035b50000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 672.570111][T10426] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.592335][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 672.600679][ T5140] Bluetooth: hci0: unexpected event 0x05 length: 9 > 4 [ 672.653572][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 673.339309][T10429] loop2: detected capacity change from 0 to 2048 [ 673.389115][T10429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.076035][T10445] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 674.695919][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 674.987570][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.448688][T10450] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 676.779004][T10463] loop3: detected capacity change from 0 to 256 [ 676.786214][T10463] exfat: Unknown parameter '00000000000000000003' [ 678.321147][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1272'. [ 678.332344][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 678.344172][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 678.803971][T10484] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 678.886022][T10487] loop1: detected capacity change from 0 to 2048 [ 678.947050][T10487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.075411][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b68a800: rx timeout, send abort [ 680.075556][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b68a000: rx timeout, send abort [ 680.075697][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b68a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 680.075831][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b68a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 680.400831][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 680.470901][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.027503][ T29] audit: type=1326 audit(1738275767.813:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 681.222480][ T29] audit: type=1326 audit(1738275767.813:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 682.286676][T10526] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.029043][T10557] fuse: Bad value for 'fd' [ 685.071151][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 686.184330][ T29] audit: type=1326 audit(1738275772.993:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 686.607050][ T29] audit: type=1326 audit(1738275772.993:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601c78cda9 code=0x7ffc0000 [ 687.077807][T10584] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.387457][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 792.394483][ C1] rcu: 0-...!: (0 ticks this GP) idle=9f14/1/0x4000000000000000 softirq=34747/34747 fqs=0 [ 792.406116][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5850/1:b..l [ 792.414082][ C1] rcu: (detected by 1, t=10506 jiffies, g=32409, q=288 ncpus=2) [ 792.421835][ C1] Sending NMI from CPU 1 to CPUs 0: [ 792.421875][ C0] NMI backtrace for cpu 0 [ 792.421892][ C0] CPU: 0 UID: 0 PID: 10505 Comm: syz.6.1281 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 792.421929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 792.421948][ C0] RIP: 0010:lock_is_held_type+0xf3/0x150 [ 792.421988][ C0] Code: 45 31 ed 44 39 f0 41 0f 94 c5 48 c7 c7 a0 ef 6c 8b e8 91 16 00 00 b8 ff ff ff ff 65 0f c1 05 3c 05 af 74 83 f8 01 75 2d 9c 58 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 44 89 [ 792.422020][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00000046 [ 792.422044][ C0] RAX: 0000000000000046 RBX: ffff888027082918 RCX: 0000000000000001 [ 792.422064][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cefa0 RDI: ffffffff8bd32c20 [ 792.422085][ C0] RBP: ffff8880b862c698 R08: 0000000000000005 R09: 0000000000000000 [ 792.422105][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: ffff888027081e00 [ 792.422125][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000001 [ 792.422149][ C0] FS: 00007f285b9976c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 792.422177][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.422199][ C0] CR2: 00007f601c9762d8 CR3: 0000000056c62000 CR4: 0000000000350ef0 [ 792.422219][ C0] Call Trace: [ 792.422230][ C0] [ 792.422242][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 792.422290][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 792.422335][ C0] ? nmi_handle+0x1af/0x5d0 [ 792.422384][ C0] ? lock_is_held_type+0xf3/0x150 [ 792.422414][ C0] ? default_do_nmi+0x6a/0x160 [ 792.422458][ C0] ? exc_nmi+0x170/0x1e0 [ 792.422499][ C0] ? end_repeat_nmi+0xf/0x53 [ 792.422555][ C0] ? lock_is_held_type+0xf3/0x150 [ 792.422586][ C0] ? lock_is_held_type+0xf3/0x150 [ 792.422617][ C0] ? lock_is_held_type+0xf3/0x150 [ 792.422648][ C0] [ 792.422657][ C0] [ 792.422670][ C0] ? __pfx_advance_sched+0x10/0x10 [ 792.422723][ C0] __hrtimer_run_queues+0x8d0/0xae0 [ 792.422762][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 792.422792][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.422852][ C0] hrtimer_interrupt+0x392/0x8e0 [ 792.422886][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.422945][ C0] __sysvec_apic_timer_interrupt+0x112/0x400 [ 792.422999][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 792.423052][ C0] [ 792.423062][ C0] [ 792.423073][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 792.423123][ C0] RIP: 0010:kasan_check_range+0x12/0x1a0 [ 792.423161][ C0] Code: 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 <44> 0f b6 c2 48 01 f0 55 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff [ 792.423192][ C0] RSP: 0018:ffffc90004a8f768 EFLAGS: 00000202 [ 792.423215][ C0] RAX: ffff88805892da08 RBX: ffffc90004a8f938 RCX: ffffffff89f80f0e [ 792.423237][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805892da08 [ 792.423257][ C0] RBP: 1ffff92000951eef R08: 0000000000000005 R09: 0000000000000000 [ 792.423277][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90004a8fd98 [ 792.423297][ C0] R13: ffff88805892da00 R14: dffffc0000000000 R15: ffff88805892da08 [ 792.423323][ C0] ? __scm_recv_common.constprop.0+0x39e/0x630 [ 792.423366][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.423420][ C0] __scm_recv_common.constprop.0+0x39e/0x630 [ 792.423458][ C0] ? __pfx___scm_recv_common.constprop.0+0x10/0x10 [ 792.423505][ C0] __unix_dgram_recvmsg+0x789/0xe50 [ 792.423552][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 792.423595][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 792.423644][ C0] ? irqentry_exit+0x3b/0x90 [ 792.423676][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.423735][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.423788][ C0] ? find_held_lock+0x2d/0x110 [ 792.423823][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.423876][ C0] ? __might_fault+0x13b/0x190 [ 792.423912][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 792.423956][ C0] ____sys_recvmsg+0x5fb/0x6b0 [ 792.424013][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 792.424073][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 792.424122][ C0] ___sys_recvmsg+0x115/0x1a0 [ 792.424163][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 792.424202][ C0] ? find_held_lock+0x2d/0x110 [ 792.424237][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.424298][ C0] ? __pfx___might_resched+0x10/0x10 [ 792.424349][ C0] ? __might_fault+0xe3/0x190 [ 792.424384][ C0] do_recvmmsg+0x2f8/0x740 [ 792.424426][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 792.424465][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.424519][ C0] ? find_held_lock+0x2d/0x110 [ 792.424554][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.424606][ C0] ? do_futex+0x123/0x350 [ 792.424653][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.424710][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.424767][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 792.424811][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 792.424862][ C0] do_syscall_64+0xcd/0x250 [ 792.424896][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.424942][ C0] RIP: 0033:0x7f285ab8cda9 [ 792.424967][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.424999][ C0] RSP: 002b:00007f285b997038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 792.425027][ C0] RAX: ffffffffffffffda RBX: 00007f285ada6080 RCX: 00007f285ab8cda9 [ 792.425048][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 792.425068][ C0] RBP: 00007f285ac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 792.425087][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 792.425107][ C0] R13: 0000000000000000 R14: 00007f285ada6080 R15: 00007fff29a8e758 [ 792.425138][ C0] [ 792.425868][ C1] task:syz-executor state:R running task stack:23360 pid:5850 tgid:5850 ppid:5828 task_flags:0x400140 flags:0x00004002 [ 793.012719][ C1] Call Trace: [ 793.016016][ C1] [ 793.018971][ C1] __schedule+0xf43/0x5890 [ 793.023448][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.029229][ C1] ? hlock_class+0x4e/0x130 [ 793.033856][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.039547][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 793.044800][ C1] ? __pfx_mark_lock+0x10/0x10 [ 793.049625][ C1] ? __pfx___schedule+0x10/0x10 [ 793.054541][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.060235][ C1] ? find_held_lock+0x2d/0x110 [ 793.065039][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.070740][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.076430][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 793.081850][ C1] preempt_schedule_common+0x44/0xc0 [ 793.087233][ C1] preempt_schedule_thunk+0x1a/0x30 [ 793.092485][ C1] _raw_spin_unlock+0x3e/0x50 [ 793.097213][ C1] copy_page_range+0x1e7f/0x5690 [ 793.102240][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 793.107575][ C1] ? __entry_text_end+0x1020c5/0x1020c9 [ 793.113175][ C1] ? find_held_lock+0x2d/0x110 [ 793.117977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.123931][ C1] ? __pfx_lock_release+0x10/0x10 [ 793.129001][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.134690][ C1] ? lock_acquire+0x2f/0xb0 [ 793.139433][ C1] ? copy_process+0x7d3e/0x8d60 [ 793.144328][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.150101][ C1] ? down_write+0x14e/0x200 [ 793.154650][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.160346][ C1] ? up_write+0x1b2/0x520 [ 793.164730][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.170609][ C1] copy_process+0x7df0/0x8d60 [ 793.175319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.181039][ C1] ? __pfx_copy_process+0x10/0x10 [ 793.186133][ C1] kernel_clone+0xfd/0x960 [ 793.190761][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 793.195837][ C1] ? find_held_lock+0x59/0x110 [ 793.200635][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.206326][ C1] ? find_held_lock+0x2d/0x110 [ 793.211226][ C1] __do_sys_clone+0xba/0x100 [ 793.215849][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 793.221079][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.226783][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.232472][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 793.237816][ C1] do_syscall_64+0xcd/0x250 [ 793.242357][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.248325][ C1] RIP: 0033:0x7f6aa9b83613 [ 793.252867][ C1] RSP: 002b:00007ffc796bc488 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 793.261502][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6aa9b83613 [ 793.269499][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 793.277495][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 793.285490][ C1] R10: 000055556c1a27d0 R11: 0000000000000246 R12: 0000000000000000 [ 793.293484][ C1] R13: 00000000000927c0 R14: 00000000000a7bed R15: 00007ffc796bc620 [ 793.301502][ C1] [ 793.304633][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g32409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 793.316988][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=54576 [ 793.324891][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g32409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 793.336373][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 793.346361][ C1] rcu: RCU grace-period kthread stack dump: [ 793.352264][ C1] task:rcu_preempt state:I stack:28256 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 793.364308][ C1] Call Trace: [ 793.367604][ C1] [ 793.370560][ C1] __schedule+0xf43/0x5890 [ 793.375038][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 793.380305][ C1] ? __pfx___schedule+0x10/0x10 [ 793.385207][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.390984][ C1] ? schedule+0x298/0x350 [ 793.395538][ C1] ? __pfx_lock_release+0x10/0x10 [ 793.400616][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.406340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.412289][ C1] ? lock_acquire+0x2f/0xb0 [ 793.416839][ C1] ? schedule+0x1fd/0x350 [ 793.421225][ C1] schedule+0xe7/0x350 [ 793.425344][ C1] schedule_timeout+0x124/0x280 [ 793.430414][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 793.435837][ C1] ? __pfx_process_timeout+0x10/0x10 [ 793.441169][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.446857][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 793.452799][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.458665][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 793.464180][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 793.469002][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 793.474511][ C1] ? rcu_gp_init+0xc82/0x1630 [ 793.479415][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.485099][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 793.490350][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.496045][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.501910][ C1] rcu_gp_kthread+0x271/0x380 [ 793.506640][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 793.511889][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 793.517142][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.522830][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.528514][ C1] ? __kthread_parkme+0x148/0x220 [ 793.533570][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 793.538837][ C1] kthread+0x3b2/0x750 [ 793.542950][ C1] ? __pfx_kthread+0x10/0x10 [ 793.547587][ C1] ? __pfx_kthread+0x10/0x10 [ 793.552217][ C1] ret_from_fork+0x48/0x80 [ 793.556677][ C1] ? __pfx_kthread+0x10/0x10 [ 793.561309][ C1] ret_from_fork_asm+0x1a/0x30 [ 793.566126][ C1] [ 926.109733][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [kworker/u8:11:6122] [ 926.109770][ C1] Modules linked in: [ 926.109787][ C1] irq event stamp: 4527546 [ 926.109798][ C1] hardirqs last enabled at (4527545): [] irqentry_exit+0x3b/0x90 [ 926.109850][ C1] hardirqs last disabled at (4527546): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 926.109915][ C1] softirqs last enabled at (4527544): [] handle_softirqs+0x5bb/0x8f0 [ 926.109977][ C1] softirqs last disabled at (4527527): [] __irq_exit_rcu+0x109/0x170 [ 926.110039][ C1] CPU: 1 UID: 0 PID: 6122 Comm: kworker/u8:11 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 926.110079][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 926.110103][ C1] Workqueue: events_unbound toggle_allocation_gate [ 926.110158][ C1] RIP: 0010:smp_call_function_many_cond+0x4c4/0x12c0 [ 926.110223][ C1] Code: 92 00 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 6c 05 0c 00 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 [ 926.110258][ C1] RSP: 0018:ffffc9000afef928 EFLAGS: 00000293 [ 926.110283][ C1] RAX: 0000000000000000 RBX: ffff8880b8646880 RCX: ffffffff81ada87a [ 926.110307][ C1] RDX: ffff8880261a1e00 RSI: ffffffff81ada854 RDI: 0000000000000005 [ 926.110331][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 926.110352][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d11 [ 926.110374][ C1] R13: 0000000000000001 R14: ffff8880b873ff80 R15: ffff8880b8646888 [ 926.110400][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 926.110430][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.110454][ C1] CR2: 00007fe66cb762d8 CR3: 000000000df80000 CR4: 0000000000350ef0 [ 926.110477][ C1] Call Trace: [ 926.110489][ C1] [ 926.110503][ C1] ? watchdog_timer_fn+0x570/0x7d0 [ 926.110565][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 926.110622][ C1] ? __hrtimer_run_queues+0x5fe/0xae0 [ 926.110668][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 926.110701][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.110773][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 926.110832][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x400 [ 926.110893][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 926.110949][ C1] [ 926.110960][ C1] [ 926.110973][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 926.111037][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 926.111097][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 926.111159][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 926.111222][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 926.111298][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 926.111333][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 926.111371][ C1] text_poke_bp_batch+0x22b/0x760 [ 926.111414][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 926.111452][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 926.111489][ C1] ? srso_alias_return_thunk+0xc1/0xfbef5 [ 926.111547][ C1] ? text_poke_queue+0xef/0x180 [ 926.111595][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.111652][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 926.111708][ C1] text_poke_finish+0x30/0x40 [ 926.111745][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 926.111789][ C1] jump_label_update+0x1d7/0x400 [ 926.111835][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 926.111876][ C1] static_key_enable+0x1a/0x20 [ 926.111911][ C1] toggle_allocation_gate+0xfc/0x260 [ 926.111968][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 926.112020][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.112077][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 926.112120][ C1] ? process_one_work+0x921/0x1ba0 [ 926.112169][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.112226][ C1] ? lock_acquire+0x2f/0xb0 [ 926.112274][ C1] ? process_one_work+0x921/0x1ba0 [ 926.112324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.112383][ C1] process_one_work+0x9c8/0x1ba0 [ 926.112446][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 926.112486][ C1] ? __pfx_process_one_work+0x10/0x10 [ 926.112535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.112602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.112659][ C1] ? assign_work+0x1a0/0x250 [ 926.112708][ C1] worker_thread+0x6c8/0xf00 [ 926.112767][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.112827][ C1] ? __kthread_parkme+0x148/0x220 [ 926.112862][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.112920][ C1] ? __pfx_worker_thread+0x10/0x10 [ 926.112970][ C1] kthread+0x3b2/0x750 [ 926.113014][ C1] ? __pfx_kthread+0x10/0x10 [ 926.113056][ C1] ? lock_acquire+0x2f/0xb0 [ 926.113111][ C1] ? __pfx_kthread+0x10/0x10 [ 926.113155][ C1] ret_from_fork+0x48/0x80 [ 926.113202][ C1] ? __pfx_kthread+0x10/0x10 [ 926.113246][ C1] ret_from_fork_asm+0x1a/0x30 [ 926.113306][ C1] [ 926.113318][ C1] Sending NMI from CPU 1 to CPUs 0: [ 926.600057][ C0] NMI backtrace for cpu 0 [ 926.600076][ C0] CPU: 0 UID: 0 PID: 10505 Comm: syz.6.1281 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 926.600113][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 926.600132][ C0] RIP: 0010:check_preemption_disabled+0x16/0xe0 [ 926.600178][ C0] Code: ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 4d 3e b0 74 65 8b 05 42 3e b0 74 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c e9 ef a4 bc f5 [ 926.600209][ C0] RSP: 0018:ffffc90000007c18 EFLAGS: 00000096 [ 926.600234][ C0] RAX: 0000000080010003 RBX: 0000000000000000 RCX: ffffffff8195ba6c [ 926.600254][ C0] RDX: fffffbfff20c45e3 RSI: ffffffff8bd32ba0 RDI: ffffffff8bd32be0 [ 926.600276][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20c45e2 [ 926.600296][ C0] R10: ffffffff90622f17 R11: 0000000000000001 R12: 0000000000000000 [ 926.600317][ C0] R13: 000000000003da4c R14: 0000000000000001 R15: 0000000000000000 [ 926.600341][ C0] FS: 00007f285b9976c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 926.600369][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.600389][ C0] CR2: 00007f601c9762d8 CR3: 0000000056c62000 CR4: 0000000000350ef0 [ 926.600410][ C0] Call Trace: [ 926.600422][ C0] [ 926.600435][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 926.600482][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 926.600527][ C0] ? nmi_handle+0x1af/0x5d0 [ 926.600576][ C0] ? check_preemption_disabled+0x16/0xe0 [ 926.600613][ C0] ? default_do_nmi+0x6a/0x160 [ 926.600656][ C0] ? exc_nmi+0x170/0x1e0 [ 926.600698][ C0] ? end_repeat_nmi+0xf/0x53 [ 926.600751][ C0] ? trace_lock_acquire+0x3c/0x1f0 [ 926.600790][ C0] ? check_preemption_disabled+0x16/0xe0 [ 926.600831][ C0] ? check_preemption_disabled+0x16/0xe0 [ 926.600869][ C0] ? check_preemption_disabled+0x16/0xe0 [ 926.600906][ C0] [ 926.600916][ C0] [ 926.600927][ C0] rcu_is_watching+0x12/0xc0 [ 926.600961][ C0] trace_lock_acquire+0x14e/0x1f0 [ 926.600998][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.601050][ C0] ? debug_object_activate+0x149/0x4a0 [ 926.601088][ C0] lock_acquire+0x2f/0xb0 [ 926.601132][ C0] ? debug_object_activate+0x149/0x4a0 [ 926.601170][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 926.601218][ C0] ? debug_object_activate+0x149/0x4a0 [ 926.601252][ C0] debug_object_activate+0x149/0x4a0 [ 926.601287][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.601340][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 926.601387][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 926.601427][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.601480][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 926.601533][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 926.601589][ C0] ? __pfx_advance_sched+0x10/0x10 [ 926.601634][ C0] enqueue_hrtimer+0x25/0x3c0 [ 926.601665][ C0] __hrtimer_run_queues+0x903/0xae0 [ 926.601702][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 926.601733][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.601792][ C0] hrtimer_interrupt+0x392/0x8e0 [ 926.601830][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.601888][ C0] __sysvec_apic_timer_interrupt+0x112/0x400 [ 926.601942][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 926.601995][ C0] [ 926.602005][ C0] [ 926.602016][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 926.602065][ C0] RIP: 0010:kasan_check_range+0x12/0x1a0 [ 926.602104][ C0] Code: 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 <44> 0f b6 c2 48 01 f0 55 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff [ 926.602134][ C0] RSP: 0018:ffffc90004a8f768 EFLAGS: 00000202 [ 926.602159][ C0] RAX: ffff88805892da08 RBX: ffffc90004a8f938 RCX: ffffffff89f80f0e [ 926.602181][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805892da08 [ 926.602201][ C0] RBP: 1ffff92000951eef R08: 0000000000000005 R09: 0000000000000000 [ 926.602221][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90004a8fd98 [ 926.602241][ C0] R13: ffff88805892da00 R14: dffffc0000000000 R15: ffff88805892da08 [ 926.602268][ C0] ? __scm_recv_common.constprop.0+0x39e/0x630 [ 926.602311][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.602364][ C0] __scm_recv_common.constprop.0+0x39e/0x630 [ 926.602402][ C0] ? __pfx___scm_recv_common.constprop.0+0x10/0x10 [ 926.602449][ C0] __unix_dgram_recvmsg+0x789/0xe50 [ 926.602496][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 926.602539][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 926.602586][ C0] ? irqentry_exit+0x3b/0x90 [ 926.602618][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.602671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.602723][ C0] ? find_held_lock+0x2d/0x110 [ 926.602758][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.602811][ C0] ? __might_fault+0x13b/0x190 [ 926.602851][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 926.602893][ C0] ____sys_recvmsg+0x5fb/0x6b0 [ 926.602948][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 926.603007][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 926.603056][ C0] ___sys_recvmsg+0x115/0x1a0 [ 926.603096][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 926.603136][ C0] ? find_held_lock+0x2d/0x110 [ 926.603171][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.603233][ C0] ? __pfx___might_resched+0x10/0x10 [ 926.603283][ C0] ? __might_fault+0xe3/0x190 [ 926.603317][ C0] do_recvmmsg+0x2f8/0x740 [ 926.603359][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 926.603398][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.603452][ C0] ? find_held_lock+0x2d/0x110 [ 926.603487][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.603539][ C0] ? do_futex+0x123/0x350 [ 926.603585][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.603637][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.603693][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 926.603737][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 926.603787][ C0] do_syscall_64+0xcd/0x250 [ 926.603825][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.603872][ C0] RIP: 0033:0x7f285ab8cda9 [ 926.603896][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.603927][ C0] RSP: 002b:00007f285b997038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 926.603955][ C0] RAX: ffffffffffffffda RBX: 00007f285ada6080 RCX: 00007f285ab8cda9 [ 926.603976][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 926.603996][ C0] RBP: 00007f285ac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 926.604015][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 926.604035][ C0] R13: 0000000000000000 R14: 00007f285ada6080 R15: 00007fff29a8e758 [ 926.604066][ C0] [ 926.605051][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 927.268904][ C1] CPU: 1 UID: 0 PID: 6122 Comm: kworker/u8:11 Tainted: G L 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 927.281028][ C1] Tainted: [L]=SOFTLOCKUP [ 927.285374][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 927.295542][ C1] Workqueue: events_unbound toggle_allocation_gate [ 927.302114][ C1] Call Trace: [ 927.305440][ C1] [ 927.308305][ C1] dump_stack_lvl+0x3d/0x1f0 [ 927.312934][ C1] panic+0x71d/0x800 [ 927.316973][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.322749][ C1] ? __pfx_panic+0x10/0x10 [ 927.327373][ C1] ? __pfx__printk+0x10/0x10 [ 927.332019][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.337718][ C1] ? irq_work_claim+0x76/0xa0 [ 927.342449][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.348140][ C1] ? irq_work_queue+0x2a/0x80 [ 927.352884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.358569][ C1] ? watchdog_timer_fn+0x5f2/0x7d0 [ 927.363740][ C1] ? watchdog_timer_fn+0x5e5/0x7d0 [ 927.368916][ C1] watchdog_timer_fn+0x603/0x7d0 [ 927.373913][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 927.379688][ C1] __hrtimer_run_queues+0x5fe/0xae0 [ 927.384934][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 927.390692][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.396397][ C1] hrtimer_interrupt+0x392/0x8e0 [ 927.401419][ C1] __sysvec_apic_timer_interrupt+0x112/0x400 [ 927.407458][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 927.413151][ C1] [ 927.416104][ C1] [ 927.419051][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 927.425092][ C1] RIP: 0010:smp_call_function_many_cond+0x4c4/0x12c0 [ 927.431829][ C1] Code: 92 00 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 6c 05 0c 00 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 [ 927.451500][ C1] RSP: 0018:ffffc9000afef928 EFLAGS: 00000293 [ 927.457602][ C1] RAX: 0000000000000000 RBX: ffff8880b8646880 RCX: ffffffff81ada87a [ 927.465600][ C1] RDX: ffff8880261a1e00 RSI: ffffffff81ada854 RDI: 0000000000000005 [ 927.473807][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 927.481909][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d11 [ 927.490082][ C1] R13: 0000000000000001 R14: ffff8880b873ff80 R15: ffff8880b8646888 [ 927.498095][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 927.504230][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 927.510372][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 927.516526][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 927.521588][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 927.526741][ C1] text_poke_bp_batch+0x22b/0x760 [ 927.531813][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 927.536875][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 927.542456][ C1] ? srso_alias_return_thunk+0xc1/0xfbef5 [ 927.548258][ C1] ? text_poke_queue+0xef/0x180 [ 927.553335][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.559116][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 927.565505][ C1] text_poke_finish+0x30/0x40 [ 927.570309][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 927.576422][ C1] jump_label_update+0x1d7/0x400 [ 927.581425][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 927.587359][ C1] static_key_enable+0x1a/0x20 [ 927.592156][ C1] toggle_allocation_gate+0xfc/0x260 [ 927.597496][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 927.603438][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.609123][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 927.614359][ C1] ? process_one_work+0x921/0x1ba0 [ 927.619517][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.625199][ C1] ? lock_acquire+0x2f/0xb0 [ 927.629743][ C1] ? process_one_work+0x921/0x1ba0 [ 927.634908][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.640614][ C1] process_one_work+0x9c8/0x1ba0 [ 927.645624][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 927.651817][ C1] ? __pfx_process_one_work+0x10/0x10 [ 927.657239][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.662939][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.668627][ C1] ? assign_work+0x1a0/0x250 [ 927.673276][ C1] worker_thread+0x6c8/0xf00 [ 927.677927][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.683614][ C1] ? __kthread_parkme+0x148/0x220 [ 927.688672][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.694359][ C1] ? __pfx_worker_thread+0x10/0x10 [ 927.699522][ C1] kthread+0x3b2/0x750 [ 927.703640][ C1] ? __pfx_kthread+0x10/0x10 [ 927.708270][ C1] ? lock_acquire+0x2f/0xb0 [ 927.712863][ C1] ? __pfx_kthread+0x10/0x10 [ 927.717521][ C1] ret_from_fork+0x48/0x80 [ 927.722070][ C1] ? __pfx_kthread+0x10/0x10 [ 927.726709][ C1] ret_from_fork_asm+0x1a/0x30 [ 927.731530][ C1] [ 928.903325][ C1] Shutting down cpus with NMI [ 928.908355][ C1] Kernel Offset: disabled [ 928.912808][ C1] Rebooting in 86400 seconds..