last executing test programs: 1m31.542645554s ago: executing program 1 (id=2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000838}, 0x4044057) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0xfd9b}, 0x1, 0x0, 0x0, 0x400088d4}, 0x60a30c9b14323f1f) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1m31.275955363s ago: executing program 1 (id=6): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x1) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r1, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) socket(0x9, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000000c0)="b994bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000002c0)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1m29.477269596s ago: executing program 1 (id=7): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0xfe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x600}]) 1m28.135328302s ago: executing program 1 (id=9): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, {0x1, 0xfa, 0x28}}, 0xc) 1m27.342540366s ago: executing program 1 (id=14): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1m26.864624462s ago: executing program 32 (id=14): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1m7.884129345s ago: executing program 4 (id=58): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mount$9p_fd(0x0, 0x0, 0x0, 0x4810, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000416000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e8, 0x2, 0x3, 0x10f}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x87, 0x0, 0x1, 0x0, 0x0) 1m4.344849033s ago: executing program 4 (id=66): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4800) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setpipe(r2, 0x408, 0x7) 1m3.01414626s ago: executing program 4 (id=71): socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x80c60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000bbc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20000041}}], 0x1, 0xc004) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 1m1.156153119s ago: executing program 4 (id=73): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000100)=ANY=[@ANYBLOB="757466382c756d61736b3d30303030303030303030303030303030303030303030352c6b6565705f6c6173745f646f74732c6572726f72733d636f6e74696e75652c696f636861727365743d6d616363656e746575726f2c6572726f72733d636f6e74696e75652c696f636861727365743d63703835352c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303030303230312c006650c3e8dc968e3e6b90aa881ce4827eb933d4f0b3572c327dfd4500236f62e2bedb596d689249ca07c0c222397561040d8e476c4bfe8921293378f3aee34e068ac501aa2fc1cde00df9847780d226182d92814de1002e4709301cadd92a082bb385cc330729948c9802a2a33d3a598601677f930f38b98bd2391530c4fe505f4c4bb5c8599cba4c1a162931a8c1e77319150953d7fd87f562aedf6e7bc949471d8ee30b515860e789e5d4e9f3d8806bbbd95529daef35de382d853f82a3dc6137fcec3450c043ff39025003b730f522186ee305038d457a600ad3a5f3cf88ba32fa967a163ef96c6906ed5125b8c4e12c2bc683805f329043a293de8d0b"], 0x9, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) open(0x0, 0x1a1342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 59.517359127s ago: executing program 4 (id=77): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 57.903959659s ago: executing program 4 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0xe8d57000) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r2, 0xf6690000) 57.438895613s ago: executing program 33 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0xe8d57000) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r2, 0xf6690000) 21.047269489s ago: executing program 2 (id=182): openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x100003, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r2]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 14.98853446s ago: executing program 2 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_create(0x0, 0x0) 13.925208285s ago: executing program 2 (id=203): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0)=0x8, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x73422000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600001785"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000370402000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8304ffffffffffff330012800b000100697036746e6c00002400020008000800130000000400130014000200fe8000000000000000ffffffe80000bb45544387821a0d4a3a3f86de74c361dfcd34bfe397cf8c1865c40b0fd4ba85a521d064835617de4e979c08dffbd7598460006182c8b835"], 0x54}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x8, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x13) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfff, 0x0, 0x1}, 'syz1\x00', 0x3a}) 12.863247287s ago: executing program 2 (id=206): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000000c0)={@remote, @empty}, 0x8) 12.687249239s ago: executing program 2 (id=208): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x7) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 10.761498802s ago: executing program 3 (id=214): ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x2, 0x4) 10.007212601s ago: executing program 3 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x4000106b, r3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', '', [], 0xa, "f3"}, 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@resuid}, {@nojournal_checksum}, {@grpquota}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f0000000540)=""/7, 0x7}], 0x1) 9.084333254s ago: executing program 0 (id=221): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 8.880077412s ago: executing program 3 (id=222): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x10, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) syz_emit_ethernet(0x6e, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ce5f00", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "1d3a85", 0x0, 0x32, 0x0, @mcast2, @local, [], "7c85ac2e5138bc4a"}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5}, {0x5}, {0x6}]}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c4e649b7a9774b267cb1ecf22c1f9436c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x188, &(0x7f0000003c40)="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"}) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 8.406331877s ago: executing program 6 (id=225): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x3000000, &(0x7f0000000080)=ANY=[], 0x1, 0x5e0, &(0x7f0000002200)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x277fffffffe, 0x0, 0x8, r3}) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x100) ftruncate(r4, 0x2007ffc) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 6.847325963s ago: executing program 3 (id=227): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0x8, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6.691799134s ago: executing program 6 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$eJzsmb9rFEEUx78zu7e5i6JYaGFzTcAIZm93TyWNaOwDQiJqeZg1RDc5uRySBCyCjY1/gP+IRSoLsbGzsLJQQbAwpaCIjsyv3bkfq3fedXkfyOQ77+a9e2/m9i3sgiCII8unj98+PLu+uHoBwHHMYcbYv3h2hQ/urH//3KsY+WrrxOOD/ngMgBDF3C/5XrskAPBy6SQAHVYI1xuYMzFXwZWW3ATHeaNvgSG0ub7+lXunYLhjzPcd3a7hhxJZyu62s7V7G1kaySGWQyKHZpGdzv9wn2ENQNXk59a0vbv3oJUBHS2y1IqKiVFYRhQc/ZaSLSzyW+K4YvdVCCHP6/bTJ/tyHhp75OxfDI7Y6CYYVoxexAzCMKybaRo79Z/1i/iePjZ4ef2j1lYdZ/Hk4tTCpHGujlegvXp6P/otsvS7mHqBQc9PcPKA8jL7X3eZh7HItEb04vXcK/8oGLBMXTAjrgFQglkh15w5PHgz6PW5x/Juuewr2Ci125NTlmMY3ITpCtW4hh3u29ksWx7qddqIWt5ohkW2dZT+JHT/YD5wzulPvnNXaHQ3Hza2d/cWNjZb6+l6upUkzcvRxSi6lDRUb9bjX/pfVfWnWSd+pWRtwALstLrdTrwDdDtxPk/06HTclRftr8qHq/7HMf9TaMw9K79R9sHMH1f/5dnOe6XJEwRBEARBEARBEARBEARB/BP9hk4/kqyDwTyrVC/jKuapaC9+cgOPasCfAAAA///ei1Cr") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, &(0x7f0000000340), 0x0}, 0x20) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 6.445742594s ago: executing program 0 (id=230): flock(0xffffffffffffffff, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x2a5, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6e3c5325026f2f00fc010000000000000000000000000001fe8000000000000000000000000000bb"], 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x3) 5.868150624s ago: executing program 0 (id=231): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000940)=""/114, 0x72}], 0x1) 5.70246758s ago: executing program 5 (id=232): r0 = io_uring_setup(0x317, &(0x7f0000000040)={0x0, 0x8f21, 0x1000, 0x3, 0x218}) close_range(r0, 0xffffffffffffffff, 0x2) io_uring_setup(0x65bd, &(0x7f00000000c0)={0x0, 0xdc7, 0x20, 0x0, 0x2c, 0x0, r0}) 5.403203582s ago: executing program 5 (id=233): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getgid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r3, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 4.111528621s ago: executing program 0 (id=234): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0xfe, 0x150a, &(0x7f0000000780)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x8000, 0x8, 0xe, 0x4, 0x2, 0x276, 0x8, 0x9, 0x5, 0x3, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0xfffffffc, 0xfffffffe, 0x1, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x8000000, 0x7, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x7, 0x2, 0x1, 0x1, 0x8, 0x4, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x100, 0x1, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x1, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0xfffffffd, 0x3ff, 0x3, 0x6, 0x1007ffd, 0x100, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x400800, 0x4000004, 0x1000, 0x1, 0x5, 0x3fa6, 0x4, 0x10000, 0x5, 0xfc3, 0x4, 0xe47, 0x3, 0x100, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x2, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.920610168s ago: executing program 5 (id=235): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000001000)={0x81, 0x1, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0xfff, 0x8}) 3.919709503s ago: executing program 6 (id=236): mount(0x0, 0x0, &(0x7f0000000280)='fusectl\x00', 0x120008, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x2210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@nobarrier}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x3c, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x0, 0xff, 0x400, 0x2, 0xfffffffe, 0x2, 0x7, 0x4, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff6, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x6, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x0, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x1400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x6, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x800, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x3, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.839858406s ago: executing program 0 (id=237): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@nouid32}, {}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x456, &(0x7f0000000640)="$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") unshare(0x2a020400) r0 = socket(0xa, 0x3, 0xff) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) 3.456976308s ago: executing program 3 (id=238): socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x80c60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 3.352056535s ago: executing program 5 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_getscheduler(r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FIONCLEX(r1, 0x5450) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x8}, 0x50) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r4, r6, 0x0, 0x0, @val=@netfilter={0x0, 0x1, 0x6}}, 0x20) 3.346373138s ago: executing program 3 (id=240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40f03, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000003ac0)={0x3, 0x1, 0xffffffff, 0x0, 0x6}) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000001000000f8ffffffb702000008000000b713000000000000850000009b00000795"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x19) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x1, 0x1, 0x401, 0x0, 0x7ffffffb}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000001008510000006000000180000000000000000000000000000003f0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8010, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001480)=""/4122, 0x101a, 0x99) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x850) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280140001800800010000000109080003", @ANYBLOB="0436287f9739ab1f58174580ab4a500614e914404576b9add56677cfaf534715d06220e199cb1631972736061a60", @ANYRESDEC=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 3.327709815s ago: executing program 2 (id=241): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) 3.305180791s ago: executing program 6 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) timerfd_create(0x0, 0x0) 2.699166477s ago: executing program 0 (id=243): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x40810, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd']) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.000756784s ago: executing program 5 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r1 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x801) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f6, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setreuid(0x0, 0xee00) 1.999764018s ago: executing program 6 (id=245): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c90012000e00050014050a0020e8645126"], 0x17) sched_setscheduler(0x0, 0x2, 0x0) 60.37326ms ago: executing program 5 (id=246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$eJzsmb9rFEEUx78zu7e5i6JYaGFzTcAIZm93TyWNaOwDQiJqeZg1RDc5uRySBCyCjY1/gP+IRSoLsbGzsLJQQbAwpaCIjsyv3bkfq3fedXkfyOQ77+a9e2/m9i3sgiCII8unj98+PLu+uHoBwHHMYcbYv3h2hQ/urH//3KsY+WrrxOOD/ngMgBDF3C/5XrskAPBy6SQAHVYI1xuYMzFXwZWW3ATHeaNvgSG0ub7+lXunYLhjzPcd3a7hhxJZyu62s7V7G1kaySGWQyKHZpGdzv9wn2ENQNXk59a0vbv3oJUBHS2y1IqKiVFYRhQc/ZaSLSzyW+K4YvdVCCHP6/bTJ/tyHhp75OxfDI7Y6CYYVoxexAzCMKybaRo79Z/1i/iePjZ4ef2j1lYdZ/Hk4tTCpHGujlegvXp6P/otsvS7mHqBQc9PcPKA8jL7X3eZh7HItEb04vXcK/8oGLBMXTAjrgFQglkh15w5PHgz6PW5x/Juuewr2Ci125NTlmMY3ITpCtW4hh3u29ksWx7qddqIWt5ohkW2dZT+JHT/YD5wzulPvnNXaHQ3Hza2d/cWNjZb6+l6upUkzcvRxSi6lDRUb9bjX/pfVfWnWSd+pWRtwALstLrdTrwDdDtxPk/06HTclRftr8qHq/7HMf9TaMw9K79R9sHMH1f/5dnOe6XJEwRBEARBEARBEARBEARB/BP9hk4/kqyDwTyrVC/jKuapaC9+cgOPasCfAAAA///ei1Cr") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, &(0x7f0000000340), 0x0}, 0x20) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 0s ago: executing program 6 (id=247): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 65.822942][ T5805] cgroup: Unknown subsys name 'net' [ 65.910442][ T5805] cgroup: Unknown subsys name 'cpuset' [ 65.919181][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.258106][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.366698][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.375585][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.384340][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.393439][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.393955][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.401637][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.407577][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.414962][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.421876][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.429756][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.436619][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.445981][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.449700][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.457011][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.465419][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.476837][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.482240][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.492228][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.499743][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.520233][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.537264][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.544635][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.552360][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.563836][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.573328][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.581896][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.590226][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.075740][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 72.317971][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 72.341707][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 72.353535][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.361442][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.368892][ T5823] bridge_slave_0: entered allmulticast mode [ 72.376293][ T5823] bridge_slave_0: entered promiscuous mode [ 72.430329][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.437992][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.445522][ T5823] bridge_slave_1: entered allmulticast mode [ 72.454413][ T5823] bridge_slave_1: entered promiscuous mode [ 72.534982][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.546148][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 72.566934][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.609678][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.741628][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.749605][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.756785][ T5817] bridge_slave_0: entered allmulticast mode [ 72.764295][ T5817] bridge_slave_0: entered promiscuous mode [ 72.774764][ T5823] team0: Port device team_slave_0 added [ 72.783367][ T5823] team0: Port device team_slave_1 added [ 72.794756][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.802077][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.809308][ T5818] bridge_slave_0: entered allmulticast mode [ 72.816579][ T5818] bridge_slave_0: entered promiscuous mode [ 72.831244][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.838714][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.845904][ T5817] bridge_slave_1: entered allmulticast mode [ 72.853560][ T5817] bridge_slave_1: entered promiscuous mode [ 72.876821][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.884103][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.891646][ T5818] bridge_slave_1: entered allmulticast mode [ 72.899022][ T5818] bridge_slave_1: entered promiscuous mode [ 73.001935][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.009058][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.035003][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.059853][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.067129][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.074593][ T5832] bridge_slave_0: entered allmulticast mode [ 73.082193][ T5832] bridge_slave_0: entered promiscuous mode [ 73.090165][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.097670][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.104842][ T5828] bridge_slave_0: entered allmulticast mode [ 73.112266][ T5828] bridge_slave_0: entered promiscuous mode [ 73.123787][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.138218][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.148694][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.155663][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.181854][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.200833][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.210561][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.221602][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.228944][ T5832] bridge_slave_1: entered allmulticast mode [ 73.236253][ T5832] bridge_slave_1: entered promiscuous mode [ 73.243460][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.250809][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.258192][ T5828] bridge_slave_1: entered allmulticast mode [ 73.265468][ T5828] bridge_slave_1: entered promiscuous mode [ 73.306163][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.353966][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.366173][ T5817] team0: Port device team_slave_0 added [ 73.400441][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.413508][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.425265][ T5817] team0: Port device team_slave_1 added [ 73.456602][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.492331][ T5818] team0: Port device team_slave_0 added [ 73.538375][ T5825] Bluetooth: hci0: command tx timeout [ 73.538380][ T51] Bluetooth: hci2: command tx timeout [ 73.558289][ T5818] team0: Port device team_slave_1 added [ 73.570112][ T5823] hsr_slave_0: entered promiscuous mode [ 73.576971][ T5823] hsr_slave_1: entered promiscuous mode [ 73.600864][ T5828] team0: Port device team_slave_0 added [ 73.607811][ T5825] Bluetooth: hci1: command tx timeout [ 73.607817][ T51] Bluetooth: hci3: command tx timeout [ 73.620735][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.628112][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.654025][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.693907][ T5832] team0: Port device team_slave_0 added [ 73.699714][ T5825] Bluetooth: hci4: command tx timeout [ 73.708390][ T5828] team0: Port device team_slave_1 added [ 73.715371][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.722353][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.748666][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.761082][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.768238][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.794464][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.808117][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.815060][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.841207][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.854776][ T5832] team0: Port device team_slave_1 added [ 73.943385][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.950615][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.976964][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.010081][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.017097][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.043468][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.056182][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.063189][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.090062][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.102491][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.109685][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.135594][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.201997][ T5817] hsr_slave_0: entered promiscuous mode [ 74.209094][ T5817] hsr_slave_1: entered promiscuous mode [ 74.215859][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 74.221726][ T5817] Cannot create hsr debugfs directory [ 74.335641][ T5818] hsr_slave_0: entered promiscuous mode [ 74.342647][ T5818] hsr_slave_1: entered promiscuous mode [ 74.349511][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 74.355254][ T5818] Cannot create hsr debugfs directory [ 74.397881][ T5828] hsr_slave_0: entered promiscuous mode [ 74.404678][ T5828] hsr_slave_1: entered promiscuous mode [ 74.411565][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 74.417342][ T5828] Cannot create hsr debugfs directory [ 74.486724][ T5832] hsr_slave_0: entered promiscuous mode [ 74.493830][ T5832] hsr_slave_1: entered promiscuous mode [ 74.500517][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 74.506250][ T5832] Cannot create hsr debugfs directory [ 74.982673][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.000935][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.020749][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.031582][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.083979][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.101686][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.113281][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.123859][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.213718][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.238693][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.261637][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.299257][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.396803][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.408006][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.419744][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.443661][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.480862][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.550372][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.570161][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.581812][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.593899][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.607405][ T5825] Bluetooth: hci0: command tx timeout [ 75.607706][ T51] Bluetooth: hci2: command tx timeout [ 75.632268][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.671840][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.680593][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.687911][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.688087][ T51] Bluetooth: hci3: command tx timeout [ 75.696546][ T5825] Bluetooth: hci1: command tx timeout [ 75.715411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.722591][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.767721][ T5825] Bluetooth: hci4: command tx timeout [ 75.795797][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.861079][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.868425][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.894651][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.901836][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.982880][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.057038][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.124074][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.164801][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.171963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.199424][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.221936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.229075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.271024][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.299577][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.363051][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.370228][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.414532][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.421718][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.460195][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.486576][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.528348][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.535455][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.583904][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.594800][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.601930][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.791568][ T5823] veth0_vlan: entered promiscuous mode [ 76.854055][ T5823] veth1_vlan: entered promiscuous mode [ 76.939354][ T5817] veth0_vlan: entered promiscuous mode [ 76.983748][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.012555][ T5817] veth1_vlan: entered promiscuous mode [ 77.101154][ T5823] veth0_macvtap: entered promiscuous mode [ 77.131352][ T5823] veth1_macvtap: entered promiscuous mode [ 77.146749][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.242851][ T5817] veth0_macvtap: entered promiscuous mode [ 77.254628][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.275971][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.290837][ T5817] veth1_macvtap: entered promiscuous mode [ 77.360091][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.374711][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.418369][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.441817][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.457113][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.476605][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.498533][ T5818] veth0_vlan: entered promiscuous mode [ 77.510898][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.533967][ T5818] veth1_vlan: entered promiscuous mode [ 77.562765][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.572223][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.590665][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.600138][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.689869][ T5825] Bluetooth: hci2: command tx timeout [ 77.689910][ T51] Bluetooth: hci0: command tx timeout [ 77.730041][ T5818] veth0_macvtap: entered promiscuous mode [ 77.767502][ T51] Bluetooth: hci3: command tx timeout [ 77.767515][ T5825] Bluetooth: hci1: command tx timeout [ 77.789903][ T5818] veth1_macvtap: entered promiscuous mode [ 77.798020][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.805964][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.838219][ T5832] veth0_vlan: entered promiscuous mode [ 77.847035][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.855259][ T51] Bluetooth: hci4: command tx timeout [ 77.888959][ T5828] veth0_vlan: entered promiscuous mode [ 77.901408][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.931189][ T5832] veth1_vlan: entered promiscuous mode [ 77.947292][ T3429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.956068][ T3429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.969228][ T5828] veth1_vlan: entered promiscuous mode [ 77.983532][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.003002][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.010273][ T3429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.023003][ T3429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.070169][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.081747][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.113445][ T5832] veth0_macvtap: entered promiscuous mode [ 78.124463][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.180152][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.181801][ T5832] veth1_macvtap: entered promiscuous mode [ 78.194845][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.293896][ T5828] veth0_macvtap: entered promiscuous mode [ 78.319163][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.399947][ T5828] veth1_macvtap: entered promiscuous mode [ 78.435151][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.472648][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.503292][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.512059][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.595262][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.606484][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.052301][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.062916][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 79.358873][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.381254][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.037069][ T5825] Bluetooth: hci2: command tx timeout [ 80.042727][ T5825] Bluetooth: hci0: command tx timeout [ 80.048261][ T5825] Bluetooth: hci3: command tx timeout [ 80.053717][ T5825] Bluetooth: hci1: command tx timeout [ 80.059523][ T5825] Bluetooth: hci4: command tx timeout [ 80.477410][ T5948] loop1: detected capacity change from 0 to 512 [ 80.480768][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.496105][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.498692][ T5948] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.523024][ T5948] EXT4-fs: inline encryption not supported [ 80.529572][ T5948] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.540336][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.553094][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.569496][ T5948] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.590905][ T5948] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.606912][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.617341][ T5948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.651825][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.703353][ T5948] EXT4-fs (loop1): 1 truncate cleaned up [ 80.732125][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.796184][ T5948] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 80.811356][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.830527][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.838248][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.849761][ T5948] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 80.902582][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.915990][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.954110][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.962436][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.049835][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 81.060456][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.069710][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.185826][ T5958] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4'. [ 81.680222][ T5817] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 81.718579][ T5817] EXT4-fs (loop1): Remounting filesystem read-only [ 82.317864][ T5864] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.387256][ T5889] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 82.439100][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.477246][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 82.502639][ T5864] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.515171][ T5864] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.536323][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.546399][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.559455][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.570236][ T5889] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.570280][ T5889] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.585485][ T5864] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.606990][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 82.627481][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.644902][ T5864] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.676764][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.677291][ T5889] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 82.733661][ T5864] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.747855][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.759394][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.782367][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.816359][ T5889] usb 1-1: config 0 descriptor?? [ 82.821187][ T5864] usb 5-1: config 0 descriptor?? [ 82.831862][ T5963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.922336][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.061751][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.133676][ T5864] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 83.840077][ C1] usblp0: nonzero read bulk status received: -71 [ 83.874042][ T5889] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 83.884838][ T5889] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 83.905302][ T5889] hid-steam 0003:28DE:1102.0001: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 84.007993][ T5889] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 84.057642][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.067961][ T5889] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0001/input/input5 [ 84.068067][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.100088][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.113499][ T5903] usb 5-1: USB disconnect, device number 2 [ 84.128011][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.139259][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.219138][ T5903] usblp0: removed [ 84.317525][ T12] bridge_slave_1: left allmulticast mode [ 84.340945][ T12] bridge_slave_1: left promiscuous mode [ 84.388558][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.401769][ T5889] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 84.783803][ T12] bridge_slave_0: left allmulticast mode [ 84.890564][ T12] bridge_slave_0: left promiscuous mode [ 84.916568][ T5889] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 84.927108][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.939646][ T5889] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 85.213969][ T5903] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 85.462525][ T6002] usb usb8: usbfs: process 6002 (syz.4.19) did not claim interface 0 before use [ 85.895792][ T5982] loop3: detected capacity change from 0 to 40427 [ 86.139909][ T5982] F2FS-fs (loop3): invalid crc value [ 86.163691][ T5982] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 86.304760][ T5822] Bluetooth: hci1: command tx timeout [ 86.784319][ T794] cfg80211: failed to load regulatory.db [ 87.606015][ T5889] usb 1-1: USB disconnect, device number 2 [ 88.164897][ T6024] loop3: detected capacity change from 0 to 512 [ 88.798516][ T6024] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.920445][ T5889] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 88.957367][ T6024] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 88.995212][ T5822] Bluetooth: hci1: command tx timeout [ 89.037025][ T6024] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.27: Corrupt directory, running e2fsck is recommended [ 89.203893][ T6024] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 89.215979][ T6024] EXT4-fs error (device loop3): ext4_iget_extra_inode:5052: inode #15: comm syz.3.27: corrupted in-inode xattr: e_name out of bounds [ 89.238262][ T6024] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.240490][ T6024] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.27: couldn't read orphan inode 15 (err -117) [ 89.241067][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.249720][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 89.249776][ C0] EXT4-fs (loop3): initial error at time 1770123555: ext4_iget_extra_inode:5052: inode 15 [ 89.249806][ C0] EXT4-fs (loop3): last error at time 1770123555: ext4_iget_extra_inode:5052: inode 15 [ 89.250880][ T6024] loop3: lost filesystem error report for type 5 error -117 [ 89.335846][ T6024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.575888][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.673397][ T12] bond0 (unregistering): Released all slaves [ 89.680938][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.758092][ T6009] tipc: Started in network mode [ 89.763192][ T6009] tipc: Node identity 84e, cluster identity 4711 [ 89.769636][ T6009] tipc: Node number set to 2126 [ 89.811413][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.977538][ T5889] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 89.986864][ T5889] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 90.002321][ T5889] usb 1-1: config 220 has no interface number 2 [ 90.011195][ T5889] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 90.025191][ T5889] usb 1-1: config 220 interface 0 has no altsetting 0 [ 90.047871][ T5889] usb 1-1: config 220 interface 76 has no altsetting 0 [ 90.068783][ T5889] usb 1-1: config 220 interface 1 has no altsetting 0 [ 90.094498][ T5889] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.136656][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.156134][ T5889] usb 1-1: Product: syz [ 90.161720][ T5889] usb 1-1: Manufacturer: syz [ 90.166471][ T5889] usb 1-1: SerialNumber: syz [ 91.052083][ T5822] Bluetooth: hci1: command tx timeout [ 92.032289][ T5889] uvcvideo 1-1:220.1: Unknown video format 448b07f1-fe7d-ffff-ffff-030000ffffff [ 92.067389][ T5889] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 92.074755][ T5889] uvcvideo 1-1:220.0: No valid video chain found. [ 92.951956][ T6059] loop3: detected capacity change from 0 to 256 [ 93.038345][ T5889] usb 1-1: selecting invalid altsetting 0 [ 93.140098][ T5822] Bluetooth: hci1: command tx timeout [ 93.236687][ T6059] FAT-fs (loop3): codepage cp5250 not found [ 93.353422][ T5889] usb 1-1: selecting invalid altsetting 0 [ 93.370745][ T5889] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 93.459823][ T5889] usb 1-1: USB disconnect, device number 3 [ 93.518051][ T6067] loop0: detected capacity change from 0 to 512 [ 93.540188][ T6067] EXT4-fs: Ignoring removed bh option [ 93.572191][ T6067] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 93.623563][ T6067] EXT4-fs (loop0): 1 truncate cleaned up [ 93.639563][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.862186][ T5941] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.074370][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 94.123678][ T5941] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 94.194883][ T12] hsr_slave_0: left promiscuous mode [ 94.205258][ T5941] usb 4-1: config 1 interface 0 has no altsetting 0 [ 94.229340][ T12] hsr_slave_1: left promiscuous mode [ 94.247716][ T5941] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 94.279123][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.305758][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.336608][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.358530][ T5941] usb 4-1: Product: syz [ 94.391196][ T5941] usb 4-1: Manufacturer: syz [ 94.395843][ T5941] usb 4-1: SerialNumber: syz [ 94.449555][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.495147][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.519994][ T6073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.710034][ T12] veth1_macvtap: left promiscuous mode [ 94.716035][ T12] veth0_macvtap: left promiscuous mode [ 94.741110][ T12] veth1_vlan: left promiscuous mode [ 94.767128][ T12] veth0_vlan: left promiscuous mode [ 94.847227][ T5941] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.030099][ T30] audit: type=1800 audit(1770123561.666:2): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.36" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 95.158118][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 95.165417][ T5941] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.178220][ T5941] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.189714][ T5941] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.202799][ T5941] usb 3-1: config 1 interface 0 has no altsetting 0 [ 95.341640][ T5941] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 95.425053][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.473406][ T5941] usb 3-1: Product: syz [ 95.520610][ T5941] usb 3-1: Manufacturer: syz [ 95.595387][ T5941] usb 3-1: SerialNumber: syz [ 95.950859][ T5941] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 96.617889][ T5941] usb 4-1: USB disconnect, device number 2 [ 96.649412][ T6099] loop3: detected capacity change from 0 to 16 [ 96.725365][ T6099] erofs (device loop3): mounted with root inode @ nid 36. [ 96.761868][ T6099] erofs (device loop3): compressed inode (nid 89) is invalid in a plain filesystem [ 97.208788][ T12] team0 (unregistering): Port device team_slave_1 removed [ 97.232001][ T6105] loop3: detected capacity change from 0 to 512 [ 97.369905][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.383285][ T12] team0 (unregistering): Port device team_slave_0 removed [ 97.421191][ T6105] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.637264][ T5889] usb 3-1: USB disconnect, device number 2 [ 97.764500][ T5889] usblp0: removed [ 97.794349][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.803645][ T6110] Bluetooth: hci5: Frame reassembly failed (-90) [ 97.819763][ T3460] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.919158][ T6112] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.050684][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.280261][ T6096] tipc: Started in network mode [ 98.285218][ T6096] tipc: Node identity 84e, cluster identity 4711 [ 98.295231][ T6096] tipc: Node number set to 2126 [ 98.325660][ T5988] chnl_net:caif_netlink_parms(): no params data found [ 99.284788][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.333542][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.372194][ T5988] bridge_slave_0: entered allmulticast mode [ 99.404921][ T5988] bridge_slave_0: entered promiscuous mode [ 99.455301][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.477580][ T5889] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.486700][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.516117][ T5988] bridge_slave_1: entered allmulticast mode [ 99.555061][ T5988] bridge_slave_1: entered promiscuous mode [ 99.658700][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 99.682103][ T5889] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 99.723380][ T5889] usb 1-1: config 1 interface 0 has no altsetting 0 [ 99.771934][ T5889] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 99.793514][ T5988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.831208][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.850288][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 99.860579][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.918857][ T5889] usb 1-1: Product: syz [ 99.925155][ T5988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.956384][ T5889] usb 1-1: Manufacturer: syz [ 99.995263][ T5889] usb 1-1: SerialNumber: syz [ 100.349844][ T5988] team0: Port device team_slave_0 added [ 100.911940][ T6130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.001042][ T5988] team0: Port device team_slave_1 added [ 101.141691][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.180484][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.516586][ T5988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.781315][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.797208][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.843578][ T5988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.012636][ T6166] loop3: detected capacity change from 0 to 512 [ 102.096846][ T6166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.187343][ T6166] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.236870][ T5988] hsr_slave_0: entered promiscuous mode [ 102.255072][ T5988] hsr_slave_1: entered promiscuous mode [ 102.263882][ T5988] debugfs: 'hsr0' already exists in 'hsr' [ 102.272580][ T5903] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.281703][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.289031][ T5988] Cannot create hsr debugfs directory [ 102.451897][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 102.467263][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.503737][ T5903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.527853][ T5903] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 102.589536][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.678968][ T5941] usb 1-1: USB disconnect, device number 4 [ 103.088328][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.096451][ T5903] usb 3-1: SerialNumber: syz [ 103.152337][ T5903] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 103.361397][ T5903] usb 3-1: USB disconnect, device number 3 [ 105.425581][ T5988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.568434][ T5988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.676718][ T5988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.740567][ T5988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.646289][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.818134][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 108.844011][ T9] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 108.871992][ T6242] loop4: detected capacity change from 0 to 256 [ 108.897203][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 108.928295][ T6242] exfat: Deprecated parameter 'utf8' [ 108.977110][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 109.004570][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.078895][ T9] usb 3-1: Product: syz [ 109.086555][ T6242] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 109.102326][ T9] usb 3-1: Manufacturer: syz [ 109.108454][ T9] usb 3-1: SerialNumber: syz [ 109.153905][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.691462][ T6235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.913395][ T24] usb 3-1: USB disconnect, device number 4 [ 109.997870][ T5988] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.040546][ T6254] loop2: detected capacity change from 0 to 128 [ 110.043370][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.054022][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.064364][ T6254] ======================================================= [ 110.064364][ T6254] WARNING: The mand mount option has been deprecated and [ 110.064364][ T6254] and is ignored by this kernel. Remove the mand [ 110.064364][ T6254] option from the mount to silence this warning. [ 110.064364][ T6254] ======================================================= [ 110.077821][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.106396][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.216836][ T6254] msdos: Bad value for 'nfs' [ 111.648583][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.679102][ T6284] loop0: detected capacity change from 0 to 2048 [ 111.797042][ T6284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.949585][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.090103][ T6003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.636973][ T6003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.709446][ T6321] loop3: detected capacity change from 0 to 512 [ 113.832182][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.842205][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.850860][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.862986][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.873716][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.885657][ T6321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.990636][ T6321] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.099647][ T6003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.144837][ T5988] veth0_vlan: entered promiscuous mode [ 114.322730][ T6003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.852528][ T5988] veth1_vlan: entered promiscuous mode [ 114.987997][ T6315] loop0: detected capacity change from 0 to 40427 [ 115.048264][ T6315] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 115.077197][ T6315] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.302936][ T6315] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 115.339867][ T6003] bridge_slave_1: left allmulticast mode [ 115.345536][ T6003] bridge_slave_1: left promiscuous mode [ 115.359963][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.384679][ T6315] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.393988][ T6003] bridge_slave_0: left allmulticast mode [ 115.401474][ T6315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.409138][ T6003] bridge_slave_0: left promiscuous mode [ 115.415942][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.483704][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.595285][ T6340] loop3: detected capacity change from 0 to 128 [ 115.643271][ T6340] syz.3.90: attempt to access beyond end of device [ 115.643271][ T6340] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 115.888165][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.918666][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.927717][ T5822] Bluetooth: hci4: command tx timeout [ 115.937012][ T6003] bond0 (unregistering): Released all slaves [ 116.100963][ T6003] tipc: Left network mode [ 116.398534][ T5988] veth0_macvtap: entered promiscuous mode [ 116.980291][ T5988] veth1_macvtap: entered promiscuous mode [ 117.064770][ T6322] chnl_net:caif_netlink_parms(): no params data found [ 117.324340][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.622946][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.777298][ T6003] hsr_slave_0: left promiscuous mode [ 117.851712][ T6003] hsr_slave_1: left promiscuous mode [ 117.888138][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.910440][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.007309][ T5822] Bluetooth: hci4: command tx timeout [ 118.851453][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.867458][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.887744][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.087508][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 119.112072][ T5833] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 119.151642][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.203729][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 119.248709][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 119.298667][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.359935][ T5833] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.396366][ T5833] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.428761][ T5833] usb 4-1: Manufacturer: syz [ 119.483197][ T5833] usb 4-1: config 0 descriptor?? [ 119.627096][ T6003] veth1_macvtap: left promiscuous mode [ 119.648571][ T6003] veth0_macvtap: left promiscuous mode [ 119.676347][ T6003] veth1_vlan: left promiscuous mode [ 119.702104][ T6003] veth0_vlan: left promiscuous mode [ 119.799762][ T5833] rc_core: IR keymap rc-hauppauge not found [ 119.815446][ T5833] Registered IR keymap rc-empty [ 119.854003][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.918620][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.933573][ T6386] loop0: detected capacity change from 0 to 512 [ 119.952739][ T5833] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 119.984470][ T5833] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 120.024028][ T6386] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 120.052918][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.060434][ T6386] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.98: attempt to clear invalid blocks 2 len 1 [ 120.075453][ T6386] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.077416][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 120.093134][ C0] EXT4-fs (loop0): initial error at time 1770123586: ext4_clear_blocks:876: inode 13 [ 120.097978][ T6386] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 120.102722][ C0] EXT4-fs (loop0): last error at time 1770123586: ext4_clear_blocks:876: inode 13 [ 120.106991][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.137387][ T5822] Bluetooth: hci4: command tx timeout [ 120.137882][ T6386] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.98: invalid indirect mapped block 1819239214 (level 0) [ 120.166460][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.190030][ T6386] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.191987][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.208277][ T6386] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.98: invalid indirect mapped block 1819239214 (level 1) [ 120.247420][ T6386] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.257048][ T6386] EXT4-fs (loop0): 1 truncate cleaned up [ 120.281414][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.296849][ T6386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.311223][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.341215][ T6386] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 120.347593][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.382730][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.387780][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.427573][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.468379][ T5833] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.491663][ T5833] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 120.505647][ T5833] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 120.550727][ T6393] loop2: detected capacity change from 0 to 512 [ 120.558485][ T5833] usb 4-1: USB disconnect, device number 3 [ 120.580008][ T6393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.614622][ T6393] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.100: inode has both inline data and extents flags [ 120.629047][ T6393] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.629356][ T6393] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.100: couldn't read orphan inode 15 (err -117) [ 120.650865][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 120.650894][ C1] EXT4-fs (loop2): initial error at time 1770123587: ext4_orphan_get:1391: inode 15 [ 120.650925][ C1] EXT4-fs (loop2): last error at time 1770123587: ext4_orphan_get:1391: inode 15 [ 120.687575][ T6393] loop2: lost filesystem error report for type 5 error -117 [ 120.705250][ T6393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.779812][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.828309][ T5951] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.952710][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 120.987374][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 121.001430][ T5951] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 121.016518][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 121.025091][ T5951] usb 1-1: config 1 interface 0 has no altsetting 0 [ 121.049369][ T5951] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 121.079523][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.094436][ T5951] usb 1-1: Product: syz [ 121.103184][ T5951] usb 1-1: Manufacturer: syz [ 121.109831][ T5951] usb 1-1: SerialNumber: syz [ 121.124365][ T6394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.272211][ T6397] loop2: detected capacity change from 0 to 40427 [ 121.290400][ T6397] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 121.315701][ T6397] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 121.439053][ T6397] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 121.454474][ T6397] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 121.463675][ T6397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.747459][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.774600][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.864466][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.900570][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.945474][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.971533][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.992105][ T6322] bridge_slave_0: entered allmulticast mode [ 122.015033][ T6322] bridge_slave_0: entered promiscuous mode [ 122.104450][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.127427][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.140498][ T6322] bridge_slave_1: entered allmulticast mode [ 122.162338][ T6322] bridge_slave_1: entered promiscuous mode [ 122.168319][ T5822] Bluetooth: hci4: command tx timeout [ 122.292329][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.340064][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.465519][ T6322] team0: Port device team_slave_0 added [ 122.506174][ T6322] team0: Port device team_slave_1 added [ 122.636020][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.637684][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.650932][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.672113][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.697937][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.762522][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.789609][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.821303][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.956871][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.984605][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.156805][ T6322] hsr_slave_0: entered promiscuous mode [ 123.172345][ T6322] hsr_slave_1: entered promiscuous mode [ 123.179828][ T6322] debugfs: 'hsr0' already exists in 'hsr' [ 123.185566][ T6322] Cannot create hsr debugfs directory [ 123.520023][ T5889] usb 1-1: USB disconnect, device number 5 [ 124.720307][ T6322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.756911][ T6322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.825247][ T6322] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.871652][ T6322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 125.125948][ T6438] loop0: detected capacity change from 0 to 40427 [ 125.151384][ T6438] F2FS-fs (loop0): invalid crc value [ 125.325555][ T6438] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.384175][ T6322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.463322][ T6438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.488038][ T6322] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.524379][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.531629][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.546330][ T30] audit: type=1800 audit(1770123592.186:3): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.105" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 125.565323][ T6471] loop2: detected capacity change from 0 to 256 [ 125.618947][ T6471] exfat: Deprecated parameter 'utf8' [ 125.626663][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.633876][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.695344][ T6471] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 125.734543][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'. [ 126.080401][ T6486] loop2: detected capacity change from 0 to 256 [ 126.094535][ T6486] FAT-fs (loop2): bogus number of FAT sectors [ 126.112688][ T5828] syz-executor: attempt to access beyond end of device [ 126.112688][ T5828] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.194886][ T6486] FAT-fs (loop2): Can't find a valid FAT filesystem [ 126.203637][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 126.203660][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 126.203677][ T5828] Call Trace: [ 126.203687][ T5828] [ 126.203696][ T5828] dump_stack_lvl+0xe8/0x150 [ 126.203725][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 126.203755][ T5828] f2fs_write_end_io+0xcdb/0xff0 [ 126.203796][ T5828] __submit_merged_bio+0x256/0x700 [ 126.203822][ T5828] __submit_merged_write_cond+0x3c3/0x4e0 [ 126.203852][ T5828] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 126.203896][ T5828] f2fs_write_data_pages+0x2970/0x35e0 [ 126.203954][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.203988][ T5828] ? unwind_get_return_address+0x4d/0x90 [ 126.204012][ T5828] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 126.204057][ T5828] ? check_noncircular+0xda/0x150 [ 126.204089][ T5828] ? lockdep_unlock+0x5d/0xd0 [ 126.204107][ T5828] ? __lock_acquire+0x146e/0x2cf0 [ 126.204151][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.204180][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 126.204199][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.204223][ T5828] do_writepages+0x32e/0x550 [ 126.204256][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 126.204279][ T5828] filemap_fdatawrite+0x1e9/0x2f0 [ 126.204305][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 126.204372][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 126.204394][ T5828] f2fs_sync_dirty_inodes+0x30e/0x860 [ 126.204433][ T5828] f2fs_write_checkpoint+0x9cf/0x2680 [ 126.204489][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 126.204564][ T5828] kill_f2fs_super+0x314/0x720 [ 126.204598][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 126.204634][ T5828] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.204667][ T5828] deactivate_locked_super+0xbc/0x130 [ 126.204693][ T5828] cleanup_mnt+0x437/0x4d0 [ 126.204711][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.204732][ T5828] task_work_run+0x1d9/0x270 [ 126.204754][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 126.204783][ T5828] exit_to_user_mode_loop+0xed/0x480 [ 126.204803][ T5828] ? rcu_is_watching+0x15/0xb0 [ 126.204830][ T5828] do_syscall_64+0x32d/0xf80 [ 126.204849][ T5828] ? trace_irq_disable+0x3b/0x150 [ 126.204872][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.204890][ T5828] ? clear_bhb_loop+0x40/0x90 [ 126.204912][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.204930][ T5828] RIP: 0033:0x7f810c79c117 [ 126.204959][ T5828] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 126.204973][ T5828] RSP: 002b:00007ffcdcdd7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 126.204991][ T5828] RAX: 0000000000000000 RBX: 00007f810c80471f RCX: 00007f810c79c117 [ 126.205004][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdcdd72d0 [ 126.205015][ T5828] RBP: 00007ffcdcdd72d0 R08: 00007ffcdcdd82d0 R09: 00000000ffffffff [ 126.205028][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdcdd8360 [ 126.205039][ T5828] R13: 00007f810c80471f R14: 000000000001eb54 R15: 00007ffcdcdd83a0 [ 126.205070][ T5828] [ 126.205078][ T5828] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 126.763315][ T6322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.288047][ T6322] veth0_vlan: entered promiscuous mode [ 128.300422][ T6526] syz.3.118 (6526) used greatest stack depth: 17600 bytes left [ 128.372465][ T6322] veth1_vlan: entered promiscuous mode [ 128.528726][ T6322] veth0_macvtap: entered promiscuous mode [ 128.552647][ T6532] loop3: detected capacity change from 0 to 512 [ 128.566410][ T6322] veth1_macvtap: entered promiscuous mode [ 128.629823][ T6532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.636410][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.689270][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.705695][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.781151][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.797431][ T6532] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.809474][ T6052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.828771][ T6052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.174938][ T6546] loop2: detected capacity change from 0 to 256 [ 129.255512][ T6546] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 129.944997][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.695627][ T6565] loop5: detected capacity change from 0 to 16 [ 130.755090][ T6565] erofs (device loop5): invalid ishare xattr prefix id 0 [ 130.778848][ T6565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 131.824922][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.835869][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.815767][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820143][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.822176][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.857439][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.113389][ T6603] xt_hashlimit: size too large, truncated to 1048576 [ 133.410614][ T6613] loop0: detected capacity change from 0 to 1024 [ 133.512561][ T6613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.852507][ T6593] loop5: detected capacity change from 0 to 40427 [ 133.893819][ T6593] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 133.899474][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.900500][ T6593] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 134.316650][ T6631] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.349103][ T6593] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 134.380570][ T6593] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 134.396105][ T6593] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 134.693211][ T6636] loop0: detected capacity change from 0 to 1024 [ 134.709816][ T6637] loop3: detected capacity change from 0 to 16 [ 134.759569][ T6637] erofs (device loop3): invalid ishare xattr prefix id 0 [ 134.833673][ T6636] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 134.857391][ T6636] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 134.897403][ T6634] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.295270][ T6636] EXT4-fs error (device loop0): ext4_acquire_dquot:7006: comm syz.0.139: Failed to acquire dquot type 0 [ 135.454276][ T6636] loop0: lost filesystem error report for type 5 error -117 [ 135.456063][ T6636] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, [ 135.463439][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 135.463461][ C1] EXT4-fs (loop0): initial error at time 1770123602: ext4_acquire_dquot:7006 [ 135.463484][ C1] EXT4-fs (loop0): last error at time 1770123602: ext4_acquire_dquot:7006 [ 135.495036][ T6636] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 135.577338][ T6636] EXT4-fs error (device loop0): ext4_do_update_inode:5596: inode #13: comm syz.0.139: corrupted inode contents [ 135.623343][ T6636] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.623757][ T6636] EXT4-fs error (device loop0): ext4_dirty_inode:6477: inode #13: comm syz.0.139: mark_inode_dirty error [ 135.700371][ T6648] loop6: detected capacity change from 0 to 128 [ 135.714380][ T6636] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.721513][ T6636] EXT4-fs error (device loop0): ext4_do_update_inode:5596: inode #13: comm syz.0.139: corrupted inode contents [ 135.735178][ T6648] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.754746][ T6636] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.765045][ T6636] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.139: mark_inode_dirty error [ 135.862124][ T6636] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.870600][ T6636] EXT4-fs error (device loop0): ext4_do_update_inode:5596: inode #13: comm syz.0.139: corrupted inode contents [ 135.919892][ T6648] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.957263][ T6636] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.967188][ T6636] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 136.019600][ T6636] loop0: lost filesystem error report for type 5 error -117 [ 136.019991][ T6636] EXT4-fs error (device loop0): ext4_do_update_inode:5596: inode #13: comm syz.0.139: corrupted inode contents [ 136.039800][ T6636] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 136.040194][ T6636] EXT4-fs error (device loop0): ext4_truncate:4614: inode #13: comm syz.0.139: mark_inode_dirty error [ 136.060742][ T6636] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 136.061104][ T6636] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 136.071361][ T6653] loop3: detected capacity change from 0 to 256 [ 136.095313][ T6636] loop0: lost filesystem error report for type 5 error -117 [ 136.096555][ T6636] EXT4-fs (loop0): 1 truncate cleaned up [ 136.111798][ T6636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.138352][ T6653] exfat: Deprecated parameter 'utf8' [ 136.165791][ T6653] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 136.179443][ T6322] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.784238][ T6662] loop6: detected capacity change from 0 to 512 [ 136.853502][ T6662] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.897668][ T6662] EXT4-fs: journaled quota format not specified [ 136.946575][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.973826][ T6694] binder: 6693:6694 ioctl c0306201 0 returned -14 [ 137.984259][ T6694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.381001][ T6689] loop6: detected capacity change from 0 to 40427 [ 138.406331][ T6705] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.434079][ T6689] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 138.485235][ T6689] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 138.719095][ T6689] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.722997][ T6715] loop3: detected capacity change from 0 to 16 [ 138.768902][ T6689] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 138.775997][ T6689] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 138.867313][ T6715] erofs (device loop3): invalid ishare xattr prefix id 0 [ 138.981469][ T6721] loop5: detected capacity change from 0 to 512 [ 138.996145][ T6715] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.085808][ T6721] EXT4-fs error (device loop5): ext4_iget_extra_inode:5052: inode #15: comm syz.5.157: corrupted in-inode xattr: e_name out of bounds [ 139.103560][ T6721] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.103940][ T6721] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.157: couldn't read orphan inode 15 (err -117) [ 139.113159][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 139.113182][ C1] EXT4-fs (loop5): initial error at time 1770123605: ext4_iget_extra_inode:5052: inode 15 [ 139.113214][ C1] EXT4-fs (loop5): last error at time 1770123605: ext4_iget_extra_inode:5052: inode 15 [ 139.154479][ T6721] loop5: lost filesystem error report for type 5 error -117 [ 139.399879][ T6721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.682399][ T6736] loop0: detected capacity change from 0 to 128 [ 139.752242][ T6736] syz.0.161: attempt to access beyond end of device [ 139.752242][ T6736] loop0: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 139.840568][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.808941][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 142.094611][ T6774] loop5: detected capacity change from 0 to 1024 [ 142.141550][ T6774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.196857][ T6774] EXT4-fs: inline encryption not supported [ 142.268044][ T6774] EXT4-fs: Ignoring removed i_version option [ 142.377372][ T6774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.492798][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.211720][ T6818] x_tables: duplicate underflow at hook 1 [ 147.694246][ T6821] loop5: detected capacity change from 0 to 40427 [ 147.737212][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.773665][ T6821] F2FS-fs (loop5): invalid crc value [ 147.947490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.169358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 148.179573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.271423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 148.280828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.373808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 148.383242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.476241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 148.485694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.578631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 148.685803][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 148.693094][ T24] usb 4-1: config 203 has an invalid interface number: 199 but max is 0 [ 148.701642][ T24] usb 4-1: config 203 has no interface number 0 [ 148.710017][ T24] usb 4-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 148.719292][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.853883][ T24] usb 4-1: Product: syz [ 148.858154][ T24] usb 4-1: Manufacturer: syz [ 148.862748][ T24] usb 4-1: SerialNumber: syz [ 148.903319][ T6821] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 148.973811][ T6821] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 149.097671][ T6821] Zero length message leads to an empty skb [ 149.139487][ T24] usb-storage 4-1:203.199: USB Mass Storage device detected [ 149.190670][ T24] usb-storage 4-1:203.199: Quirks match for vid 0451 pid 5416: 2 [ 149.216015][ T5988] syz-executor: attempt to access beyond end of device [ 149.216015][ T5988] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.307452][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 149.307476][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 149.307485][ T5988] Call Trace: [ 149.307492][ T5988] [ 149.307500][ T5988] dump_stack_lvl+0xe8/0x150 [ 149.307523][ T24] usb 4-1: USB disconnect, device number 4 [ 149.307528][ T5988] f2fs_handle_critical_error+0x37c/0x540 [ 149.307555][ T5988] f2fs_write_end_io+0xcdb/0xff0 [ 149.307585][ T5988] __submit_merged_bio+0x256/0x700 [ 149.307607][ T5988] __submit_merged_write_cond+0x3c3/0x4e0 [ 149.307634][ T5988] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 149.307675][ T5988] f2fs_write_data_pages+0x2970/0x35e0 [ 149.307727][ T5988] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.307762][ T5988] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.307802][ T5988] ? do_raw_spin_unlock+0xf5/0x210 [ 149.307826][ T5988] ? __lock_acquire+0x6b5/0x2cf0 [ 149.307859][ T5988] ? __lock_acquire+0x6b5/0x2cf0 [ 149.307890][ T5988] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.307917][ T5988] ? do_raw_spin_unlock+0xf5/0x210 [ 149.307934][ T5988] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.307957][ T5988] do_writepages+0x32e/0x550 [ 149.307988][ T5988] ? do_raw_spin_unlock+0xf5/0x210 [ 149.308008][ T5988] filemap_fdatawrite+0x1e9/0x2f0 [ 149.308033][ T5988] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 149.308094][ T5988] ? do_raw_spin_unlock+0xf5/0x210 [ 149.308115][ T5988] f2fs_sync_dirty_inodes+0x30e/0x860 [ 149.308150][ T5988] f2fs_write_checkpoint+0x9cf/0x2680 [ 149.308201][ T5988] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 149.308271][ T5988] kill_f2fs_super+0x314/0x720 [ 149.308298][ T5988] ? __pfx_kill_f2fs_super+0x10/0x10 [ 149.308332][ T5988] ? lockdep_hardirqs_on+0x7a/0x110 [ 149.308362][ T5988] deactivate_locked_super+0xbc/0x130 [ 149.308387][ T5988] cleanup_mnt+0x437/0x4d0 [ 149.308402][ T5988] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.308423][ T5988] task_work_run+0x1d9/0x270 [ 149.308443][ T5988] ? __pfx_task_work_run+0x10/0x10 [ 149.308471][ T5988] exit_to_user_mode_loop+0xed/0x480 [ 149.308488][ T5988] ? rcu_is_watching+0x15/0xb0 [ 149.308514][ T5988] do_syscall_64+0x32d/0xf80 [ 149.308531][ T5988] ? trace_irq_disable+0x3b/0x150 [ 149.308553][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.308569][ T5988] ? clear_bhb_loop+0x40/0x90 [ 149.308589][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.308605][ T5988] RIP: 0033:0x7fc50819c117 [ 149.308622][ T5988] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 149.308635][ T5988] RSP: 002b:00007ffe50fe5118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 149.308652][ T5988] RAX: 0000000000000000 RBX: 00007fc50820471f RCX: 00007fc50819c117 [ 149.308663][ T5988] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe50fe51d0 [ 149.308673][ T5988] RBP: 00007ffe50fe51d0 R08: 00007ffe50fe61d0 R09: 00000000ffffffff [ 149.308684][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe50fe6260 [ 149.308694][ T5988] R13: 00007fc50820471f R14: 000000000002467f R15: 00007ffe50fe62a0 [ 149.308721][ T5988] [ 149.308728][ T5988] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 149.830423][ T6862] loop3: detected capacity change from 0 to 128 [ 149.860627][ T6862] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 151.669547][ T5951] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.731449][ T6898] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.087371][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 152.104955][ T5951] usb 3-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 152.197234][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.262426][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 152.396415][ T5951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 152.445207][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.531264][ T6904] bridge1: entered allmulticast mode [ 152.541266][ T5951] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.589366][ T5951] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.667288][ T5951] usb 3-1: Manufacturer: syz [ 152.686675][ T5951] usb 3-1: config 0 descriptor?? [ 153.668009][ T5951] rc_core: IR keymap rc-hauppauge not found [ 153.686380][ T5951] Registered IR keymap rc-empty [ 153.729274][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.781939][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.830839][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 153.852704][ T6923] loop6: detected capacity change from 0 to 512 [ 153.866296][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 153.888698][ T6923] EXT4-fs: Ignoring removed nobh option [ 153.901465][ T6923] EXT4-fs: old and new quota format mixing [ 153.923556][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.989226][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.029640][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.067801][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.119433][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.167505][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.208455][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.261924][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.314355][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.347557][ T5951] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.397992][ T5951] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.437355][ T5951] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.487006][ T5951] usb 3-1: USB disconnect, device number 5 [ 156.390633][ T6968] netlink: 35 bytes leftover after parsing attributes in process `syz.2.203'. [ 157.244583][ T6980] netlink: 'syz.6.207': attribute type 4 has an invalid length. [ 157.294968][ T6980] netlink: 'syz.6.207': attribute type 4 has an invalid length. [ 157.895668][ T6985] loop5: detected capacity change from 0 to 512 [ 157.909274][ T6985] EXT4-fs: Ignoring removed nobh option [ 158.040280][ T6985] EXT4-fs: old and new quota format mixing [ 159.338634][ T7008] binder: 7007:7008 ioctl c0306201 0 returned -14 [ 159.372631][ T7008] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 160.137421][ T7017] loop6: detected capacity change from 0 to 128 [ 160.178438][ T7017] vfat: Unknown parameter '18446744073709551615ÿÿÿ' [ 160.808586][ T7028] loop5: detected capacity change from 0 to 128 [ 160.832000][ T7028] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.975779][ T7028] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.192847][ T7037] loop5: detected capacity change from 0 to 512 [ 161.233995][ T7037] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.243018][ T30] audit: type=1326 audit(1770123627.886:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41ea19aeb9 code=0x0 [ 161.288040][ T7037] EXT4-fs (loop5): 1 truncate cleaned up [ 161.328391][ T7037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.660630][ T7048] loop6: detected capacity change from 0 to 1024 [ 162.847840][ T30] audit: type=1800 audit(1770123629.476:5): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.225" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 162.919436][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.915013][ T7059] loop6: detected capacity change from 0 to 16 [ 164.929426][ T7059] erofs (device loop6): invalid ishare xattr prefix id 0 [ 164.939320][ T7059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 165.358354][ T7071] tipc: Started in network mode [ 165.374780][ T7071] tipc: Node identity 84e, cluster identity 4711 [ 165.398069][ T7071] tipc: Node number set to 2126 [ 165.578385][ T7074] binder: 7073:7074 ioctl c0306201 0 returned -14 [ 165.620910][ T7074] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 166.064562][ T7079] loop6: detected capacity change from 0 to 1024 [ 166.138584][ T7079] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.249044][ T7079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.579371][ T6322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.247322][ T5951] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.886859][ T5951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.902819][ T7107] netlink: 76 bytes leftover after parsing attributes in process `syz.3.240'. [ 167.917872][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 167.938406][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.968945][ T5951] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.981290][ T5822] Bluetooth: Wrong link type (-71) [ 167.987206][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.249716][ T5951] usb 3-1: SerialNumber: syz [ 169.942629][ T5951] usb 3-1: can't set config #1, error -71 [ 274.967099][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 274.974136][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5988/1:b..l [ 274.982424][ C0] rcu: (detected by 0, t=10502 jiffies, g=18801, q=805 ncpus=2) [ 274.990155][ C0] task:syz-executor state:R running task stack:21032 pid:5988 tgid:5988 ppid:5978 task_flags:0x400140 flags:0x00080000 [ 275.004561][ C0] Call Trace: [ 275.007858][ C0] [ 275.010795][ C0] __schedule+0x1539/0x5110 [ 275.015326][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 275.020275][ C0] ? __pfx___schedule+0x10/0x10 [ 275.025233][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 275.030196][ C0] preempt_schedule_irq+0x4d/0xa0 [ 275.035238][ C0] irqentry_exit+0x599/0x620 [ 275.039845][ C0] ? trace_irq_disable+0x3b/0x150 [ 275.044891][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.050879][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 275.056963][ C0] Code: 8b 3d 44 93 54 0c 48 89 de 5b e9 03 1f 5e 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 68 43 55 11 65 8b 15 89 43 55 11 81 e2 00 01 ff 00 74 [ 275.076572][ C0] RSP: 0018:ffffc90003f8f5c0 EFLAGS: 00000246 [ 275.082647][ C0] RAX: ffffffff82004561 RBX: ffffea0001a9e300 RCX: ffff888027245a00 [ 275.090624][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 275.098596][ C0] RBP: dffffc0000000000 R08: ffffea0001a9e337 R09: 1ffffd4000353c66 [ 275.106571][ C0] R10: dffffc0000000000 R11: fffff94000353c67 R12: 0000000000000000 [ 275.114543][ C0] R13: 1ffff920007f1ed4 R14: ffffc90003f8f6a0 R15: ffff888149427180 [ 275.122526][ C0] ? xas_reload+0x281/0x460 [ 275.127041][ C0] xas_reload+0x281/0x460 [ 275.131373][ C0] find_lock_entries+0x278/0xa90 [ 275.136318][ C0] ? find_lock_entries+0x12a/0xa90 [ 275.141436][ C0] ? __pfx_find_lock_entries+0x10/0x10 [ 275.146908][ C0] shmem_undo_range+0x2d6/0x1660 [ 275.151884][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 275.157296][ C0] ? arch_stack_walk+0xfb/0x150 [ 275.162189][ C0] ? kasan_save_stack+0x4d/0x60 [ 275.167044][ C0] ? kasan_save_stack+0x3e/0x60 [ 275.171891][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 275.177268][ C0] ? call_rcu+0xee/0x890 [ 275.181527][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 275.186478][ C0] shmem_evict_inode+0x240/0x9e0 [ 275.191428][ C0] ? inode_wait_for_writeback+0x16d/0x3b0 [ 275.197148][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 275.202788][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 275.208864][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 275.213899][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 275.219012][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 275.224474][ C0] evict+0x61e/0xb10 [ 275.228384][ C0] ? __pfx_evict+0x10/0x10 [ 275.232805][ C0] ? _raw_spin_unlock+0x28/0x50 [ 275.237665][ C0] ? iput+0xb25/0xe80 [ 275.241660][ C0] filename_unlinkat+0x43f/0x610 [ 275.246607][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 275.252072][ C0] ? do_getname+0x151/0x250 [ 275.256582][ C0] __se_sys_unlink+0x2e/0x140 [ 275.261274][ C0] do_syscall_64+0x14d/0xf80 [ 275.265867][ C0] ? trace_irq_disable+0x3b/0x150 [ 275.270896][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.276962][ C0] ? clear_bhb_loop+0x40/0x90 [ 275.281643][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.287546][ C0] RIP: 0033:0x7fc508199fa7 [ 275.291964][ C0] RSP: 002b:00007ffe50fe5118 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 275.300380][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc508199fa7 [ 275.308352][ C0] RDX: 00007ffe50fe5140 RSI: 00007ffe50fe51d0 RDI: 00007ffe50fe51d0 [ 275.316325][ C0] RBP: 00007ffe50fe51d0 R08: 00007ffe50fe61d0 R09: 00000000ffffffff [ 275.324295][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe50fe6260 [ 275.332363][ C0] R13: 00007fc50820471f R14: 000000000002958d R15: 00007ffe50fe62a0 [ 275.340363][ C0] [ 275.343391][ C0] rcu: rcu_preempt kthread starved for 10436 jiffies! g18801 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 275.354588][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 275.364560][ C0] rcu: RCU grace-period kthread stack dump: [ 275.370446][ C0] task:rcu_preempt state:R running task stack:27664 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 275.383932][ C0] Call Trace: [ 275.387211][ C0] [ 275.390148][ C0] __schedule+0x1539/0x5110 [ 275.394686][ C0] ? __pfx___schedule+0x10/0x10 [ 275.399549][ C0] ? schedule+0x90/0x360 [ 275.403801][ C0] schedule+0x164/0x360 [ 275.407959][ C0] schedule_timeout+0x158/0x2c0 [ 275.412818][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 275.418200][ C0] ? __pfx_process_timeout+0x10/0x10 [ 275.423497][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 275.429311][ C0] ? prepare_to_swait_event+0x340/0x370 [ 275.434872][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 275.439736][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.444946][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 275.449719][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 275.455883][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 275.461170][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 275.466371][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.472184][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 275.476783][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 275.481984][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.487811][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 275.492756][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 275.497804][ C0] kthread+0x388/0x470 [ 275.501881][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 275.507077][ C0] ? __pfx_kthread+0x10/0x10 [ 275.511667][ C0] ret_from_fork+0x51e/0xb90 [ 275.516263][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 275.521377][ C0] ? __switch_to+0xc7d/0x1450 [ 275.526074][ C0] ? __pfx_kthread+0x10/0x10 [ 275.530671][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.535454][ C0] [ 275.538469][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 275.544797][ C0] Sending NMI from CPU 0 to CPUs 1: [ 275.550002][ C1] NMI backtrace for cpu 1 [ 275.550019][ C1] CPU: 1 UID: 0 PID: 7109 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(full) [ 275.550035][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 275.550043][ C1] RIP: 0010:rcu_read_lock_sched_held+0x5/0x70 [ 275.550066][ C1] Code: cc cc e8 2e f4 02 0a 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 a6 fa 02 0a 85 c0 74 29 31 db e8 bb ea 00 00 84 c0 74 23 e8 02 [ 275.550077][ C1] RSP: 0018:ffffc9000c3276f0 EFLAGS: 00000002 [ 275.550091][ C1] RAX: 0000000000000001 RBX: 1ffffffff1c344f3 RCX: ffff888029433c80 [ 275.550101][ C1] RDX: 0000000000000000 RSI: ffffffff8e15a2f5 RDI: ffffffff8c276e00 [ 275.550111][ C1] RBP: dffffc0000000000 R08: ffffffff90110bb7 R09: 1ffffffff2022176 [ 275.550121][ C1] R10: dffffc0000000000 R11: fffffbfff2022177 R12: ffff888029433c80 [ 275.550131][ C1] R13: ffff888079176000 R14: 0000000000000001 R15: ffffffff8e1a2798 [ 275.550141][ C1] FS: 00007f810d5f46c0(0000) GS:ffff888125572000(0000) knlGS:0000000000000000 [ 275.550153][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.550163][ C1] CR2: 0000200000000058 CR3: 0000000069b80000 CR4: 00000000003526f0 [ 275.550177][ C1] Call Trace: [ 275.550183][ C1] [ 275.550189][ C1] cpuacct_charge+0x117/0x320 [ 275.550209][ C1] update_se+0x2b5/0x620 [ 275.550229][ C1] dequeue_task_rt+0x79/0x9d0 [ 275.550250][ C1] __schedule+0x676/0x5110 [ 275.550266][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 275.550290][ C1] ? __pfx___schedule+0x10/0x10 [ 275.550308][ C1] ? schedule+0x90/0x360 [ 275.550322][ C1] schedule+0x164/0x360 [ 275.550336][ C1] __futex_wait+0x1ee/0x420 [ 275.550358][ C1] ? __pfx___futex_wait+0x10/0x10 [ 275.550375][ C1] ? fpu__restore_sig+0x55b/0x1250 [ 275.550393][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 275.550414][ C1] ? __pfx_fpu__restore_sig+0x10/0x10 [ 275.550433][ C1] futex_wait+0x119/0x380 [ 275.550452][ C1] ? __pfx_futex_wait+0x10/0x10 [ 275.550474][ C1] ? __ia32_sys_rt_sigreturn+0x7dc/0x8e0 [ 275.550493][ C1] do_futex+0x333/0x420 [ 275.550508][ C1] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 275.550525][ C1] ? __pfx_do_futex+0x10/0x10 [ 275.550545][ C1] __se_sys_futex+0x3a8/0x450 [ 275.550563][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 275.550579][ C1] ? __task_pid_nr_ns+0x28/0x490 [ 275.550595][ C1] ? __x64_sys_futex+0x21/0xf0 [ 275.550611][ C1] do_syscall_64+0x14d/0xf80 [ 275.550626][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.550641][ C1] ? clear_bhb_loop+0x40/0x90 [ 275.550656][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.550670][ C1] RIP: 0033:0x7f810c79aeb9 [ 275.550682][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.550692][ C1] RSP: 002b:00007f810d5f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 275.550706][ C1] RAX: ffffffffffffffda RBX: 00007f810ca15fa8 RCX: 00007f810c79aeb9 [ 275.550716][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f810ca15fa8 [ 275.550725][ C1] RBP: 00007f810ca15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 275.550734][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.550742][ C1] R13: 00007f810ca16038 R14: 00007ffcdcdd7ec0 R15: 00007ffcdcdd7fa8 [ 275.550759][ C1] [ 276.847745][ T5951] usb 3-1: USB disconnect, device number 6