last executing test programs: 4m0.578262905s ago: executing program 4 (id=55): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x1ff, 0x2, 0x7, "d171a6100600000009e49200", 0x802042, 0x200068e}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) 3m58.865541013s ago: executing program 4 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00') fsmount(0xffffffffffffffff, 0x0, 0x2) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m57.765854769s ago: executing program 4 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r0}, 0x38) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, 0x0, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x404, 0x1, 0xbf22, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@sg0, 0x0, &(0x7f0000000700)='./file0\x00') io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) 3m51.180484582s ago: executing program 4 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) writev(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4000005) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x80000, 0x25dfdbfe, {0x2, 0x8, 0x3c, 0xfe, r4}, [@IFA_FLAGS={0x8, 0x8, 0x13}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048084}, 0x14000854) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) copy_file_range(r3, 0x0, r3, &(0x7f0000000100)=0x2295, 0xf, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x43}) 3m48.56230517s ago: executing program 4 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m47.529188283s ago: executing program 4 (id=82): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) open(&(0x7f0000000340)='./file0\x00', 0x180501, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20004000) unshare(0x28000600) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m32.193581723s ago: executing program 32 (id=82): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) open(&(0x7f0000000340)='./file0\x00', 0x180501, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20004000) unshare(0x28000600) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m45.842255621s ago: executing program 0 (id=208): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) connect$x25(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000020000800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) 2m40.82260928s ago: executing program 0 (id=217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) writev(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0xbbf, 0x74, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4000005) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x80000, 0x25dfdbfe, {0x2, 0x8, 0x3c, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x13}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048084}, 0x14000854) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) copy_file_range(r3, 0x0, r3, &(0x7f0000000100)=0x2295, 0xf, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x43}) 2m35.526025837s ago: executing program 0 (id=227): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r4, 0x0, 0x0, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m34.292633669s ago: executing program 0 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m34.011611312s ago: executing program 0 (id=232): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2m32.536779927s ago: executing program 1 (id=234): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000000, &(0x7f0000000380), 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$unlink(0x9, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27) 2m30.074864545s ago: executing program 1 (id=238): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) open(0x0, 0x0, 0xa0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) listen(r1, 0x5) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x96, 0x0, 0x0) 2m30.056537735s ago: executing program 0 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = io_uring_setup(0xfc6, &(0x7f0000000180)) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x418, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m25.497249207s ago: executing program 33 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = io_uring_setup(0xfc6, &(0x7f0000000180)) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x418, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m24.67744036s ago: executing program 1 (id=245): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) ioctl$NBD_DO_IT(r0, 0xab03) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 2m22.954715967s ago: executing program 1 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m21.965041113s ago: executing program 1 (id=249): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2m21.342202408s ago: executing program 1 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) writev(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0xbbf, 0x74, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4000005) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x80000, 0x25dfdbfe, {0x2, 0x8, 0x3c, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x13}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048084}, 0x14000854) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) copy_file_range(r3, 0x0, r3, &(0x7f0000000100)=0x2295, 0xf, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x43}) 2m19.588977734s ago: executing program 34 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) writev(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0xbbf, 0x74, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4000005) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x80000, 0x25dfdbfe, {0x2, 0x8, 0x3c, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x13}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048084}, 0x14000854) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) copy_file_range(r3, 0x0, r3, &(0x7f0000000100)=0x2295, 0xf, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x43}) 12.967407115s ago: executing program 5 (id=506): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000180)={[{@errors_continue}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}]}, 0x2, 0x574, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x91) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000300)=ANY=[]) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 11.387494025s ago: executing program 6 (id=508): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000300)) 11.177748498s ago: executing program 3 (id=509): getdents64(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 10.997484082s ago: executing program 6 (id=510): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a0", 0x91}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x5}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.726410978s ago: executing program 6 (id=512): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x589, &(0x7f0000000880)="$eJzs3c1rXFUbAPDnTjJp+vG+SaGIupBAF1ZqJ03iRwUXdSlaLOi+Dsk0lEw6JTMpTSzYLuzGjRRBxILozoV7l8X/paCFIiUg4mbkTu6k02SSTpJJMu38fnDbc+65M+ecufecPDdnJhNA3xpL/8lFvBIR3yQRIy1lg5EVjq0et/L45nS6JVGvf/pXEkm2r3l8kv1/NMu8HBG/fxVxOrex3urS8lyxXC4t/FOv1yNivDZ/bby6tHzmynxxtjRbujo5NXXu7anJ9959p2t9fePi399/cv/Dc1+fXPnu14fH7yZxPo5lZe36sQO3WjNjMZY9Vz7OrztwYud19KRdvGYcoIFsnOcjnQNGYiAb9W3VR/azacAe+zId1kCfSox/6FPNOKB5b996H9wPHn2wegO0sf+Dq78bieHGvdGRleSpO6P0fne0C/Wndfz257276Rbrfg8BsJdu3Y6Is4ODG+e/JJv/du5sB8esryOrP7/LqoEO3E/jnzfbxT+5tfgn2sQ/R9uM3Z146jly7eKf3MMuVLOpNP57v238u7ZoNTqQ5f7XiPnyyeUr5VI6t/0/Ik5F/lCa32I95/PcyoP6ZoWt8V+6pfU3Y8GsHQ8HDz39mJlirbirTrd4dDvi1bbxb7J2/pM25z99PS5GtoDwDC+V7r22Wdmz+7+36j9FvN72/D9Z0Uq2Xp8cb1wP482rYqNk3bpgq4Pu/6NfskSz/2s/edf6P5q0rtdWt1/Hj8P/ljYr2+n1P5R81kgPZftuFGu1hYmIoeTjjfsnnzy2mW8en17/p05uPf+1u/4PpwO7w/7fOXGn9dDh7fV/b6X9n9n6+l93/refePDRFz9sVn9n5/+tRupUtqeT+a/TBu7mtQMAAAAAAIBek4uIY5HkCmvpXK5QWH1/x4k4kitXqrXTlyuLV2ei8VnZ0cjnmivdIy3vh5jI3g/bzE+uy09FxPGI+HbgcCNfmK6UZw668wAAAAAAAAAAAAAAAAAAANAjjkYMt/v8f+qPDv62P/Cc2+Irv4EX3ObjPyvpxjc9AT1pxz//h7vbDmD/if+hfxn/0L+Mf+hfxj/0L+Mf+pfxD/1rO+P/5wt72BAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4MVy8cCHd6iuPb06n+ZnrS4tzletnZkrVucL84nRhurJwrTBbqcyWS4Xpyvyznq9cqVybmIzFG+O1UrU2Xl1avjRfWbxau3RlvjhbulTK70uvAAAAAAAAAAAAAAAAAAAA4PlSXVqeK5bLpQUJiUYiiYjtPGqwB9rclcRQ9EQzeiVx0DMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzxXwAAAP//mrs30g==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 8.21746339s ago: executing program 7 (id=513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="07000000010001", 0x7) 8.177363571s ago: executing program 5 (id=514): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0x31, 0x4, 'a(Uh'}, 0x0, 0x0}) 7.969885035s ago: executing program 3 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 6.730547986s ago: executing program 7 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) close_range(r3, 0xffffffffffffffff, 0x0) 6.630398461s ago: executing program 2 (id=519): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x2, 0x1, 0x56555941, 0x5, 0xb, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0xffff}, {0x2, 0x6}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000280)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048041}, 0x20000000) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.672078618s ago: executing program 7 (id=520): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000300)) 5.458256973s ago: executing program 7 (id=521): syz_open_dev$sg(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40004023, 0x0) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5.429617335s ago: executing program 6 (id=522): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) 4.983912571s ago: executing program 7 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406eb0800000000000000000200000a0500010007000000ae"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r3, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") 4.940514599s ago: executing program 2 (id=524): syz_usb_connect(0x5, 0x36, 0x0, 0x0) 4.122163856s ago: executing program 6 (id=525): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000180)={[{@errors_continue}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}]}, 0x2, 0x574, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x91) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000300)=ANY=[]) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 3.985016736s ago: executing program 7 (id=526): ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x101, 0x400, 0x80000001, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x2, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x9, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x7, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x7, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x3, 0x10000, 0x80000000, 0x3, 0x2, 0x3, 0x6d7e, 0x2, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0x5, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) socket$nl_netfilter(0x10, 0x3, 0xc) 3.853968561s ago: executing program 5 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000100)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000280)="9a3374426840d338adc1aadc2ac895564997833ca8c96a56b24acf6006272d644c044b87b727634ed25bab1f73d86505fbe3edbb9e6767c45cd513ada233d869d698af887aaeeca7c0a7319288a5dd875aa3aa15f46ad1463faf65e4a11ffe4a2b3ca5bb47f0cc214d58200caf1d58d6142150107f6f40103c01d9b875a0", 0x7e}, {&(0x7f0000000380)="c918e6d286b005fbd2ff5cc58a6f03e76703dcde1c4f7ee8f93989cb063352c873162073c4be7fced94a32ea1521302c2628297f07e51e4569d33e31f65b2ec3361739d45c379e4b80ca2097871044e3412d397c791bf2fccc65bbfb67d896e5d0380f4b417efd89535220b1e44d0fd90c8b5ef3db68fa4240159b16ae17cf4d1f304712f4aad6909a0cb989189fb43356287a129720bcb12d6226b97cfea6474019c96b6288d6bc032e", 0xaa}, {&(0x7f0000000580)="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", 0xd71}], 0x3, 0x0, 0x0, 0x1080}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x3, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x1, 0xea, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r6, 0x9, 0x0) r7 = memfd_create(0x0, 0x3) pwrite64(r7, &(0x7f0000000180)='q', 0x1, 0x100004) socket$inet6(0xa, 0x800000000000002, 0x0) 3.591900522s ago: executing program 3 (id=528): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="07000000010001", 0x7) 2.820353168s ago: executing program 5 (id=529): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 2.642479897s ago: executing program 2 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x4}, {0x8, 0xd, 0x0, 0x0, 0x101}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.376746685s ago: executing program 5 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) close_range(r3, 0xffffffffffffffff, 0x0) 2.018368489s ago: executing program 2 (id=532): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000300)) 1.327739914s ago: executing program 3 (id=533): syz_open_dev$sg(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f00000000c0), 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40004023, 0x0) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.326127743s ago: executing program 5 (id=534): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x589, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1.035501471s ago: executing program 2 (id=535): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r1, 0x0, 0x0) 996.563227ms ago: executing program 3 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406eb0800000000000000000200000a0500010007000000ae"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r3, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") 986.192723ms ago: executing program 6 (id=537): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, r7, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x1ff, 0x2, 0x7, "d171a6100600000009e49200", 0x802042, 0x200068e}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000540)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0) 590.68ms ago: executing program 2 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/207) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r3 = syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0xb, 0x9, 0x6, 0x8, 0x90}, 0x28, &(0x7f0000000300)={0x5, 0xf, 0x28, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0xbd, 0x1, 0x1, 0x7, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x5a, 0x3, 0x7, 0xff00, 0xff, [0x3f00, 0xff00ff, 0xff1f80]}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x813}}, {0x2, &(0x7f00000003c0)=@string={0x2}}]}) syz_usb_control_io$uac1(r3, &(0x7f00000006c0)={0x14, 0x0, 0x0}, &(0x7f0000001840)={0x44, &(0x7f0000000700)={0x20, 0xe}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001700)={0x20, 0x81, 0x2, "dee4"}, &(0x7f0000001740)={0x20, 0x82, 0x3, "48c4d9"}, 0x0, &(0x7f00000017c0)={0x20, 0x84, 0x3, "c0b8e3"}, 0x0}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x7, 0x8, 0x8, 0x9, 0xfffffff7, 0x7, 0x7e1, 0x7}}) 0s ago: executing program 3 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000100)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000280)="9a3374426840d338adc1aadc2ac895564997833ca8c96a56b24acf6006272d644c044b87b727634ed25bab1f73d86505fbe3edbb9e6767c45cd513ada233d869d698af887aaeeca7c0a7319288a5dd875aa3aa15f46ad1463faf65e4a11ffe4a2b3ca5bb47f0cc214d58200caf1d58d6142150107f6f40103c01d9b875a0", 0x7e}, {&(0x7f0000000380)="c918e6d286b005fbd2ff5cc58a6f03e76703dcde1c4f7ee8f93989cb063352c873162073c4be7fced94a32ea1521302c2628297f07e51e4569d33e31f65b2ec3361739d45c379e4b80ca2097871044e3412d397c791bf2fccc65bbfb67d896e5d0380f4b417efd89535220b1e44d0fd90c8b5ef3db68fa4240159b16ae17cf4d1f304712f4aad6909a0cb989189fb43356287a129720bcb12d6226b97cfea6474019c96b6288d6bc032e", 0xaa}, {&(0x7f0000000580)="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", 0xd71}], 0x3, 0x0, 0x0, 0x1080}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x3, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x1, 0xea, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r6, 0x9, 0x0) r7 = memfd_create(0x0, 0x3) pwrite64(r7, &(0x7f0000000180)='q', 0x1, 0x100004) socket$inet6(0xa, 0x800000000000002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 74.878768][ T5825] cgroup: Unknown subsys name 'net' [ 74.992567][ T5825] cgroup: Unknown subsys name 'cpuset' [ 75.002137][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.599109][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.008671][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.016440][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.028220][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.035697][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.044288][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.062789][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.070465][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.078968][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.084544][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.095011][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.095920][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.109324][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.113025][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.127308][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.136112][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.165964][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.177981][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.188211][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.201245][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.209463][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.231632][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.242064][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.252766][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.263824][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.272614][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.824917][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 80.109656][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 80.131593][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.139739][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.148419][ T5844] bridge_slave_0: entered allmulticast mode [ 80.156785][ T5844] bridge_slave_0: entered promiscuous mode [ 80.175288][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 80.207596][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.215284][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.222682][ T5844] bridge_slave_1: entered allmulticast mode [ 80.230555][ T5844] bridge_slave_1: entered promiscuous mode [ 80.267065][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 80.342471][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.404005][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.534369][ T5844] team0: Port device team_slave_0 added [ 80.544589][ T5844] team0: Port device team_slave_1 added [ 80.572948][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.580398][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.587791][ T5853] bridge_slave_0: entered allmulticast mode [ 80.596016][ T5853] bridge_slave_0: entered promiscuous mode [ 80.651541][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.658967][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.666230][ T5853] bridge_slave_1: entered allmulticast mode [ 80.674337][ T5853] bridge_slave_1: entered promiscuous mode [ 80.682794][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 80.711487][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.718611][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.744630][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.790845][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.798228][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.805671][ T5838] bridge_slave_0: entered allmulticast mode [ 80.813563][ T5838] bridge_slave_0: entered promiscuous mode [ 80.823210][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.830399][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.856448][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.925923][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.933712][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.941191][ T5838] bridge_slave_1: entered allmulticast mode [ 80.949349][ T5838] bridge_slave_1: entered promiscuous mode [ 80.965408][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.973207][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.980714][ T5839] bridge_slave_0: entered allmulticast mode [ 80.988653][ T5839] bridge_slave_0: entered promiscuous mode [ 81.001416][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.020619][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.067054][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.074643][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.082163][ T5839] bridge_slave_1: entered allmulticast mode [ 81.090901][ T5839] bridge_slave_1: entered promiscuous mode [ 81.131364][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.170174][ T5846] Bluetooth: hci1: command tx timeout [ 81.170179][ T5849] Bluetooth: hci0: command tx timeout [ 81.208837][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.233977][ T5853] team0: Port device team_slave_0 added [ 81.248478][ T5849] Bluetooth: hci2: command tx timeout [ 81.258830][ T5849] Bluetooth: hci3: command tx timeout [ 81.292625][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.305417][ T5853] team0: Port device team_slave_1 added [ 81.317942][ T5844] hsr_slave_0: entered promiscuous mode [ 81.325209][ T5844] hsr_slave_1: entered promiscuous mode [ 81.330953][ T5849] Bluetooth: hci4: command tx timeout [ 81.339342][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.346909][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.354462][ T5850] bridge_slave_0: entered allmulticast mode [ 81.362268][ T5850] bridge_slave_0: entered promiscuous mode [ 81.388509][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.425576][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.433018][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.440695][ T5850] bridge_slave_1: entered allmulticast mode [ 81.448654][ T5850] bridge_slave_1: entered promiscuous mode [ 81.459193][ T5838] team0: Port device team_slave_0 added [ 81.515964][ T5838] team0: Port device team_slave_1 added [ 81.537302][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.544796][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.570854][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.625625][ T5839] team0: Port device team_slave_0 added [ 81.633097][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.640500][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.666508][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.691403][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.718916][ T5839] team0: Port device team_slave_1 added [ 81.744902][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.755703][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.763681][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.790824][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.856136][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.863189][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.889545][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.910930][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.917931][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.944220][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.999701][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.006673][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.032833][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.057123][ T5850] team0: Port device team_slave_0 added [ 82.098249][ T5850] team0: Port device team_slave_1 added [ 82.127014][ T5853] hsr_slave_0: entered promiscuous mode [ 82.134191][ T5853] hsr_slave_1: entered promiscuous mode [ 82.141382][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 82.147218][ T5853] Cannot create hsr debugfs directory [ 82.196824][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.203943][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.229961][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.244096][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.251134][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.277301][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.350034][ T5838] hsr_slave_0: entered promiscuous mode [ 82.356949][ T5838] hsr_slave_1: entered promiscuous mode [ 82.364000][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 82.369970][ T5838] Cannot create hsr debugfs directory [ 82.506892][ T5839] hsr_slave_0: entered promiscuous mode [ 82.514570][ T5839] hsr_slave_1: entered promiscuous mode [ 82.522088][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 82.527860][ T5839] Cannot create hsr debugfs directory [ 82.614211][ T5850] hsr_slave_0: entered promiscuous mode [ 82.621370][ T5850] hsr_slave_1: entered promiscuous mode [ 82.628009][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 82.634110][ T5850] Cannot create hsr debugfs directory [ 83.023658][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.062843][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.106978][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.152037][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.248523][ T5846] Bluetooth: hci1: command tx timeout [ 83.254357][ T5849] Bluetooth: hci0: command tx timeout [ 83.299479][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.313028][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.327098][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.334585][ T5849] Bluetooth: hci3: command tx timeout [ 83.340151][ T5846] Bluetooth: hci2: command tx timeout [ 83.355096][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.408627][ T5849] Bluetooth: hci4: command tx timeout [ 83.480239][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.494567][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.506270][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.522579][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.642660][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.673268][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.699870][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.712274][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.834406][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.881014][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.893798][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.906048][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.929987][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.954437][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.027552][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.035307][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.066646][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.073942][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.117954][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.166593][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.235103][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.250149][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.306874][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.314055][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.324830][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.332108][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.377477][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.391774][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.399026][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.409764][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.417272][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.536246][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.597425][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.604707][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.642018][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.661902][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.669181][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.803245][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.860049][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.867293][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.912341][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.919652][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.967537][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.330678][ T5849] Bluetooth: hci0: command tx timeout [ 85.334954][ T5846] Bluetooth: hci1: command tx timeout [ 85.383222][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.392461][ T5844] veth0_vlan: entered promiscuous mode [ 85.410862][ T5846] Bluetooth: hci3: command tx timeout [ 85.413168][ T5849] Bluetooth: hci2: command tx timeout [ 85.457833][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.488491][ T5849] Bluetooth: hci4: command tx timeout [ 85.503990][ T5844] veth1_vlan: entered promiscuous mode [ 85.540640][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.769740][ T5838] veth0_vlan: entered promiscuous mode [ 85.783167][ T5844] veth0_macvtap: entered promiscuous mode [ 85.802527][ T5853] veth0_vlan: entered promiscuous mode [ 85.824630][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.854582][ T5844] veth1_macvtap: entered promiscuous mode [ 85.872247][ T5838] veth1_vlan: entered promiscuous mode [ 85.903820][ T5853] veth1_vlan: entered promiscuous mode [ 85.987306][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.023940][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.083111][ T5838] veth0_macvtap: entered promiscuous mode [ 86.114034][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.124727][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.154310][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.163218][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.177895][ T5850] veth0_vlan: entered promiscuous mode [ 86.185197][ T5838] veth1_macvtap: entered promiscuous mode [ 86.215081][ T5853] veth0_macvtap: entered promiscuous mode [ 86.253922][ T5839] veth0_vlan: entered promiscuous mode [ 86.277219][ T5853] veth1_macvtap: entered promiscuous mode [ 86.294424][ T5850] veth1_vlan: entered promiscuous mode [ 86.336502][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.359071][ T5839] veth1_vlan: entered promiscuous mode [ 86.389533][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.436119][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.465046][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.474715][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.484204][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.493486][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.500307][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.525107][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.566921][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.633665][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.644146][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.667101][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.682850][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.693469][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.703545][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.735750][ T5850] veth0_macvtap: entered promiscuous mode [ 86.807446][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.832102][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.844888][ T5839] veth0_macvtap: entered promiscuous mode [ 86.860851][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.891571][ T5850] veth1_macvtap: entered promiscuous mode [ 86.928882][ T5839] veth1_macvtap: entered promiscuous mode [ 87.100886][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.129177][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.141949][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.188711][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.393902][ T33] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.408941][ T5849] Bluetooth: hci1: command tx timeout [ 87.425087][ T5849] Bluetooth: hci0: command tx timeout [ 87.518507][ T5849] Bluetooth: hci3: command tx timeout [ 87.524088][ T5846] Bluetooth: hci2: command tx timeout [ 87.583188][ T5964] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 87.600444][ T5846] Bluetooth: hci4: command tx timeout [ 87.660767][ T33] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.348972][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.382030][ T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.418950][ T33] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.470674][ T5967] loop0: detected capacity change from 0 to 764 [ 88.493486][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.537590][ T5967] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 88.649580][ T33] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.659359][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.683735][ T33] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.710407][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.777311][ T33] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.900215][ T33] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.210088][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.246763][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.283719][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.309830][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.929374][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.002162][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.035514][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.084178][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.778351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 90.920348][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.944878][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.960289][ T1622] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.139346][ T1622] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 91.162181][ T1622] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 91.198571][ T1622] usb 4-1: Product: syz [ 91.220920][ T1622] usb 4-1: Manufacturer: syz [ 91.242297][ T5925] IPVS: starting estimator thread 0... [ 91.264502][ T1622] usb 4-1: SerialNumber: syz [ 91.341434][ T1622] usb 4-1: config 0 descriptor?? [ 91.378483][ T5989] IPVS: using max 39 ests per chain, 93600 per kthread [ 91.449348][ T1622] ch341 4-1:0.0: ch341-uart converter detected [ 91.544075][ T5993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.651682][ T1622] usb 4-1: failed to receive control message: -32 [ 91.679314][ T1622] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 91.914078][ T10] cfg80211: failed to load regulatory.db [ 94.277591][ T9] usb 4-1: USB disconnect, device number 2 [ 94.364313][ T9] ch341 4-1:0.0: device disconnected [ 95.087509][ T6023] loop4: detected capacity change from 0 to 1024 [ 95.942404][ T6025] loop1: detected capacity change from 0 to 1024 [ 96.110057][ T6025] ======================================================= [ 96.110057][ T6025] WARNING: The mand mount option has been deprecated and [ 96.110057][ T6025] and is ignored by this kernel. Remove the mand [ 96.110057][ T6025] option from the mount to silence this warning. [ 96.110057][ T6025] ======================================================= [ 96.319572][ T6031] loop2: detected capacity change from 0 to 32768 [ 96.341991][ T6031] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.21 (6031) [ 96.418722][ T6031] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 96.429338][ T6031] BTRFS info (device loop2): using crc32c checksum algorithm [ 96.436998][ T6031] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 96.471560][ T6029] hfsplus: b-tree write err: -5, ino 25 [ 96.507494][ T6029] hfsplus: b-tree write err: -5, ino 4 [ 96.526660][ T6029] hfsplus: b-tree write err: -5, ino 2 [ 96.576119][ T6031] BTRFS info (device loop2): rebuilding free space tree [ 96.638472][ T6029] hfsplus: b-tree write err: -5, ino 22 [ 96.657148][ T6031] BTRFS info (device loop2): disabling free space tree [ 96.665396][ T6031] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.676994][ T6031] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.693305][ T6025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.706815][ T6031] BTRFS info (device loop2): enabling ssd optimizations [ 96.713969][ T6031] BTRFS info (device loop2): turning on async discard [ 96.721709][ T6031] BTRFS info (device loop2): enabling disk space caching [ 96.728848][ T6031] BTRFS info (device loop2): force clearing of disk cache [ 96.736111][ T6031] BTRFS info (device loop2): use zstd compression, level 3 [ 97.890521][ T5844] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 99.579174][ T5918] IPVS: starting estimator thread 0... [ 99.610111][ T6054] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.20: Allocating blocks 497-513 which overlap fs metadata [ 99.919984][ T6072] IPVS: using max 25 ests per chain, 60000 per kthread [ 100.053946][ T6054] EXT4-fs (loop1): pa ffff888035a2c570: logic 131104, phys. 177, len 21 [ 100.063046][ T6054] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 100.877034][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.000924][ T6093] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 104.047825][ T6100] loop3: detected capacity change from 0 to 32768 [ 104.202127][ T6100] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.35 (6100) [ 104.239426][ T6101] loop0: detected capacity change from 0 to 512 [ 104.279534][ T6100] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 104.289812][ T6100] BTRFS info (device loop3): using crc32c checksum algorithm [ 104.297954][ T6100] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 104.321521][ T6101] EXT4-fs: Ignoring removed nobh option [ 104.433789][ T6101] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.447535][ T6101] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.021531][ T6101] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.058456][ T6101] EXT4-fs (loop0): 1 truncate cleaned up [ 105.103433][ T6101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.635507][ T5846] Bluetooth: hci2: SCO packet too small [ 106.465595][ T6100] BTRFS info (device loop3): rebuilding free space tree [ 106.496338][ T6100] BTRFS info (device loop3): disabling free space tree [ 106.503779][ T6100] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 106.513504][ T6100] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.543817][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.549257][ T6100] BTRFS info (device loop3): enabling ssd optimizations [ 106.559923][ T6100] BTRFS info (device loop3): turning on async discard [ 106.566729][ T6100] BTRFS info (device loop3): enabling disk space caching [ 106.573844][ T6100] BTRFS info (device loop3): force clearing of disk cache [ 106.581287][ T6100] BTRFS info (device loop3): use zstd compression, level 3 [ 106.622642][ T5853] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 107.800437][ T6138] loop0: detected capacity change from 0 to 1024 [ 108.102568][ T6138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.255437][ T6147] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.40: Allocating blocks 497-513 which overlap fs metadata [ 109.423367][ T5918] IPVS: starting estimator thread 0... [ 109.548492][ T6150] IPVS: using max 26 ests per chain, 62400 per kthread [ 109.583462][ T6147] EXT4-fs (loop0): pa ffff888035ace9f8: logic 131104, phys. 177, len 21 [ 109.592341][ T6147] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 109.835721][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.878494][ T5985] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.886198][ T5889] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 110.058618][ T5985] usb 4-1: Using ep0 maxpacket: 16 [ 110.077697][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.324752][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.347762][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 110.371261][ T5889] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 110.507216][ T5985] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 110.535009][ T5889] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 110.632081][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.640496][ T5889] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.668060][ T5985] usb 4-1: config 0 descriptor?? [ 110.673537][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.718343][ T6149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.776984][ T6149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.899880][ T5889] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.281798][ T5985] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0001/input/input5 [ 111.559794][ T5985] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 111.637083][ T5985] usb 4-1: USB disconnect, device number 3 [ 111.827756][ T6159] fido_id[6159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 113.147379][ T6178] loop0: detected capacity change from 0 to 32768 [ 113.166759][ T6178] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.52 (6178) [ 113.333513][ T6178] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 113.343923][ T6178] BTRFS info (device loop0): using crc32c checksum algorithm [ 113.351439][ T6178] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 114.095424][ T6178] BTRFS info (device loop0): rebuilding free space tree [ 114.126043][ T6178] BTRFS info (device loop0): disabling free space tree [ 114.133436][ T6178] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.143293][ T6178] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.170135][ T6178] BTRFS info (device loop0): enabling ssd optimizations [ 114.177221][ T6178] BTRFS info (device loop0): turning on async discard [ 114.184212][ T6178] BTRFS info (device loop0): enabling disk space caching [ 114.191429][ T6178] BTRFS info (device loop0): force clearing of disk cache [ 114.198735][ T6178] BTRFS info (device loop0): use zstd compression, level 3 [ 114.842824][ T5838] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 114.893811][ T5918] usb 2-1: USB disconnect, device number 2 [ 115.288610][ T6205] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 118.544125][ T6221] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 120.631663][ T6252] loop3: detected capacity change from 0 to 32768 [ 120.640931][ T6252] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.66 (6252) [ 120.659049][ T6252] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 120.669321][ T6252] BTRFS info (device loop3): using crc32c checksum algorithm [ 120.676736][ T6252] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 120.756922][ T6261] loop1: detected capacity change from 0 to 1024 [ 120.788950][ T6252] BTRFS info (device loop3): rebuilding free space tree [ 120.832803][ T6261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.846469][ T6252] BTRFS info (device loop3): disabling free space tree [ 120.853646][ T6252] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.863426][ T6252] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.888037][ T6252] BTRFS info (device loop3): enabling ssd optimizations [ 120.895165][ T6252] BTRFS info (device loop3): turning on async discard [ 120.902732][ T6252] BTRFS info (device loop3): enabling disk space caching [ 120.909900][ T6252] BTRFS info (device loop3): force clearing of disk cache [ 120.917062][ T6252] BTRFS info (device loop3): use zstd compression, level 3 [ 121.498388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.049817][ T6276] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.67: Allocating blocks 497-513 which overlap fs metadata [ 122.295563][ T6276] EXT4-fs (loop1): pa ffff888035ace658: logic 131104, phys. 177, len 21 [ 122.304037][ T6276] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 122.418135][ T5853] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 122.590998][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.867054][ T6293] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.346639][ T6302] ipt_REJECT: TCP_RESET invalid for non-tcp [ 124.369899][ T6302] capability: warning: `syz.3.74' uses deprecated v2 capabilities in a way that may be insecure [ 124.409039][ T6302] loop3: detected capacity change from 0 to 128 [ 124.423428][ T6302] vfat: Unknown parameter 'ÿÿ18446744073709551615' [ 127.462230][ T6317] loop1: detected capacity change from 0 to 32768 [ 127.478209][ T6317] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.79 (6317) [ 127.509392][ T6317] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 127.519727][ T6317] BTRFS info (device loop1): using crc32c checksum algorithm [ 127.528398][ T6317] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 127.674889][ T6317] BTRFS info (device loop1): rebuilding free space tree [ 127.737027][ T6317] BTRFS info (device loop1): disabling free space tree [ 127.745003][ T6317] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.754805][ T6317] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.772795][ T6317] BTRFS info (device loop1): enabling ssd optimizations [ 127.780476][ T6317] BTRFS info (device loop1): turning on async discard [ 127.787291][ T6317] BTRFS info (device loop1): enabling disk space caching [ 127.794442][ T6317] BTRFS info (device loop1): force clearing of disk cache [ 127.801792][ T6317] BTRFS info (device loop1): use zstd compression, level 3 [ 128.984741][ T5850] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 129.480231][ T5889] IPVS: starting estimator thread 0... [ 129.499770][ T5903] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.598717][ T6359] IPVS: using max 39 ests per chain, 93600 per kthread [ 129.690609][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 129.816605][ T5903] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 130.111552][ T5903] usb 3-1: config 0 has no interface number 0 [ 130.133162][ T5903] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.181489][ T5903] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 130.234996][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.263914][ T5903] usb 3-1: Product: syz [ 130.709365][ T5903] usb 3-1: Manufacturer: syz [ 130.726193][ T5903] usb 3-1: SerialNumber: syz [ 130.839852][ T5903] usb 3-1: config 0 descriptor?? [ 130.937646][ T5903] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 130.980528][ T5903] em28xx 3-1:0.132: Video interface 132 found: [ 131.909910][ T5903] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 132.715007][ T6382] tipc: Started in network mode [ 132.720250][ T6382] tipc: Node identity ac14140f, cluster identity 4711 [ 132.730134][ T6382] tipc: New replicast peer: 255.255.255.255 [ 132.739727][ T6382] tipc: Enabled bearer , priority 10 [ 133.200801][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.210897][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.224572][ T5903] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 133.401657][ T5903] em28xx 3-1:0.132: board has no eeprom [ 133.461784][ T5903] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 133.501570][ T5903] em28xx 3-1:0.132: analog set to bulk mode. [ 133.530066][ T5985] em28xx 3-1:0.132: Registering V4L2 extension [ 133.561578][ T5903] usb 3-1: USB disconnect, device number 2 [ 133.641301][ T5903] em28xx 3-1:0.132: Disconnecting em28xx [ 133.740137][ T1622] tipc: Node number set to 2886997007 [ 134.328366][ T6395] loop2: detected capacity change from 0 to 512 [ 134.346830][ T6395] EXT4-fs: Ignoring removed nobh option [ 134.365789][ T6395] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.577842][ T6395] EXT4-fs (loop2): 1 truncate cleaned up [ 134.678386][ T6395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.006512][ T6399] loop3: detected capacity change from 0 to 32768 [ 135.032429][ T6399] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.95 (6399) [ 135.051044][ T6399] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 135.062483][ T6399] BTRFS info (device loop3): using crc32c checksum algorithm [ 135.070034][ T6399] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 135.173427][ T5985] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 135.221451][ T5985] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 135.257408][ T5985] em28xx 3-1:0.132: No AC97 audio processor [ 135.345535][ T5985] usb 3-1: Decoder not found [ 135.350784][ T5985] em28xx 3-1:0.132: failed to create media graph [ 135.362363][ T5985] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 135.379492][ T5985] em28xx 3-1:0.132: Remote control support is not available for this card. [ 135.390206][ T5903] em28xx 3-1:0.132: Closing input extension [ 135.404392][ T6399] BTRFS info (device loop3): rebuilding free space tree [ 135.438795][ T5903] em28xx 3-1:0.132: Freeing device [ 135.452366][ T6399] BTRFS info (device loop3): disabling free space tree [ 135.459390][ T6399] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.469325][ T6399] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.493859][ T6399] BTRFS info (device loop3): enabling ssd optimizations [ 135.500918][ T6399] BTRFS info (device loop3): turning on async discard [ 135.507744][ T6399] BTRFS info (device loop3): enabling disk space caching [ 135.515318][ T6399] BTRFS info (device loop3): force clearing of disk cache [ 135.522528][ T6399] BTRFS info (device loop3): use zstd compression, level 3 [ 135.533130][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.629026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 136.635688][ T5853] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 136.998488][ T5846] Bluetooth: hci3: SCO packet too small [ 139.927553][ T6438] loop1: detected capacity change from 0 to 256 [ 139.936295][ T6438] exfat: Deprecated parameter 'utf8' [ 139.942287][ T6438] exfat: Deprecated parameter 'namecase' [ 139.948235][ T6438] exfat: Deprecated parameter 'namecase' [ 139.994122][ T6438] exfat: Deprecated parameter 'utf8' [ 140.830029][ T6438] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 141.089262][ T6438] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 141.778605][ T30] audit: type=1800 audit(1774012634.965:2): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 142.985244][ T6462] loop2: detected capacity change from 0 to 4096 [ 142.991985][ T6437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.266550][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.269875][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.272030][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.276531][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.278386][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.865688][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.157707][ T6484] loop2: detected capacity change from 0 to 512 [ 145.167213][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.456886][ T6486] loop1: detected capacity change from 0 to 32768 [ 145.465618][ T5846] Bluetooth: hci5: command tx timeout [ 145.479339][ T6486] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.116 (6486) [ 145.524811][ T6486] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.524847][ T6486] BTRFS info (device loop1): using sha256 checksum algorithm [ 145.652637][ T6486] BTRFS info (device loop1): enabling ssd optimizations [ 145.659770][ T6486] BTRFS info (device loop1): turning on async discard [ 145.667740][ T6486] BTRFS info (device loop1): enabling free space tree [ 145.731817][ T6484] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.115: bg 0: block 248: padding at end of block bitmap is not set [ 145.797779][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.849330][ T6484] loop2: lost filesystem error report for type 5 error -117 [ 145.857254][ T6484] Quota error (device loop2): write_blk: dquota write failed [ 145.860330][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 145.866864][ T6484] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 145.873406][ C1] EXT4-fs (loop2): last error at time 1774012639: ext4_validate_block_bitmap:441 [ 145.882649][ T6484] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.115: Failed to acquire dquot type 1 [ 145.889786][ C1] [ 145.913386][ T6484] loop2: lost filesystem error report for type 5 error -117 [ 145.923931][ T6484] EXT4-fs (loop2): 1 truncate cleaned up [ 145.967207][ T6484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.025212][ T6484] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.065945][ T5850] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.154209][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.950374][ T6021] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 146.978042][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.032124][ T6021] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 1 [ 147.123508][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 147.135467][ T6021] loop2: lost filesystem error report for type 5 error -117 [ 147.498476][ T5846] Bluetooth: hci5: command tx timeout [ 149.571098][ T5846] Bluetooth: hci5: command tx timeout [ 150.846326][ T6541] loop2: detected capacity change from 0 to 1024 [ 150.920295][ T6541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.989078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 151.108155][ T6549] loop0: detected capacity change from 0 to 64 [ 151.184349][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.379262][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.566822][ T6470] bridge_slave_0: entered allmulticast mode [ 151.671396][ T5846] Bluetooth: hci5: command tx timeout [ 151.736239][ T6470] bridge_slave_0: entered promiscuous mode [ 151.783774][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.801523][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.882313][ T6541] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.124: Allocating blocks 497-513 which overlap fs metadata [ 151.921198][ T6541] EXT4-fs (loop2): pa ffff888035a2b740: logic 131104, phys. 177, len 21 [ 151.929856][ T6541] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 151.997863][ T6470] bridge_slave_1: entered allmulticast mode [ 152.046753][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.080047][ T6470] bridge_slave_1: entered promiscuous mode [ 152.107487][ T43] bridge_slave_1: left allmulticast mode [ 152.148183][ T43] bridge_slave_1: left promiscuous mode [ 152.174935][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.341616][ T43] bridge_slave_0: left allmulticast mode [ 152.372511][ T43] bridge_slave_0: left promiscuous mode [ 152.411192][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.586907][ T6561] loop0: detected capacity change from 0 to 512 [ 152.599390][ T6561] EXT4-fs: Ignoring removed nobh option [ 152.638193][ T6561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.868617][ T6561] EXT4-fs (loop0): 1 truncate cleaned up [ 152.892971][ T6561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.329001][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.131719][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.188491][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.235272][ T43] bond0 (unregistering): Released all slaves [ 155.544660][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.148120][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.185974][ T6470] team0: Port device team_slave_0 added [ 157.216759][ T6470] team0: Port device team_slave_1 added [ 158.018473][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 158.559141][ T5889] usb 1-1: device descriptor read/64, error -71 [ 158.820104][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.880494][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.892402][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.013578][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.062872][ T6615] loop3: detected capacity change from 0 to 1024 [ 159.091367][ T5889] usb 1-1: device descriptor read/64, error -71 [ 159.223078][ T5889] usb usb1-port1: attempt power cycle [ 159.233636][ T6615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.361238][ T6615] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.141: Allocating blocks 497-513 which overlap fs metadata [ 159.395438][ T6615] EXT4-fs (loop3): pa ffff888035a2b3a0: logic 131104, phys. 177, len 21 [ 159.403995][ T6615] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 160.174539][ T5889] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 160.222937][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.257830][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.268590][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.305515][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.507017][ T5889] usb 1-1: device descriptor read/8, error -71 [ 160.530779][ T43] hsr_slave_0: left promiscuous mode [ 160.570975][ T43] hsr_slave_1: left promiscuous mode [ 160.576220][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 160.576707][ T6626] netlink: 'syz.1.144': attribute type 15 has an invalid length. [ 160.596798][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.604687][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.618947][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.626742][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.175006][ T43] veth1_macvtap: left promiscuous mode [ 161.191510][ T43] veth0_macvtap: left promiscuous mode [ 161.254851][ T43] veth1_vlan: left promiscuous mode [ 161.264271][ T43] veth0_vlan: left promiscuous mode [ 161.288372][ T5985] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.463391][ T5985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.510773][ T5985] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.532841][ T5985] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 161.544292][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.563197][ T5985] usb 4-1: Product: syz [ 161.573364][ T5985] usb 4-1: Manufacturer: syz [ 161.585681][ T5985] usb 4-1: SerialNumber: syz [ 161.623130][ T5985] usb 4-1: config 0 descriptor?? [ 161.646628][ T5985] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 161.704941][ T5985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.726958][ T5985] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 161.754029][ T5985] usb 4-1: media controller created [ 161.814061][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.999660][ T5985] DVB: Unable to find symbol tda10046_attach() [ 162.007386][ T5985] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 162.036985][ T5985] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 162.079160][ T43] team0 (unregistering): Port device team_slave_1 removed [ 162.189238][ T43] team0 (unregistering): Port device team_slave_0 removed [ 163.081011][ T5985] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 163.105787][ T6645] capability: warning: `syz.0.148' uses 32-bit capabilities (legacy support in use) [ 163.149740][ T5985] usb 4-1: USB disconnect, device number 4 [ 163.415137][ T6626] vxlan0: entered promiscuous mode [ 163.446816][ T154] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.494999][ T154] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.555871][ T154] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.596747][ T154] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.769600][ T6644] delete_channel: no stack [ 163.895282][ T6470] hsr_slave_0: entered promiscuous mode [ 163.946699][ T6470] hsr_slave_1: entered promiscuous mode [ 163.987435][ T6470] debugfs: 'hsr0' already exists in 'hsr' [ 164.004334][ T6470] Cannot create hsr debugfs directory [ 164.777331][ T6656] loop3: detected capacity change from 0 to 4096 [ 165.365060][ T43] IPVS: stop unused estimator thread 0... [ 168.119277][ T6470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.227585][ T6470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.304047][ T6470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.420108][ T6470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.032084][ T6726] loop1: detected capacity change from 0 to 512 [ 171.045540][ T6726] EXT4-fs: Ignoring removed nobh option [ 171.079300][ T6726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.430752][ T6726] EXT4-fs (loop1): 1 truncate cleaned up [ 171.520940][ T6726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.895101][ T6721] loop0: detected capacity change from 0 to 4096 [ 171.911958][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.723732][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.020476][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.226751][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.233939][ T6277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.857201][ T6753] process 'syz.0.171' launched './file0' with NULL argv: empty string added [ 174.895872][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.903065][ T6277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.958426][ T5918] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.077612][ T6759] loop1: detected capacity change from 0 to 1024 [ 175.169448][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 175.193899][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.206386][ T6759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.248437][ T5889] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.297921][ T6759] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.174: Allocating blocks 497-513 which overlap fs metadata [ 175.327449][ T6759] EXT4-fs (loop1): pa ffff888035a2ad98: logic 131104, phys. 177, len 21 [ 175.336088][ T6759] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 175.357017][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.422116][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 175.463725][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 175.495130][ T5918] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 175.532436][ T5889] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 175.567812][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.597111][ T5889] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 175.633605][ T5889] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 175.656090][ T5889] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 175.687726][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 175.735419][ T5889] usb 4-1: config 0 has no interface number 0 [ 175.747049][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.777213][ T5918] usb 3-1: config 0 descriptor?? [ 175.780797][ T5889] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 175.838019][ T5889] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 175.882167][ T5889] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.924344][ T5889] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.002427][ T5889] usb 4-1: config 0 interface 125 has no altsetting 0 [ 176.054314][ T5889] usb 4-1: config 0 interface 125 has no altsetting 2 [ 176.106694][ T5889] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 176.163325][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.201100][ T5889] usb 4-1: Product: syz [ 176.218659][ T5918] usbhid 3-1:0.0: can't add hid device: -71 [ 176.223833][ T5889] usb 4-1: Manufacturer: syz [ 176.252709][ T5889] usb 4-1: SerialNumber: syz [ 176.267568][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 176.337092][ T5889] usb 4-1: config 0 descriptor?? [ 176.337287][ T5918] usb 3-1: USB disconnect, device number 3 [ 176.493272][ T6780] loop1: detected capacity change from 0 to 512 [ 176.505095][ T6780] EXT4-fs: Ignoring removed nobh option [ 176.572936][ T6780] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.832410][ T6780] EXT4-fs (loop1): 1 truncate cleaned up [ 176.917236][ T6780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.938467][ T5889] usb 4-1: selecting invalid altsetting 2 [ 177.664281][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.709238][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.759179][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.409429][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.448584][ T5889] get_1284_register timeout [ 178.457432][ C0] usb 4-1: async_complete: urb error -104 [ 178.463359][ C0] usb 4-1: async_complete: urb error -104 [ 178.516890][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.526544][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.607271][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.672368][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.708759][ T5889] usb 4-1: USB disconnect, device number 5 [ 179.475052][ T6803] loop0: detected capacity change from 0 to 4096 [ 180.441952][ T6470] veth0_vlan: entered promiscuous mode [ 180.602076][ T6470] veth1_vlan: entered promiscuous mode [ 181.852570][ T6470] veth0_macvtap: entered promiscuous mode [ 182.054746][ T6470] veth1_macvtap: entered promiscuous mode [ 182.064218][ T6835] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 182.071775][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.249627][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 182.273020][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.283132][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.326458][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.362130][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 182.395829][ T5889] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 182.409431][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.431676][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.435594][ T5889] usb 1-1: config 0 descriptor?? [ 182.573318][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.600937][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.624666][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.646911][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.985419][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 183.026923][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 183.068065][ T5889] usb 1-1: USB disconnect, device number 6 [ 183.197115][ T6821] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 183.220199][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.261129][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.772274][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.978422][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.232038][ T6914] loop3: detected capacity change from 0 to 1024 [ 188.261307][ T6914] EXT4-fs: Ignoring removed oldalloc option [ 188.282800][ T6914] EXT4-fs: Ignoring removed bh option [ 188.350706][ T6914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.566097][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.883518][ T6922] loop1: detected capacity change from 0 to 512 [ 190.084283][ T6922] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.206: bg 0: block 248: padding at end of block bitmap is not set [ 190.163962][ T6922] loop1: lost filesystem error report for type 5 error -117 [ 190.166198][ T6922] Quota error (device loop1): write_blk: dquota write failed [ 190.173653][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 190.173675][ C1] EXT4-fs (loop1): last error at time 1774012683: ext4_validate_block_bitmap:441 [ 190.247441][ T6922] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 190.284101][ T6922] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.206: Failed to acquire dquot type 1 [ 190.345233][ T6922] loop1: lost filesystem error report for type 5 error -117 [ 190.365251][ T6939] loop5: detected capacity change from 0 to 512 [ 190.422281][ T6922] EXT4-fs (loop1): 1 truncate cleaned up [ 190.422801][ T6939] ext4: Bad value for 'max_dir_size_kb' [ 190.470941][ T6922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.661820][ T6922] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.830530][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.010208][ T6967] loop3: detected capacity change from 0 to 512 [ 194.033676][ T1028] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 194.048055][ T6967] ext4: Bad value for 'max_dir_size_kb' [ 194.056493][ T1028] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 194.068013][ T1028] loop1: lost filesystem error report for type 5 error -117 [ 194.334692][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.374765][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.807103][ T6990] loop2: detected capacity change from 0 to 512 [ 197.057409][ T6990] ext4: Bad value for 'max_dir_size_kb' [ 197.663398][ T7001] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 199.419629][ T7013] loop3: detected capacity change from 0 to 512 [ 199.542670][ T7013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.226: bg 0: block 248: padding at end of block bitmap is not set [ 200.456105][ T7013] loop3: lost filesystem error report for type 5 error -117 [ 200.458293][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 200.473470][ C0] EXT4-fs (loop3): last error at time 1774012693: ext4_validate_block_bitmap:441 [ 200.488298][ T7013] Quota error (device loop3): write_blk: dquota write failed [ 200.498861][ T7013] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 200.550371][ T7013] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.226: Failed to acquire dquot type 1 [ 200.593215][ T7013] loop3: lost filesystem error report for type 5 error -117 [ 200.602675][ T7013] EXT4-fs (loop3): 1 truncate cleaned up [ 200.653346][ T7013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.710338][ T7013] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.838390][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 201.844670][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 201.853471][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 201.861449][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 202.366636][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.377821][ T12] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 202.609344][ T7044] loop1: detected capacity change from 0 to 32768 [ 202.621726][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 202.637001][ T12] loop3: lost filesystem error report for type 5 error -117 [ 202.684549][ T7044] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.769053][ T7044] XFS (loop1): Ending clean mount [ 203.287119][ T7060] loop3: detected capacity change from 0 to 16 [ 203.497826][ T7060] erofs (device loop3): mounted with root inode @ nid 36. [ 203.507809][ T7012] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 203.574395][ T7060] syz.3.233: attempt to access beyond end of device [ 203.574395][ T7060] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 203.584793][ T7062] loop5: detected capacity change from 0 to 512 [ 203.605636][ T7062] ext4: Bad value for 'max_dir_size_kb' [ 203.819468][ T7060] syz.3.233: attempt to access beyond end of device [ 203.819468][ T7060] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 204.694991][ T7060] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 204.740067][ T5850] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 204.742653][ T7060] erofs (device loop3): read error -117 @ 1 of nid 89 [ 204.831953][ T30] audit: type=1800 audit(1774012698.275:3): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 204.864567][ T7060] syz.3.233 (7060) used greatest stack depth: 18408 bytes left [ 205.879486][ T7080] IPVS: length: 24 != 24159191448 [ 206.643508][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.973153][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.993593][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.095524][ T7100] loop3: detected capacity change from 0 to 512 [ 210.172763][ T7100] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.243: bg 0: block 248: padding at end of block bitmap is not set [ 210.284648][ T7101] loop5: detected capacity change from 0 to 512 [ 210.305403][ T7100] loop3: lost filesystem error report for type 5 error -117 [ 210.306156][ T7100] Quota error (device loop3): write_blk: dquota write failed [ 210.313649][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 210.313670][ C0] EXT4-fs (loop3): last error at time 1774012703: ext4_validate_block_bitmap:441 [ 210.349818][ T7101] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.561288][ T7101] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.244: orphan file block 0: bad magic [ 210.596692][ T7100] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 210.607113][ T7100] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.243: Failed to acquire dquot type 1 [ 210.618688][ T7100] loop3: lost filesystem error report for type 5 error -117 [ 210.620186][ T7100] EXT4-fs (loop3): 1 truncate cleaned up [ 210.668409][ T7101] loop5: lost filesystem error report for type 5 error -117 [ 210.670481][ T7101] EXT4-fs (loop5): mount failed [ 210.683842][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 210.683867][ C1] EXT4-fs (loop5): initial error at time 1774012704: ext4_init_orphan_info:618 [ 210.683896][ C1] EXT4-fs (loop5): last error at time 1774012704: ext4_init_orphan_info:618 [ 211.454609][ T7100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.468189][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.484537][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.493747][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.505151][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.518423][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.529214][ T7100] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.574612][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.663748][ T7124] loop2: detected capacity change from 0 to 512 [ 211.843967][ T7124] ext4: Bad value for 'max_dir_size_kb' [ 213.303128][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.322596][ T99] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 213.331763][ T99] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 1 [ 213.345830][ T99] loop3: lost filesystem error report for type 5 error -117 [ 213.648481][ T5846] Bluetooth: hci0: command tx timeout [ 214.758751][ T154] bridge_slave_1: left allmulticast mode [ 214.799816][ T154] bridge_slave_1: left promiscuous mode [ 214.831450][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.895063][ T154] bridge_slave_0: left allmulticast mode [ 214.930737][ T154] bridge_slave_0: left promiscuous mode [ 214.957254][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.594052][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.609243][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.623297][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.632880][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.642994][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.724732][ T7156] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 215.732178][ T5849] Bluetooth: hci0: command tx timeout [ 215.776626][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.790107][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.803176][ T154] bond0 (unregistering): Released all slaves [ 216.665834][ T7176] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 216.961778][ T7116] chnl_net:caif_netlink_parms(): no params data found [ 217.699320][ T7195] loop5: detected capacity change from 0 to 512 [ 217.720969][ T154] hsr_slave_0: left promiscuous mode [ 217.729891][ T5849] Bluetooth: hci1: command tx timeout [ 217.755908][ T7195] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.260: bg 0: block 248: padding at end of block bitmap is not set [ 217.794983][ T154] hsr_slave_1: left promiscuous mode [ 217.809276][ T5849] Bluetooth: hci0: command tx timeout [ 217.831285][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.844101][ T7195] loop5: lost filesystem error report for type 5 error -117 [ 217.844743][ T7195] Quota error (device loop5): write_blk: dquota write failed [ 217.852157][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 217.852178][ C0] EXT4-fs (loop5): last error at time 1774012711: ext4_validate_block_bitmap:441 [ 217.892423][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.949921][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.979931][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.992130][ T7195] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 218.002376][ T7195] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.260: Failed to acquire dquot type 1 [ 218.025453][ T7195] loop5: lost filesystem error report for type 5 error -117 [ 218.026279][ T154] veth1_macvtap: left promiscuous mode [ 218.044618][ T7195] EXT4-fs (loop5): 1 truncate cleaned up [ 218.054009][ T7195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.067138][ T154] veth0_macvtap: left promiscuous mode [ 218.073791][ T154] veth1_vlan: left promiscuous mode [ 218.080751][ T154] veth0_vlan: left promiscuous mode [ 218.089291][ T7195] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.903234][ T6470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.917818][ T142] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 218.929735][ T142] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 1 [ 218.942751][ T142] loop5: lost filesystem error report for type 5 error -117 [ 218.946228][ T154] team0 (unregistering): Port device team_slave_1 removed [ 218.985469][ T154] team0 (unregistering): Port device team_slave_0 removed [ 219.306644][ T7203] tc_dump_action: action bad kind [ 219.513784][ T7208] syzkaller0: entered promiscuous mode [ 219.571911][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.584546][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.591997][ T7116] bridge_slave_0: entered allmulticast mode [ 219.604456][ T7116] bridge_slave_0: entered promiscuous mode [ 219.625436][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.633047][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.640709][ T7116] bridge_slave_1: entered allmulticast mode [ 219.649348][ T7116] bridge_slave_1: entered promiscuous mode [ 219.912112][ T5849] Bluetooth: hci1: command tx timeout [ 219.917852][ T5849] Bluetooth: hci0: command tx timeout [ 220.402454][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.969004][ T5849] Bluetooth: hci1: command tx timeout [ 222.601357][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.620246][ T7231] tipc: Started in network mode [ 222.626477][ T7231] tipc: Node identity ac14140f, cluster identity 4711 [ 222.635755][ T7231] tipc: New replicast peer: 255.255.255.255 [ 222.642620][ T7231] tipc: Enabled bearer , priority 10 [ 222.704793][ T7245] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 223.379003][ T7116] team0: Port device team_slave_0 added [ 223.422609][ T7116] team0: Port device team_slave_1 added [ 223.657256][ T7263] loop2: detected capacity change from 0 to 512 [ 223.720682][ T7263] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.271: bg 0: block 248: padding at end of block bitmap is not set [ 223.785409][ T7263] loop2: lost filesystem error report for type 5 error -117 [ 223.787721][ T7263] Quota error (device loop2): write_blk: dquota write failed [ 223.795127][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 223.795149][ C1] EXT4-fs (loop2): last error at time 1774012717: ext4_validate_block_bitmap:441 [ 223.862760][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.893324][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.937869][ T7263] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 223.997919][ T7116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.014351][ T7263] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.271: Failed to acquire dquot type 1 [ 224.048791][ T5849] Bluetooth: hci1: command tx timeout [ 224.080350][ T7263] loop2: lost filesystem error report for type 5 error -117 [ 224.087213][ T7263] EXT4-fs (loop2): 1 truncate cleaned up [ 224.144337][ T5927] tipc: Node number set to 2886997007 [ 224.159408][ T7273] loop5: detected capacity change from 0 to 256 [ 224.675578][ T7263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.689759][ T7164] chnl_net:caif_netlink_parms(): no params data found [ 224.751838][ T7263] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.771661][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.780319][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.809885][ T7116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.627379][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.642628][ T43] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 225.659475][ T43] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 225.706633][ T43] loop2: lost filesystem error report for type 5 error -117 [ 226.218087][ T7292] Zero length message leads to an empty skb [ 227.105279][ T7116] hsr_slave_0: entered promiscuous mode [ 227.144468][ T7116] hsr_slave_1: entered promiscuous mode [ 227.185428][ T7116] debugfs: 'hsr0' already exists in 'hsr' [ 227.248577][ T7116] Cannot create hsr debugfs directory [ 228.302303][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.317587][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.434730][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.445458][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.501242][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.515656][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.527094][ T7164] bridge_slave_0: entered allmulticast mode [ 228.538178][ T7164] bridge_slave_0: entered promiscuous mode [ 228.617293][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.630264][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.653897][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.667114][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.675643][ T7164] bridge_slave_1: entered allmulticast mode [ 228.686042][ T7164] bridge_slave_1: entered promiscuous mode [ 228.817745][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.828653][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.041674][ T7312] loop2: detected capacity change from 0 to 32768 [ 229.072903][ T7312] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.116775][ T7312] XFS (loop2): Ending clean mount [ 229.807539][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.856604][ T7164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.992767][ T7164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.956422][ T7164] team0: Port device team_slave_0 added [ 231.159611][ T7164] team0: Port device team_slave_1 added [ 232.122540][ T7334] ADFS-fs (loop5): error: unable to read block 3, try 0 [ 232.233923][ T7338] loop2: detected capacity change from 0 to 1024 [ 233.494888][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.516082][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.550061][ T7164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.735897][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.770743][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.807453][ T7164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.682686][ T154] bridge_slave_1: left allmulticast mode [ 234.704253][ T154] bridge_slave_1: left promiscuous mode [ 234.727851][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.768149][ T154] bridge_slave_0: left allmulticast mode [ 234.785927][ T154] bridge_slave_0: left promiscuous mode [ 234.803402][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.669533][ T58] hfsplus: b-tree write err: -5, ino 25 [ 235.697476][ T58] hfsplus: b-tree write err: -5, ino 4 [ 235.728062][ T58] hfsplus: b-tree write err: -5, ino 2 [ 235.749977][ T58] hfsplus: b-tree write err: -5, ino 22 [ 236.970820][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.029930][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.057989][ T154] bond0 (unregistering): Released all slaves [ 237.235064][ T7164] hsr_slave_0: entered promiscuous mode [ 237.259399][ T7164] hsr_slave_1: entered promiscuous mode [ 237.661203][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056acf800: rx timeout, send abort [ 237.706232][ T7164] debugfs: 'hsr0' already exists in 'hsr' [ 237.719667][ T7164] Cannot create hsr debugfs directory [ 237.813438][ T154] tipc: Disabling bearer [ 237.834779][ T154] tipc: Left network mode [ 238.171695][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056acf800: abort rx timeout. Force session deactivation [ 238.219314][ T7410] loop2: detected capacity change from 0 to 1024 [ 238.242705][ T7116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.475178][ T7116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.645520][ T154] hsr_slave_0: left promiscuous mode [ 238.680763][ T154] hsr_slave_1: left promiscuous mode [ 238.706430][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.726953][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.749388][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.765885][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.815371][ T154] veth1_macvtap: left promiscuous mode [ 238.830372][ T154] veth0_macvtap: left promiscuous mode [ 238.855256][ T154] veth1_vlan: left promiscuous mode [ 238.872116][ T154] veth0_vlan: left promiscuous mode [ 240.612456][ T7432] fuse: Bad value for 'user_id' [ 240.617422][ T7432] fuse: Bad value for 'user_id' [ 240.827830][ T154] team0 (unregistering): Port device team_slave_1 removed [ 241.162165][ T154] team0 (unregistering): Port device team_slave_0 removed [ 241.753302][ T7116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.833832][ T142] hfsplus: b-tree write err: -5, ino 25 [ 241.867827][ T142] hfsplus: b-tree write err: -5, ino 4 [ 241.883763][ T7116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.887863][ T142] hfsplus: b-tree write err: -5, ino 2 [ 241.909984][ T142] hfsplus: b-tree write err: -5, ino 22 [ 242.460645][ T7450] loop2: detected capacity change from 0 to 2048 [ 243.028029][ T7450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.041256][ T7450] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.182956][ T7450] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 243.619942][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.854376][ T154] IPVS: stop unused estimator thread 0... [ 244.494520][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.585369][ T7463] netlink: 'syz.2.314': attribute type 25 has an invalid length. [ 244.812092][ T7116] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.825105][ T7164] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.881144][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.888406][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.903561][ T7164] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 245.075796][ T7164] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 245.106239][ T7164] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 245.174785][ T7475] fuse: Bad value for 'user_id' [ 245.179899][ T7475] fuse: Bad value for 'user_id' [ 245.703455][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.710724][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.022858][ T7488] loop2: detected capacity change from 0 to 1024 [ 246.884769][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.979100][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 247.055475][ T7164] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.121601][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.128874][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.183816][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 247.212296][ T5918] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 247.233682][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.240945][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.258872][ T5918] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.278339][ T5918] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.303282][ T5918] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.319182][ T5918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 247.330800][ T5918] usb 6-1: config 0 has no interface number 0 [ 247.378173][ T5918] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 247.395334][ T5918] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.405895][ T5918] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.425702][ T5918] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.455613][ T5918] usb 6-1: config 0 interface 125 has no altsetting 0 [ 247.463224][ T5918] usb 6-1: config 0 interface 125 has no altsetting 2 [ 247.474873][ T5918] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 247.496788][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.507124][ T5918] usb 6-1: Product: syz [ 247.527681][ T5918] usb 6-1: Manufacturer: syz [ 247.547944][ T5918] usb 6-1: SerialNumber: syz [ 247.604079][ T7116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.616439][ T5918] usb 6-1: config 0 descriptor?? [ 247.667670][ T5918] usb 6-1: selecting invalid altsetting 2 [ 248.263084][ T7503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.311776][ T7503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.487198][ T154] hfsplus: b-tree write err: -5, ino 25 [ 248.504881][ T154] hfsplus: b-tree write err: -5, ino 4 [ 248.529733][ T154] hfsplus: b-tree write err: -5, ino 2 [ 248.544361][ T154] hfsplus: b-tree write err: -5, ino 22 [ 248.553733][ T7503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.612445][ T7503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.652095][ C1] usb 6-1: async_complete: urb error -71 [ 248.657892][ C1] usb 6-1: async_complete: urb error -71 [ 248.693183][ T5918] get_1284_register: usb error -71 [ 248.725707][ T5918] usb 6-1: USB disconnect, device number 2 [ 248.749829][ T7532] netlink: 'syz.3.325': attribute type 25 has an invalid length. [ 249.231611][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.321918][ T7116] veth0_vlan: entered promiscuous mode [ 249.422065][ T7116] veth1_vlan: entered promiscuous mode [ 249.614902][ T7116] veth0_macvtap: entered promiscuous mode [ 249.649993][ T7116] veth1_macvtap: entered promiscuous mode [ 249.705381][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.721479][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.753226][ T7551] loop5: detected capacity change from 0 to 1024 [ 249.769338][ T7551] EXT4-fs: Invalid want_extra_isize 9 [ 249.837523][ T5903] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 250.900405][ T5903] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.892796][ T5903] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 251.908967][ T5903] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 251.917220][ T5903] usb 3-1: Product: syz [ 251.933898][ T5903] usb 3-1: Manufacturer: syz [ 251.938963][ T5903] usb 3-1: SerialNumber: syz [ 251.998783][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.013752][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.024852][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.033888][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.457375][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.508942][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.641818][ T5903] usb 3-1: config 0 descriptor?? [ 252.654652][ T5903] usb 3-1: can't set config #0, error -71 [ 252.671770][ T5903] usb 3-1: USB disconnect, device number 4 [ 253.117280][ T5849] Bluetooth: hci2: SCO packet too small [ 253.124927][ T7576] loop5: detected capacity change from 0 to 1024 [ 253.140761][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.814813][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.206019][ T7164] veth0_vlan: entered promiscuous mode [ 254.235896][ T7588] netlink: 'syz.3.334': attribute type 25 has an invalid length. [ 254.305594][ T7164] veth1_vlan: entered promiscuous mode [ 254.703952][ T7164] veth0_macvtap: entered promiscuous mode [ 254.744279][ T7164] veth1_macvtap: entered promiscuous mode [ 255.440549][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.502473][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.651419][ T6021] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.680998][ T6021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.736070][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749351][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.790846][ T6021] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.866783][ T6021] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.114976][ T7610] loop2: detected capacity change from 0 to 512 [ 256.133022][ T7610] EXT4-fs: Ignoring removed nobh option [ 256.185675][ T7610] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 256.600969][ T7610] EXT4-fs (loop2): 1 truncate cleaned up [ 256.680031][ T7610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.116737][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.410991][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.452240][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.637597][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.659993][ T5985] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 257.676115][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.212259][ T7621] Bluetooth: MGMT ver 1.23 [ 258.310562][ T5985] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.325300][ T5985] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 258.344948][ T5985] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 258.374774][ T5985] usb 3-1: Product: syz [ 258.397438][ T5985] usb 3-1: Manufacturer: syz [ 258.403535][ T5985] usb 3-1: SerialNumber: syz [ 258.423205][ T5985] usb 3-1: config 0 descriptor?? [ 258.734888][ T6277] hfsplus: b-tree write err: -5, ino 25 [ 258.759811][ T6277] hfsplus: b-tree write err: -5, ino 4 [ 258.784120][ T6277] hfsplus: b-tree write err: -5, ino 2 [ 258.814783][ T6277] hfsplus: b-tree write err: -5, ino 22 [ 259.881069][ T5849] Bluetooth: hci5: SCO packet too small [ 260.546910][ T5918] usb 3-1: USB disconnect, device number 5 [ 262.758372][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 264.542761][ T7692] loop7: detected capacity change from 0 to 1024 [ 266.698556][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 266.858344][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 266.870405][ T9] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 266.887154][ T9] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.924309][ T9] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.936003][ T9] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.946911][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.963755][ T9] usb 7-1: config 0 has no interface number 0 [ 266.972352][ T9] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 266.985719][ T9] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 267.130095][ T9] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.157807][ T9] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.173543][ T9] usb 7-1: config 0 interface 125 has no altsetting 0 [ 267.200090][ T9] usb 7-1: config 0 interface 125 has no altsetting 2 [ 267.635232][ T9] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 267.649544][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.657877][ T9] usb 7-1: Product: syz [ 267.676917][ T9] usb 7-1: Manufacturer: syz [ 267.697743][ T9] usb 7-1: SerialNumber: syz [ 267.731685][ T9] usb 7-1: config 0 descriptor?? [ 267.755986][ T9] usb 7-1: selecting invalid altsetting 2 [ 268.060751][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 268.656764][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.696900][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.772286][ T9] get_1284_register timeout [ 268.798719][ C0] usb 7-1: async_complete: urb error -104 [ 268.804770][ C0] usb 7-1: async_complete: urb error -104 [ 268.828081][ T5849] Bluetooth: hci4: SCO packet too small [ 268.973125][ T7740] loop5: detected capacity change from 0 to 256 [ 268.989169][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.052505][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.083029][ T24] usb 7-1: USB disconnect, device number 2 [ 270.677065][ T33] hfsplus: b-tree write err: -5, ino 25 [ 270.698875][ T33] hfsplus: b-tree write err: -5, ino 4 [ 270.720425][ T33] hfsplus: b-tree write err: -5, ino 2 [ 270.743420][ T33] hfsplus: b-tree write err: -5, ino 22 [ 271.078901][ T7766] loop5: detected capacity change from 0 to 1024 [ 271.117783][ T7766] EXT4-fs: Invalid want_extra_isize 9 [ 274.556267][ T7787] loop5: detected capacity change from 0 to 256 [ 274.634399][ T7785] syz.2.372 (7785) used greatest stack depth: 17304 bytes left [ 276.332109][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563b1800: rx timeout, send abort [ 276.768380][ T7810] tipc: Started in network mode [ 276.773358][ T7810] tipc: Node identity ac14140f, cluster identity 4711 [ 276.780501][ T7810] tipc: New replicast peer: 255.255.255.255 [ 276.788235][ T7810] tipc: Enabled bearer , priority 10 [ 276.841178][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563b1800: abort rx timeout. Force session deactivation [ 276.923590][ T7809] loop2: detected capacity change from 0 to 1024 [ 277.786449][ T24] tipc: Node number set to 2886997007 [ 278.124565][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076607c00: rx timeout, send abort [ 280.964117][ T99] hfsplus: b-tree write err: -5, ino 25 [ 280.995188][ T99] hfsplus: b-tree write err: -5, ino 4 [ 281.019360][ T99] hfsplus: b-tree write err: -5, ino 2 [ 281.040093][ T5849] Bluetooth: hci5: SCO packet too small [ 281.256388][ T99] hfsplus: b-tree write err: -5, ino 22 [ 281.656283][ T7870] tipc: Started in network mode [ 281.691050][ T7870] tipc: Node identity ac14140f, cluster identity 4711 [ 281.746796][ T7870] tipc: New replicast peer: 255.255.255.255 [ 281.809541][ T7870] tipc: Enabled bearer , priority 10 [ 282.921070][ T1622] tipc: Node number set to 2886997007 [ 284.945515][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b22d000: rx timeout, send abort [ 285.041616][ T7907] loop2: detected capacity change from 0 to 32768 [ 285.079052][ T7907] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.402 (7907) [ 285.096671][ T7907] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 285.106891][ T7907] BTRFS info (device loop2): using sha256 checksum algorithm [ 285.206797][ T7907] BTRFS info (device loop2): enabling ssd optimizations [ 285.213872][ T7907] BTRFS info (device loop2): turning on async discard [ 285.220744][ T7907] BTRFS info (device loop2): enabling free space tree [ 285.276585][ T5927] Process accounting resumed [ 285.453792][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b22d000: abort rx timeout. Force session deactivation [ 285.949442][ T5844] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 286.726160][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b22c800: rx timeout, send abort [ 287.234511][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b22c800: abort rx timeout. Force session deactivation [ 289.080865][ T7951] loop2: detected capacity change from 0 to 512 [ 289.115313][ T7951] ext4: Bad value for 'max_dir_size_kb' [ 289.780347][ T7963] bridge0: port 3(vlan2) entered blocking state [ 289.811735][ T7963] bridge0: port 3(vlan2) entered disabled state [ 289.842325][ T7963] vlan2: entered allmulticast mode [ 289.857862][ T7963] geneve0: entered allmulticast mode [ 289.898622][ T7963] vlan2: entered promiscuous mode [ 289.914677][ T7963] geneve0: entered promiscuous mode [ 289.920200][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 290.130546][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 290.142510][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.164751][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.184135][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 290.212581][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.388103][ T24] usb 3-1: config 0 descriptor?? [ 293.877312][ T5927] usb 3-1: USB disconnect, device number 6 [ 294.257401][ T8016] loop3: detected capacity change from 0 to 32768 [ 294.278497][ T8016] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.422 (8016) [ 294.295001][ T8016] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.305196][ T8016] BTRFS info (device loop3): using sha256 checksum algorithm [ 294.365631][ T8019] loop5: detected capacity change from 0 to 512 [ 294.429840][ T8016] BTRFS info (device loop3): enabling ssd optimizations [ 294.436838][ T8016] BTRFS info (device loop3): turning on async discard [ 294.443852][ T8016] BTRFS info (device loop3): enabling free space tree [ 294.465716][ T1622] Process accounting resumed [ 294.497777][ T8019] ext4: Bad value for 'max_dir_size_kb' [ 294.936884][ T5853] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 296.495423][ T8057] loop5: detected capacity change from 0 to 32768 [ 296.516057][ T8057] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.428 (8057) [ 296.532138][ T8057] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 296.542304][ T8057] BTRFS info (device loop5): using sha256 checksum algorithm [ 296.667451][ T8057] BTRFS info (device loop5): enabling ssd optimizations [ 296.674518][ T8057] BTRFS info (device loop5): turning on async discard [ 296.681355][ T8057] BTRFS info (device loop5): enabling free space tree [ 297.982122][ T8078] Process accounting resumed [ 298.124869][ T8085] loop7: detected capacity change from 0 to 4096 [ 298.185105][ T8085] ntfs3(loop7): ino=3, Correct links count -> 2. [ 298.698437][ T8096] ntfs3(loop7): ino=5, "/" ntfs_readdir [ 299.304741][ T6470] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 301.203529][ T8120] loop7: detected capacity change from 0 to 32768 [ 301.232886][ T8120] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.435 (8120) [ 301.268426][ T8120] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 301.278619][ T8120] BTRFS info (device loop7): using sha256 checksum algorithm [ 301.496916][ T8120] BTRFS info (device loop7): enabling ssd optimizations [ 301.504020][ T8120] BTRFS info (device loop7): turning on async discard [ 301.510906][ T8120] BTRFS info (device loop7): enabling free space tree [ 301.591163][ T5918] Process accounting resumed [ 301.642429][ T8141] loop3: detected capacity change from 0 to 1024 [ 301.913500][ T8141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.198134][ T8157] tipc: Enabling of bearer rejected, already enabled [ 302.219790][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.265612][ T8158] loop2: detected capacity change from 0 to 1024 [ 302.284546][ T7164] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 302.302087][ T8158] EXT4-fs: Invalid want_extra_isize 9 [ 304.420944][ T8171] loop3: detected capacity change from 0 to 2048 [ 305.143778][ T8171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.156740][ T8171] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.287839][ T8167] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 305.548070][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.038712][ T8177] loop2: detected capacity change from 0 to 512 [ 306.219960][ T8177] ext4: Bad value for 'max_dir_size_kb' [ 308.843454][ T8208] loop5: detected capacity change from 0 to 1024 [ 308.930322][ T8208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.006242][ T8222] loop6: detected capacity change from 0 to 32768 [ 311.197516][ T8222] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.453 (8222) [ 311.235998][ T8222] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 311.247015][ T8222] BTRFS info (device loop6): using sha256 checksum algorithm [ 311.270944][ T6470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.430149][ T8222] BTRFS info (device loop6): enabling ssd optimizations [ 311.437172][ T8222] BTRFS info (device loop6): turning on async discard [ 311.444006][ T8222] BTRFS info (device loop6): enabling free space tree [ 311.482728][ T5927] Process accounting resumed [ 311.605346][ T8245] loop2: detected capacity change from 0 to 1024 [ 311.677298][ T8245] EXT4-fs: Invalid want_extra_isize 9 [ 311.736871][ T8248] loop5: detected capacity change from 0 to 1024 [ 311.948855][ T7116] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.312198][ T8248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.730774][ T8265] loop2: detected capacity change from 0 to 32768 [ 313.745857][ T8265] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.459 (8265) [ 313.767622][ T8265] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 313.777786][ T8265] BTRFS info (device loop2): using crc32c checksum algorithm [ 313.785226][ T8265] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 313.854536][ T6470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.343758][ T8280] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 314.658449][ T8265] BTRFS info (device loop2): rebuilding free space tree [ 314.944396][ T8265] BTRFS info (device loop2): disabling free space tree [ 314.951503][ T8265] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 314.961304][ T8265] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 314.979603][ T8265] BTRFS info (device loop2): enabling ssd optimizations [ 314.986633][ T8265] BTRFS info (device loop2): turning on async discard [ 314.993510][ T8265] BTRFS info (device loop2): enabling disk space caching [ 315.000622][ T8265] BTRFS info (device loop2): force clearing of disk cache [ 315.007777][ T8265] BTRFS info (device loop2): use zstd compression, level 3 [ 316.234528][ T8297] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 317.261156][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.270900][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.433844][ T8306] ADFS-fs (loop7): error: unable to read block 3, try 0 [ 318.090657][ T5844] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 319.149591][ T8313] loop3: detected capacity change from 0 to 32768 [ 319.198370][ T8313] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.468 (8313) [ 319.216624][ T8313] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 319.226812][ T8313] BTRFS info (device loop3): using sha256 checksum algorithm [ 319.497732][ T8313] BTRFS info (device loop3): enabling ssd optimizations [ 319.504891][ T8313] BTRFS info (device loop3): turning on async discard [ 319.511819][ T8313] BTRFS info (device loop3): enabling free space tree [ 320.123530][ T8337] loop5: detected capacity change from 0 to 512 [ 320.144304][ T8337] ext4: Bad value for 'max_dir_size_kb' [ 320.417894][ T8340] loop7: detected capacity change from 0 to 1024 [ 321.166301][ T8340] EXT4-fs: Invalid want_extra_isize 9 [ 321.252814][ T5853] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 324.380955][ T8369] 9p: Bad value for 'rfdno' [ 325.678593][ T5927] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 325.978155][ T5927] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 326.007609][ T5927] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 326.035396][ T5927] usb 6-1: Product: syz [ 326.051960][ T5927] usb 6-1: Manufacturer: syz [ 326.067871][ T5927] usb 6-1: SerialNumber: syz [ 326.114598][ T5927] usb 6-1: config 0 descriptor?? [ 326.133487][ T5927] ch341 6-1:0.0: ch341-uart converter detected [ 326.363428][ T5927] usb 6-1: failed to receive control message: -32 [ 326.411150][ T5927] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 326.847785][ T8386] ADFS-fs (loop6): error: unable to read block 3, try 0 [ 328.320573][ T5927] usb 6-1: USB disconnect, device number 3 [ 328.383373][ T5927] ch341 6-1:0.0: device disconnected [ 329.500205][ T8397] loop5: detected capacity change from 0 to 32768 [ 329.522800][ T8397] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.482 (8397) [ 329.553388][ T8397] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.563579][ T8397] BTRFS info (device loop5): using sha256 checksum algorithm [ 329.939328][ T8420] loop3: detected capacity change from 0 to 1024 [ 329.947053][ T8420] EXT4-fs: Invalid want_extra_isize 9 [ 331.235331][ T8397] BTRFS info (device loop5): enabling ssd optimizations [ 331.242407][ T8397] BTRFS info (device loop5): turning on async discard [ 331.249453][ T8397] BTRFS info (device loop5): enabling free space tree [ 331.707515][ T6470] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 332.886065][ T8445] 9p: Bad value for 'rfdno' [ 334.164635][ T8452] loop2: detected capacity change from 0 to 2048 [ 334.691429][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 335.100517][ T8452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.114299][ T8452] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.974250][ T8460] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 336.470342][ T8466] loop5: detected capacity change from 0 to 1024 [ 336.485235][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.534072][ T8468] loop7: detected capacity change from 0 to 1024 [ 336.584518][ T8468] EXT4-fs: Invalid want_extra_isize 9 [ 336.641010][ T8466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.626206][ T6470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.742730][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 341.078766][ T1622] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 341.258759][ T1622] usb 8-1: Using ep0 maxpacket: 16 [ 341.280690][ T1622] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 341.314600][ T1622] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 341.355410][ T1622] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 341.389932][ T1622] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 341.425686][ T1622] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 341.469185][ T1622] usb 8-1: config 0 has no interface number 0 [ 341.495964][ T1622] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 341.538009][ T1622] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 341.594617][ T1622] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 341.616791][ T1622] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.698474][ T1622] usb 8-1: config 0 interface 125 has no altsetting 0 [ 341.735750][ T1622] usb 8-1: config 0 interface 125 has no altsetting 2 [ 341.845017][ T1622] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 341.866254][ T1622] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.879071][ T1622] usb 8-1: Product: syz [ 341.883304][ T1622] usb 8-1: Manufacturer: syz [ 341.887946][ T1622] usb 8-1: SerialNumber: syz [ 341.933448][ T1622] usb 8-1: config 0 descriptor?? [ 341.991454][ T1622] usb 8-1: selecting invalid altsetting 2 [ 342.031335][ T8497] loop5: detected capacity change from 0 to 1024 [ 342.777738][ T8497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.300217][ T1622] get_1284_register timeout [ 343.315580][ C1] usb 8-1: async_complete: urb error -104 [ 343.321608][ C1] usb 8-1: async_complete: urb error -104 [ 343.330234][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.387620][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.495192][ T9] usb 8-1: USB disconnect, device number 2 [ 344.148602][ T8515] 9p: Bad value for 'rfdno' [ 344.753126][ T8508] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.506: Allocating blocks 497-513 which overlap fs metadata [ 344.868325][ T8520] loop7: detected capacity change from 0 to 1024 [ 344.895592][ T8520] EXT4-fs: Invalid want_extra_isize 9 [ 344.943858][ T8508] EXT4-fs (loop5): pa ffff888035acfcb0: logic 131104, phys. 177, len 21 [ 344.952473][ T8508] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 346.641367][ T8524] loop6: detected capacity change from 0 to 1024 [ 346.694893][ T6470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.713171][ T8524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.911662][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 347.986372][ T8542] bridge0: port 3(vlan2) entered blocking state [ 348.003454][ T8542] bridge0: port 3(vlan2) entered disabled state [ 348.023570][ T8542] vlan2: entered allmulticast mode [ 348.034710][ T8542] geneve0: entered allmulticast mode [ 348.053466][ T8542] vlan2: entered promiscuous mode [ 348.065367][ T8542] geneve0: entered promiscuous mode [ 348.092527][ T24] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 348.120025][ T24] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 348.153155][ T24] usb 6-1: Product: syz [ 348.166600][ T24] usb 6-1: Manufacturer: syz [ 348.177907][ T24] usb 6-1: SerialNumber: syz [ 348.281593][ T24] usb 6-1: config 0 descriptor?? [ 348.307541][ T24] ch341 6-1:0.0: ch341-uart converter detected [ 348.325531][ T8537] tipc: Enabling of bearer rejected, already enabled [ 348.533232][ T8552] fuse: Unknown parameter 'user_i00000000000000000000' [ 348.861376][ T24] usb 6-1: failed to receive control message: -121 [ 348.964742][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 349.384432][ T7116] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.001925][ T8566] loop7: detected capacity change from 0 to 512 [ 350.015728][ T8566] EXT4-fs: Ignoring removed nobh option [ 350.033214][ T8566] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 350.481560][ T8566] EXT4-fs (loop7): 1 truncate cleaned up [ 350.503835][ T8566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.831976][ T7164] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.909713][ T24] usb 6-1: USB disconnect, device number 4 [ 350.938668][ T8573] loop6: detected capacity change from 0 to 1024 [ 350.970155][ T24] ch341 6-1:0.0: device disconnected [ 351.015279][ T8573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.201106][ T8585] input: syz1 as /devices/virtual/input/input6 [ 352.440616][ T8584] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.525: Allocating blocks 497-513 which overlap fs metadata [ 352.853325][ T8597] fuse: Unknown parameter 'user_i00000000000000000000' [ 353.531509][ T8584] EXT4-fs (loop6): pa ffff888035acf910: logic 131104, phys. 177, len 21 [ 353.540506][ T8584] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 353.650282][ T8603] loop5: detected capacity change from 0 to 1024 [ 353.698754][ T8603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.915785][ T7116] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.093193][ T8613] loop3: detected capacity change from 0 to 512 [ 354.119750][ T8613] EXT4-fs: Ignoring removed nobh option [ 354.152218][ T8613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 354.359808][ T8613] EXT4-fs (loop3): 1 truncate cleaned up [ 354.387014][ T8613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.754994][ T8617] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 355.767107][ T8617] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 355.775629][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.5.534 Not tainted syzkaller #0 PREEMPT(full) [ 355.784846][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.794957][ T8617] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 355.800202][ T8617] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 65 95 e5 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 49 95 e5 fe 49 81 3c 24 00 2a 09 8c [ 355.819847][ T8617] RSP: 0018:ffffc90005f97a68 EFLAGS: 00010206 [ 355.826004][ T8617] RAX: 0000000000000009 RBX: ffff88805730e800 RCX: 0000000000080000 [ 355.834002][ T8617] RDX: ffffc9001bdc0000 RSI: 00000000000009bb RDI: 00000000000009bc [ 355.841995][ T8617] RBP: dffffc0000000000 R08: ffffffff824a833a R09: ffffffff8e75d7e0 [ 355.849990][ T8617] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 355.857979][ T8617] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88803704a780 [ 355.865978][ T8617] FS: 00007f38856df6c0(0000) GS:ffff888125549000(0000) knlGS:0000000000000000 [ 355.874940][ T8617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.881544][ T8617] CR2: 0000200000288030 CR3: 0000000026bc0000 CR4: 00000000003526f0 [ 355.889543][ T8617] Call Trace: [ 355.892938][ T8617] [ 355.895889][ T8617] fuse_parse_param+0x69b/0xa80 [ 355.900770][ T8617] ? __pfx_fuse_parse_param+0x10/0x10 [ 355.906226][ T8617] ? static_key_count+0x41/0x70 [ 355.911138][ T8617] vfs_parse_fs_param+0x1a9/0x420 [ 355.916192][ T8617] vfs_parse_monolithic_sep+0x283/0x360 [ 355.921755][ T8617] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 355.927410][ T8617] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 355.933504][ T8617] ? alloc_fs_context+0x9e9/0xd50 [ 355.938554][ T8617] do_new_mount+0x304/0xd30 [ 355.943092][ T8617] ? apparmor_capable+0x126/0x170 [ 355.948252][ T8617] ? security_capable+0x7e/0x2c0 [ 355.953268][ T8617] ? __pfx_do_new_mount+0x10/0x10 [ 355.958315][ T8617] ? ns_capable+0x89/0xe0 [ 355.962718][ T8617] ? path_mount+0x690/0x10e0 [ 355.967333][ T8617] ? user_path_at+0xd4/0x160 [ 355.971959][ T8617] __se_sys_mount+0x31d/0x420 [ 355.976656][ T8617] ? __pfx___se_sys_mount+0x10/0x10 [ 355.981875][ T8617] ? __x64_sys_mount+0xa1/0xc0 [ 355.986665][ T8617] ? __x64_sys_mount+0x20/0xc0 [ 355.991462][ T8617] do_syscall_64+0x14d/0xf80 [ 355.996112][ T8617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.002221][ T8617] ? clear_bhb_loop+0x40/0x90 [ 356.006938][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.012857][ T8617] RIP: 0033:0x7f388479c799 [ 356.017320][ T8617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.036947][ T8617] RSP: 002b:00007f38856df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.045398][ T8617] RAX: ffffffffffffffda RBX: 00007f3884a16270 RCX: 00007f388479c799 [ 356.053399][ T8617] RDX: 0000200000000000 RSI: 0000200000002080 RDI: 0000000000000000 [ 356.061404][ T8617] RBP: 00007f3884832c99 R08: 0000200000000380 R09: 0000000000000000 [ 356.069412][ T8617] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.077400][ T8617] R13: 00007f3884a16308 R14: 00007f3884a16270 R15: 00007fffa62c6738 [ 356.085400][ T8617] [ 356.088439][ T8617] Modules linked in: [ 356.094767][ T8617] ---[ end trace 0000000000000000 ]--- [ 356.100881][ T8617] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 356.106065][ T8617] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 65 95 e5 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 49 95 e5 fe 49 81 3c 24 00 2a 09 8c [ 356.125766][ T8617] RSP: 0018:ffffc90005f97a68 EFLAGS: 00010206 [ 356.131906][ T8617] RAX: 0000000000000009 RBX: ffff88805730e800 RCX: 0000000000080000 [ 356.139955][ T8617] RDX: ffffc9001bdc0000 RSI: 00000000000009bb RDI: 00000000000009bc [ 356.147969][ T8617] RBP: dffffc0000000000 R08: ffffffff824a833a R09: ffffffff8e75d7e0 [ 356.156007][ T8617] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 356.164125][ T8617] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88803704a780 [ 356.172162][ T8617] FS: 00007f38856df6c0(0000) GS:ffff888125549000(0000) knlGS:0000000000000000 [ 356.181346][ T8617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.187983][ T8617] CR2: 0000200000288030 CR3: 0000000026bc0000 CR4: 00000000003526f0 [ 356.196284][ T8617] Kernel panic - not syncing: Fatal exception [ 356.202970][ T8617] Kernel Offset: disabled [ 356.207297][ T8617] Rebooting in 86400 seconds..