last executing test programs: 6m2.710116916s ago: executing program 3 (id=60): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5m59.555604247s ago: executing program 3 (id=67): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB], 0xfd1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_SET(r0, 0x1, 0x0) 5m57.364469665s ago: executing program 3 (id=70): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x4ce}], 0x1, 0x1, 0x0) 5m56.415296504s ago: executing program 3 (id=73): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) 5m54.986113721s ago: executing program 3 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f2380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f00af7fcb5394000000000000000000000000000000b77852afdd71c74bb5b7c5711237cc59195e4aeb5878987cefd666ef6b56a81553b8c7ffdcf6658d8a70ad52a23a68b6d0e5ea"], 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=") bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB], 0xfd1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_SET(r0, 0x1, 0x0) 5m54.292847138s ago: executing program 3 (id=82): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x23080, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) name_to_handle_at(r0, &(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x200) 5m51.609038629s ago: executing program 32 (id=82): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x23080, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) name_to_handle_at(r0, &(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x200) 4m37.828840348s ago: executing program 0 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4m36.697853548s ago: executing program 0 (id=303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m36.055072863s ago: executing program 0 (id=306): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r1, 0x0, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000cc0)={[{@noauto_da_alloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@noquota}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x577, &(0x7f0000000740)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 4m34.256678483s ago: executing program 0 (id=312): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) truncate(0x0, 0x42dc) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0x401, 0x40, 0x9, 0x9}, 0x33, [0xf, 0x5, 0x8, 0x3, 0x9, 0x7, 0x1, 0x5, 0x1000, 0x3, 0xd72, 0x6, 0x702, 0xfcb1, 0x9, 0xa0be, 0x0, 0x3, 0x22b, 0x0, 0x6ff, 0xffff, 0x2a270340, 0xfffffff5, 0x2, 0x6e98, 0x7fffffff, 0x401, 0x2, 0x9, 0x1000, 0x80, 0x0, 0x7, 0x5, 0x80, 0x4, 0x8, 0x5, 0x4, 0x1, 0x0, 0x9, 0x400, 0x6, 0xf, 0x7, 0x8, 0x3, 0x6, 0x3, 0xff, 0x1, 0x200, 0x10000, 0x1, 0x3, 0x7fffffff, 0xe899, 0x1, 0x5, 0x6, 0xfffffff0, 0x1], [0xffffffff, 0xffffff61, 0xffffffff, 0xfa, 0x4, 0x3, 0x81, 0x1, 0x3a0, 0x6, 0x0, 0x6, 0xc2, 0x5, 0x8, 0xfc000000, 0x6, 0x8, 0x80000001, 0x3ff, 0x4, 0x2, 0x1ff, 0x5ff65f7f, 0x7, 0x8000, 0x7, 0x7f, 0x41b, 0x3, 0x4, 0x1, 0x6, 0xe1bd, 0x3ba5, 0x1, 0x3, 0x3, 0x407, 0x7, 0x65c, 0x7ff, 0x101, 0x8000, 0x1, 0x45, 0x6, 0x26, 0xffffffff, 0x81, 0x7, 0x5, 0x4, 0x7, 0x40, 0x7fffffff, 0x5, 0x3, 0x8, 0xf910, 0x6, 0xf040, 0x8, 0x8], [0x7f, 0x8, 0x6, 0x9, 0xffffffc0, 0x8bd, 0x8001, 0x0, 0x7ff, 0x2, 0x6, 0x7, 0x5, 0x1, 0x7, 0x3, 0x7, 0x401, 0x1, 0x36, 0xd7f1, 0xc3a, 0x49004516, 0x6, 0x0, 0xbb83, 0x2, 0x6, 0x80000000, 0xd43, 0x3, 0xf, 0x9, 0x100, 0x4, 0x401, 0x5, 0x6a8f, 0x1, 0x9, 0x80000000, 0x1, 0x91, 0xfffffffa, 0x1, 0x4000, 0x9, 0x0, 0x423b, 0xbf, 0x7fff, 0xffff0001, 0x4, 0x5, 0xee, 0x1, 0x5, 0x7, 0x2, 0x8, 0x5, 0x7, 0x5e, 0xed4d], [0x81, 0xd3d6, 0x6, 0x1ff, 0x1, 0x9, 0xc21, 0x2, 0x7, 0x1, 0x8, 0x1, 0x7, 0x7, 0x1000, 0x1, 0x2, 0x4, 0x8, 0x800e, 0x0, 0x6, 0x8000, 0x0, 0xda1, 0xffffffff, 0x200, 0x8, 0x9, 0x3d, 0x7, 0x0, 0x8000, 0x80, 0x200, 0xfffffffa, 0x1, 0x10000, 0xff, 0x100, 0x140, 0x1, 0x4, 0x401, 0x5, 0xfffffc00, 0x0, 0xffffff00, 0x2, 0x4, 0x6, 0x5, 0x401, 0xb, 0x8, 0x2, 0x5, 0x6a, 0xffff, 0xfffffffa, 0x3, 0x6, 0x9, 0x7]}, 0x45c) 4m32.694734396s ago: executing program 0 (id=319): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) sched_rr_get_interval(0x0, &(0x7f0000000040)) 4m30.937926173s ago: executing program 0 (id=322): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4000000) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) inotify_init1(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 4m15.559559421s ago: executing program 33 (id=322): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4000000) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) inotify_init1(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1m52.838939159s ago: executing program 2 (id=785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0xfe, 0x0, 0x1b, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) 1m52.040563502s ago: executing program 2 (id=789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0x7, 0x0, &(0x7f0000000100)="61df712bc884fe", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m51.506219607s ago: executing program 2 (id=792): socket$kcm(0x29, 0x5, 0x0) truncate(0x0, 0x3000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x11}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m50.78932262s ago: executing program 2 (id=797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000b0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m50.310681485s ago: executing program 2 (id=798): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r0]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000340)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @dev}, {}]}) 1m48.940477396s ago: executing program 2 (id=801): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) 1m48.259099649s ago: executing program 5 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b150000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x2400c080) 1m47.522779756s ago: executing program 5 (id=806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x6c7, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x440f}}) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m46.154137375s ago: executing program 5 (id=811): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x1) openat(0xffffffffffffff9c, 0x0, 0x181642, 0x148) 1m44.699195837s ago: executing program 5 (id=814): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) 1m42.904869429s ago: executing program 5 (id=820): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f00000001c0)) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x108383) 1m42.327950319s ago: executing program 5 (id=822): r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="a2b2536b0513", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m39.624065117s ago: executing program 34 (id=822): r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="a2b2536b0513", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m39.568184276s ago: executing program 1 (id=825): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x2}, &(0x7f0000000100)=0x8) 1m38.921829968s ago: executing program 1 (id=827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xb, 0x0, &(0x7f0000000100)="61df712bc884fed5722780", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m37.592525038s ago: executing program 1 (id=829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r1, 0x0, 0x3) 1m36.787008913s ago: executing program 1 (id=830): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) 1m34.66020136s ago: executing program 1 (id=834): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1m33.666210425s ago: executing program 35 (id=801): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) 1m33.58326894s ago: executing program 1 (id=838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xb, 0x0, &(0x7f0000000100)="61df712bc884fed5722780", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m31.267695152s ago: executing program 36 (id=838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xb, 0x0, &(0x7f0000000100)="61df712bc884fed5722780", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 27.152003674s ago: executing program 8 (id=966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x38, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 26.176340425s ago: executing program 8 (id=968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 25.597117409s ago: executing program 8 (id=969): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.899802162s ago: executing program 8 (id=971): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[], 0x8, 0xab, &(0x7f0000000440)="$eJzs0s1JxUAUBeAzIcafRRpwYQepQWtJCVkpgVRkK5aQDly4dTMiSjQrQXiP9+D7YIY7MAfO4r68P9/e90ldklpr7ZLuOl/z9PiUnYttutwuzlrzfa6S3PVJc5O8PiTpfv6sb/O4ls+tmMd9emqPXhgAAPi3JkP5/S4Zhj9DS1vLIUsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnJCPAAAA//9RJBZZ") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000840)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 23.822285564s ago: executing program 8 (id=973): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4cdc1, 0x104) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregset(0x4205, r0, 0x403, &(0x7f0000000000)={0x0}) 22.748042097s ago: executing program 8 (id=975): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) personality(0x5d28870e52b2f29b) uname(&(0x7f0000000640)=""/4096) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, 0x0, 0x0) 7.418042495s ago: executing program 37 (id=975): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) personality(0x5d28870e52b2f29b) uname(&(0x7f0000000640)=""/4096) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, 0x0, 0x0) 7.200468589s ago: executing program 7 (id=1014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x38, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6.754809706s ago: executing program 4 (id=1015): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0x1, "135825f1a6c51de48aaf7b2ce6252f0b5add77"}) write(r0, &(0x7f0000000100)="86", 0x1) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 6.527151806s ago: executing program 9 (id=1016): openat$kvm(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec2000/0x3000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 6.232310165s ago: executing program 6 (id=1017): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x6c7, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x440f}}) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.796675247s ago: executing program 7 (id=1018): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xffffffff, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="ed"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 5.721062431s ago: executing program 9 (id=1019): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000}) 5.348841354s ago: executing program 6 (id=1020): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x401, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x30}}], 0x1, 0x4009400) 5.34487318s ago: executing program 4 (id=1021): symlinkat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.630790785s ago: executing program 9 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x7c, r1, 0x5, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0xc, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x9, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0) 4.578278465s ago: executing program 4 (id=1023): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="af4fcbc69fc8236193a5db71d82ff30ad092e969dff4bc0b0fa752cf3ed6e756c7f331f97aed1b89911d0cec7550f213e6a9196fcdcefd4c562141ef3cefe4b0f75f8586d98f8edc0113a54b4d2983bd7ef97f6478d2dd4921d5438d9517c2452ae54dc4d3e07310769420b1565fab3f29d44d7a667689cbbd2a119dba5b9ea31708fbaf5bb1c7d35ebf2c32f2cef0d0d63b45b8441da5d3754ceae1c80779ffae1f6085bdcd9f2554a00a86cd2d03ffba1fbdacd09527f06ab8fac7145c0f6d9cdf7a736ffd50f0a86cfdc1602a5cfdafd18dc54380539784745369c5e0c80047bd4ebe944bf2cdb103866ec73a264c", 0xf0}, {&(0x7f0000000540)="ba1519b7ae0145070a9522721a395841720fd5481bc2cbd8f13aaa9066a24214af82ba1466de0a1b52bceecaaa882b66f916a85af471ca422935c42f77b319e7d595558b74e1b014", 0x48}, {&(0x7f0000000700)="1e9bdb919930b63490b5092febd4ff5a7fdfebce145cf8edd142d88e92908746fe920060d936ca0b89f1a56fa4b26d0657c57a665369d2ce8909af5d00d8d7eb6407c762ebac337367d400cc47fd1d9a15533e4958ec0d45bd6ce376ace04c0b5cb07312b1cae72e32fdcaf7e6aa26737e748d2a83009703ef0a756140a832d841fdec50624cddcbe8a4a7baaf2a2b5a5831156a1ab7b6dfe6ef3c81fd2975cabfd8923d3156e4a3a6c3de6e", 0xac}], 0x3}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000a00)="327c9c22be8088c1fa09d0c9daa9f276299cc47854d20d847cc1e9b8a85adbef57e00b13659f96129608de176bd23acac8c26797a5ceb8576985c9fe6f39111975687eb244af68b4f0f8669b9514d8f575738a761b10c84f533b89156601a692f386f42b2b7976d53365cfa0d5e6e6d680362d7f6b2456ff14d80ff2e859964fbeaa5891e41d241cf6ec13391ea73c56644c82d82729600e1857f923aa9bbe0623cdd37b87c8d18dd3c8f5765c33fb008e51e2f36605f59b04a82d955ecd79465a779ec869843f01ecf2faaeed7243", 0xcf}, {&(0x7f0000000900)="3a822d6f0306bc598a25d9f98ce3df61857b8863db2274a7b8cc10389f81f423e16239cb3b05bb224865dadc4b1088ed0ce5c9ede116bbde6ce136dbc720c81f4ddefa4d131949410763c93a8329413526b61ec377c0f28319ae320ead44c2256a14c3c29f6fea826ce6dfcdbde7", 0x6e}, {&(0x7f0000000980)="3c977216b675039a1d3cb992fe27ba25eb95bb5c4801fb54160ea8c5a2dda4a5874012f67276c6bafea3", 0x2a}, {&(0x7f0000000b00)="29f675ffa18cba1f080ba7cd8d254832b44b1ed22625d4802a6f30400852734d069e9048ce651a4d92c0abebcc5bd8923b07f246b696b4951f2e0fdb69b6d1785b29a4ace7d72f095974e3bc9f86e39b061d514f4f9e05729a89f4a7b13b1c254ffbb24eefc41900b92861d05c7e930f965711ef90d2c27936dfbc689520880ec48d3849c6a86e69f19ef7af7f56b1d7ad3a87a250c939c1bf3647bd9daf27ed663594c44cda9f", 0xa7}, {&(0x7f0000000bc0)="299b", 0x2}, {&(0x7f0000000c00)="7b46e46eb2c6ae4d7dd8c492d688b3033c53c84cbe501602594847e03766de6e7b9bb07e843b7f0c1598b481b797bf9f77622efce832da2d9aa2774ea7d10089c47ac3dce46c1e7d5652d1c42ebf011fee3fa11cfa5a4e977234607e62597e80db88350adb9e389f5127e723129fc7f0", 0x70}, {&(0x7f00000010c0)="e3c4a0df7c3e06f46da0791a6be8b68550d4f836190a46f85c40ff", 0x1b}, {&(0x7f0000001100)="06c57e0e567fe507d1a94376dc1049c4ff5055d0265ead626f2915b8a3855c64d1339dbc73a59d1a4ba97cdc00478adbcfa78d976c13e10feccd62807799d4f75b19303818f0e1dad130036704", 0x4d}, {&(0x7f0000001180)="dc9808c01298354232e71553e37a574029902deda746653d69eccca68b16f5826405fdfd488bdc8c1b7bb0160e545586e980669b21cab409d763e96bd01597e39ed844d5222c3877010014f16f065f639e7d12b7507784c737e01a5b93e3d027646e14c6d513f1e8790f598482982051e3c7a2d7317f37c6975a358d68432a602465583abed10e89f54d0eb17106c34201f24acd9e3ea789d394ce02df5daeed4d20587b36b795f242a012aa", 0xac}, {&(0x7f0000001540)="699048e3aae3d092567fc0dc050daad1eccac8ce6c08b387d00ea6a70db8bf26bc4cee0165873c40a8c550ee2ffc32a59e", 0x31}], 0xa}}], 0x3, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 4.410451966s ago: executing program 6 (id=1024): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@fat=@dos1xfloppy}, {@shortname_win95}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81) 4.043136752s ago: executing program 7 (id=1025): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x88e7}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x68, 0x0, 0xd, 0x29, 0x0, @loopback, @loopback}}}}}}, 0x26) 3.79091231s ago: executing program 9 (id=1026): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003ec0), 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.610344813s ago: executing program 4 (id=1027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x38, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3.165313529s ago: executing program 6 (id=1028): openat$kvm(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec2000/0x3000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 2.601636728s ago: executing program 9 (id=1029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x6c7, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x440f}}) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.276361591s ago: executing program 7 (id=1030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0) 2.113392722s ago: executing program 6 (id=1031): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x81, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x0) 1.769187183s ago: executing program 4 (id=1032): symlinkat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.481172296s ago: executing program 9 (id=1033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303"], 0x2720}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) dup2(0xffffffffffffffff, r4) 1.087242075s ago: executing program 6 (id=1034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xffffffff, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="ed"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 928.115376ms ago: executing program 4 (id=1035): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010094, &(0x7f0000000140)=ANY=[], 0x2, 0x709, &(0x7f0000000e00)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 700.460841ms ago: executing program 7 (id=1036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) 0s ago: executing program 7 (id=1037): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@fat=@dos1xfloppy}, {@shortname_win95}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81) kernel console output (not intermixed with test programs): initialize $Extend. [ 300.101597][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.131673][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.288817][ T7048] binder: 7047:7048 ioctl 5000943a 0 returned -22 [ 300.364362][ T7038] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 300.938466][ T7054] loop0: detected capacity change from 0 to 4096 [ 301.052413][ T7054] NILFS (loop0): invalid segment: Checksum error in segment payload [ 301.061565][ T7054] NILFS (loop0): trying rollback from an earlier position [ 301.155275][ T7054] NILFS (loop0): recovery complete [ 301.207108][ T7061] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.737721][ T5849] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 301.950160][ T37] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 301.982313][ T5849] usb 2-1: Using ep0 maxpacket: 32 [ 302.021473][ T5849] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 302.030032][ T5849] usb 2-1: config 0 has no interface number 0 [ 302.036285][ T5849] usb 2-1: config 0 interface 125 has no altsetting 0 [ 302.134178][ T5849] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 302.144340][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.154155][ T5849] usb 2-1: Product: syz [ 302.158484][ T5849] usb 2-1: Manufacturer: syz [ 302.163781][ T5849] usb 2-1: SerialNumber: syz [ 302.230696][ T37] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.268452][ T37] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 302.278161][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.286602][ T37] usb 5-1: Product: syz [ 302.291360][ T37] usb 5-1: Manufacturer: syz [ 302.296128][ T37] usb 5-1: SerialNumber: syz [ 302.306305][ T5849] usb 2-1: config 0 descriptor?? [ 302.342629][ T37] usb 5-1: config 0 descriptor?? [ 302.606329][ T5849] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 302.653403][ T7071] loop2: detected capacity change from 0 to 128 [ 303.665748][ T5495] IPVS: starting estimator thread 0... [ 303.720026][ T5849] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 303.769846][ T7083] IPVS: using max 240 ests per chain, 12000 per kthread [ 303.883640][ T7082] loop5: detected capacity change from 0 to 2048 [ 304.063026][ T7082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.082840][ T7082] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.416146][ T5849] ueagle-atm 2-1:0.125: usbatm_usb_probe: bind failed: -19! [ 304.485859][ T5849] usb 2-1: USB disconnect, device number 8 [ 304.697876][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.849609][ T5495] usb 5-1: USB disconnect, device number 7 [ 305.313483][ T7092] binder: 7090:7092 ioctl 5000943a 0 returned -22 [ 305.722174][ T7091] loop4: detected capacity change from 0 to 4096 [ 306.069679][ T7091] ntfs3(loop4): ino=b, mi_enum_attr [ 306.075215][ T7091] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 306.091563][ T7091] ntfs3(loop4): Failed to load $Extend (-22). [ 306.098284][ T7091] ntfs3(loop4): Failed to initialize $Extend. [ 306.195099][ T7089] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 307.050915][ T7101] loop5: detected capacity change from 0 to 4096 [ 307.247742][ T7101] NILFS (loop5): invalid segment: Checksum error in segment payload [ 307.256157][ T7101] NILFS (loop5): trying rollback from an earlier position [ 307.400878][ T7101] NILFS (loop5): recovery complete [ 307.477593][ T7107] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.112352][ T7118] binder: 7117:7118 ioctl 5000943a 0 returned -22 [ 309.628264][ T7124] Zero length message leads to an empty skb [ 309.740653][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 309.976782][ T11] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 309.986855][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.995512][ T11] usb 2-1: Product: syz [ 309.999838][ T11] usb 2-1: Manufacturer: syz [ 310.004528][ T11] usb 2-1: SerialNumber: syz [ 310.052137][ T11] usb 2-1: config 0 descriptor?? [ 310.079912][ T11] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 310.090562][ T11] usb 2-1: Detected FT4232HP [ 310.242867][ T7126] loop4: detected capacity change from 0 to 4096 [ 310.284540][ T11] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 310.370169][ T11] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 310.394325][ T11] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 310.436744][ T7128] loop5: detected capacity change from 0 to 128 [ 310.475960][ T11] usb 2-1: USB disconnect, device number 9 [ 310.528865][ T11] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 310.540668][ T11] ftdi_sio 2-1:0.0: device disconnected [ 310.656142][ T7126] ntfs3(loop4): ino=b, mi_enum_attr [ 310.661822][ T7126] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 310.698001][ T7126] ntfs3(loop4): Failed to load $Extend (-22). [ 310.706745][ T7126] ntfs3(loop4): Failed to initialize $Extend. [ 310.900093][ T7125] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 312.107003][ T7133] loop1: detected capacity change from 0 to 4096 [ 312.210479][ T7133] NILFS (loop1): invalid segment: Checksum error in segment payload [ 312.218692][ T7133] NILFS (loop1): trying rollback from an earlier position [ 312.324921][ T7133] NILFS (loop1): recovery complete [ 312.380551][ T7136] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.845778][ T7131] loop5: detected capacity change from 0 to 4096 [ 312.969113][ T7131] ntfs3(loop5): ino=3, Correct links count -> 2. [ 314.006274][ T7149] binder: 7146:7149 ioctl 5000943a 0 returned -22 [ 315.140178][ T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 315.252477][ T7165] loop2: detected capacity change from 0 to 128 [ 315.368349][ T11] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 315.377760][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.386208][ T11] usb 6-1: Product: syz [ 315.390612][ T11] usb 6-1: Manufacturer: syz [ 315.395288][ T11] usb 6-1: SerialNumber: syz [ 315.488326][ T7162] loop1: detected capacity change from 0 to 4096 [ 315.507400][ T11] usb 6-1: config 0 descriptor?? [ 315.525404][ T11] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 315.534921][ T11] usb 6-1: Detected FT4232HP [ 315.757411][ T11] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 315.810313][ T11] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 315.851509][ T11] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 315.925324][ T11] usb 6-1: USB disconnect, device number 4 [ 315.982108][ T11] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 315.994291][ T11] ftdi_sio 6-1:0.0: device disconnected [ 316.012734][ T7162] ntfs3(loop1): ino=b, mi_enum_attr [ 316.018154][ T7162] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 316.100205][ T7162] ntfs3(loop1): Failed to load $Extend (-22). [ 316.106484][ T7162] ntfs3(loop1): Failed to initialize $Extend. [ 316.485770][ T7157] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 316.575449][ T7169] loop4: detected capacity change from 0 to 4096 [ 316.873860][ T7169] NILFS (loop4): invalid segment: Checksum error in segment payload [ 316.882425][ T7169] NILFS (loop4): trying rollback from an earlier position [ 316.991069][ T7169] NILFS (loop4): recovery complete [ 317.030988][ T7176] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.246232][ T7180] loop4: detected capacity change from 0 to 4096 [ 318.334916][ T7180] ntfs3(loop4): ino=3, Correct links count -> 2. [ 319.872645][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.897121][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.910684][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.978587][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.990338][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.039260][ T7200] binder: 7194:7200 ioctl 5000943a 0 returned -22 [ 321.297884][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 322.059796][ T5495] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 322.078281][ T51] Bluetooth: hci5: command tx timeout [ 322.283959][ T5495] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 322.296482][ T5495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.308103][ T5495] usb 6-1: Product: syz [ 322.313550][ T5495] usb 6-1: Manufacturer: syz [ 322.318227][ T5495] usb 6-1: SerialNumber: syz [ 322.380178][ T5495] usb 6-1: config 0 descriptor?? [ 322.433226][ T5495] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 322.444010][ T5495] usb 6-1: Detected FT4232HP [ 322.608800][ T7212] loop4: detected capacity change from 0 to 4096 [ 322.635102][ T5495] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 322.686333][ T5495] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 322.749032][ T5495] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 322.861408][ T5495] usb 6-1: USB disconnect, device number 5 [ 322.915800][ T5495] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 322.926912][ T5495] ftdi_sio 6-1:0.0: device disconnected [ 323.256758][ T7212] ntfs3(loop4): ino=b, mi_enum_attr [ 323.262523][ T7212] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 323.297940][ T7212] ntfs3(loop4): Failed to load $Extend (-22). [ 323.304676][ T7212] ntfs3(loop4): Failed to initialize $Extend. [ 324.149883][ T51] Bluetooth: hci5: command tx timeout [ 324.568651][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.576959][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.584824][ T7197] bridge_slave_0: entered allmulticast mode [ 324.594472][ T7197] bridge_slave_0: entered promiscuous mode [ 324.933318][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.941022][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.948769][ T7197] bridge_slave_1: entered allmulticast mode [ 324.964244][ T7197] bridge_slave_1: entered promiscuous mode [ 325.034345][ T7227] loop4: detected capacity change from 0 to 4096 [ 325.101971][ T7227] ntfs3(loop4): ino=3, Correct links count -> 2. [ 326.239992][ T51] Bluetooth: hci5: command tx timeout [ 326.294606][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.326374][ T7236] binder: 7232:7236 ioctl 5000943a 0 returned -22 [ 326.427575][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.814527][ T7197] team0: Port device team_slave_0 added [ 326.932699][ T7197] team0: Port device team_slave_1 added [ 327.225160][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.233912][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.262496][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.422606][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.429882][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.456151][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.953156][ T7197] hsr_slave_0: entered promiscuous mode [ 327.961921][ T7197] hsr_slave_1: entered promiscuous mode [ 327.969328][ T7197] debugfs: 'hsr0' already exists in 'hsr' [ 327.975214][ T7197] Cannot create hsr debugfs directory [ 328.310426][ T51] Bluetooth: hci5: command tx timeout [ 328.350256][ T37] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 329.059815][ T37] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 329.069243][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.077677][ T37] usb 3-1: Product: syz [ 329.082809][ T37] usb 3-1: Manufacturer: syz [ 329.087568][ T37] usb 3-1: SerialNumber: syz [ 329.134242][ T37] usb 3-1: config 0 descriptor?? [ 329.162918][ T37] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 329.174076][ T37] usb 3-1: Detected FT4232HP [ 329.515159][ T37] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 329.531533][ T7244] loop4: detected capacity change from 0 to 4096 [ 329.626877][ T37] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 329.652979][ T37] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 329.845145][ T7258] loop5: detected capacity change from 0 to 128 [ 329.860358][ T37] usb 3-1: USB disconnect, device number 6 [ 329.898646][ T37] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 329.912997][ T37] ftdi_sio 3-1:0.0: device disconnected [ 330.185861][ T7244] ntfs3(loop4): ino=b, mi_enum_attr [ 330.191527][ T7244] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 330.335267][ T7244] ntfs3(loop4): Failed to load $Extend (-22). [ 330.342068][ T7244] ntfs3(loop4): Failed to initialize $Extend. [ 330.996217][ T7197] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.292530][ T7197] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.559802][ T7197] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.644007][ T7197] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.915244][ T7265] loop4: detected capacity change from 0 to 4096 [ 332.004169][ T7265] ntfs3(loop4): ino=3, Correct links count -> 2. [ 332.616308][ T7272] binder: 7269:7272 ioctl 5000943a 0 returned -22 [ 332.659261][ T7272] binder_alloc: 7269: binder_alloc_buf, no vma [ 333.191994][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.337579][ T30] audit: type=1800 audit(1766634568.977:18): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.388" name="file1" dev="loop4" ino=34 res=0 errno=0 [ 333.454774][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.569136][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.576525][ T4972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.894053][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.901609][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.705516][ T7287] loop2: detected capacity change from 0 to 256 [ 336.087082][ T37] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 336.542116][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.613180][ T37] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 336.622696][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.633442][ T37] usb 5-1: Product: syz [ 336.637785][ T37] usb 5-1: Manufacturer: syz [ 336.643519][ T37] usb 5-1: SerialNumber: syz [ 336.868096][ T7305] netlink: 'syz.2.399': attribute type 3 has an invalid length. [ 336.924224][ T37] usb 5-1: config 0 descriptor?? [ 337.055990][ T37] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 337.066438][ T37] usb 5-1: Detected FT4232HP [ 337.453247][ T37] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 337.537911][ T37] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 337.584003][ T37] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 337.749952][ T37] usb 5-1: USB disconnect, device number 8 [ 337.882155][ T37] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 337.894031][ T37] ftdi_sio 5-1:0.0: device disconnected [ 338.439745][ T7317] binder: 7312:7317 ioctl 5000943a 0 returned -22 [ 338.465953][ T7317] binder_alloc: 7312: binder_alloc_buf, no vma [ 339.867146][ T7323] loop1: detected capacity change from 0 to 4096 [ 339.892562][ T7197] veth0_vlan: entered promiscuous mode [ 339.993235][ T7323] ntfs3(loop1): ino=3, Correct links count -> 2. [ 339.998131][ T7197] veth1_vlan: entered promiscuous mode [ 340.365239][ T7197] veth0_macvtap: entered promiscuous mode [ 340.444376][ T7197] veth1_macvtap: entered promiscuous mode [ 340.612849][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.741392][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.816826][ T134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.890289][ T4779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.983497][ T4190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.222509][ T4779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.908486][ T30] audit: type=1800 audit(1766634577.557:19): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.405" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 344.591843][ T5495] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 344.873106][ T5495] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 344.882711][ T5495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.891000][ T5495] usb 3-1: Product: syz [ 344.895286][ T5495] usb 3-1: Manufacturer: syz [ 344.900081][ T5495] usb 3-1: SerialNumber: syz [ 345.012802][ T5495] usb 3-1: config 0 descriptor?? [ 345.074395][ T5495] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 345.083980][ T5495] usb 3-1: Detected FT4232HP [ 345.341259][ T5495] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 345.375329][ T5495] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 345.410769][ T5495] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 345.493465][ T5495] usb 3-1: USB disconnect, device number 7 [ 345.573807][ T5495] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 345.584929][ T5495] ftdi_sio 3-1:0.0: device disconnected [ 346.672973][ T7370] binder: 7362:7370 ioctl 5000943a 0 returned -22 [ 346.714682][ T7370] binder_alloc: 7362: binder_alloc_buf, no vma [ 347.375240][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.388666][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.445086][ T7376] loop2: detected capacity change from 0 to 128 [ 347.579302][ T7378] loop4: detected capacity change from 0 to 256 [ 347.722765][ T7380] netlink: 68 bytes leftover after parsing attributes in process `syz.5.421'. [ 347.924351][ T7378] FAT-fs (loop4): Directory bread(block 64) failed [ 347.931269][ T7378] FAT-fs (loop4): Directory bread(block 65) failed [ 347.937973][ T7378] FAT-fs (loop4): Directory bread(block 66) failed [ 347.944788][ T7378] FAT-fs (loop4): Directory bread(block 67) failed [ 347.951571][ T7378] FAT-fs (loop4): Directory bread(block 68) failed [ 347.958266][ T7378] FAT-fs (loop4): Directory bread(block 69) failed [ 347.965104][ T7378] FAT-fs (loop4): Directory bread(block 70) failed [ 347.971784][ T7378] FAT-fs (loop4): Directory bread(block 71) failed [ 347.978464][ T7378] FAT-fs (loop4): Directory bread(block 72) failed [ 347.985411][ T7378] FAT-fs (loop4): Directory bread(block 73) failed [ 348.021072][ T7372] loop1: detected capacity change from 0 to 4096 [ 348.072715][ T7372] ntfs3(loop1): ino=3, Correct links count -> 2. [ 348.742250][ T30] audit: type=1800 audit(1766634584.357:20): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.419" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 349.443698][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 349.974289][ T7397] Invalid ELF header magic: != ELF [ 350.437405][ T5495] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 350.636160][ T5495] usb 5-1: Using ep0 maxpacket: 8 [ 350.671407][ T11] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 350.684924][ T5495] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 350.693604][ T5495] usb 5-1: config 179 has no interface number 0 [ 350.700278][ T5495] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 350.712556][ T5495] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 350.724333][ T5495] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 350.735770][ T5495] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 350.747817][ T5495] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 350.765166][ T5495] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 350.775538][ T5495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.953987][ T7400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 351.008902][ T11] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 351.018505][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.026835][ T11] usb 6-1: Product: syz [ 351.032218][ T11] usb 6-1: Manufacturer: syz [ 351.036889][ T11] usb 6-1: SerialNumber: syz [ 351.137392][ T11] usb 6-1: config 0 descriptor?? [ 351.309816][ T5495] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 351.439364][ T11] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 351.453305][ T11] usb 6-1: Detected FT4232HP [ 351.730149][ T37] usb 5-1: USB disconnect, device number 9 [ 351.730296][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 351.745083][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 351.894303][ T11] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 352.105598][ T11] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 352.158121][ T11] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 352.251600][ T11] usb 6-1: USB disconnect, device number 6 [ 352.314582][ T11] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 352.325836][ T11] ftdi_sio 6-1:0.0: device disconnected [ 353.020124][ T7407] Invalid ELF header magic: != ELF [ 353.482486][ T7415] loop1: detected capacity change from 0 to 1024 [ 353.752254][ T7415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.373595][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.441910][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.452424][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.484969][ T7426] loop2: detected capacity change from 0 to 256 [ 354.825000][ T7426] FAT-fs (loop2): Directory bread(block 64) failed [ 354.832005][ T7426] FAT-fs (loop2): Directory bread(block 65) failed [ 354.838853][ T7426] FAT-fs (loop2): Directory bread(block 66) failed [ 354.848555][ T7426] FAT-fs (loop2): Directory bread(block 67) failed [ 354.855776][ T7426] FAT-fs (loop2): Directory bread(block 68) failed [ 354.866578][ T7426] FAT-fs (loop2): Directory bread(block 69) failed [ 354.875777][ T7426] FAT-fs (loop2): Directory bread(block 70) failed [ 354.882779][ T7426] FAT-fs (loop2): Directory bread(block 71) failed [ 354.889599][ T7426] FAT-fs (loop2): Directory bread(block 72) failed [ 354.896184][ T7426] FAT-fs (loop2): Directory bread(block 73) failed [ 355.110255][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.118245][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.608924][ T7429] loop1: detected capacity change from 0 to 4096 [ 355.728849][ T7429] ntfs3(loop1): ino=3, Correct links count -> 2. [ 356.671129][ T30] audit: type=1800 audit(1766634592.317:21): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.433" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 356.697045][ T7434] loop6: detected capacity change from 0 to 4096 [ 356.868654][ T7434] NILFS (loop6): invalid segment: Checksum error in segment payload [ 356.877198][ T7434] NILFS (loop6): trying rollback from an earlier position [ 357.055168][ T7434] NILFS (loop6): recovery complete [ 357.131132][ T7446] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.556039][ T7456] syz_tun: entered allmulticast mode [ 358.808357][ T7455] syz_tun: left allmulticast mode [ 358.932371][ T11] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 358.984917][ T7463] Invalid ELF header magic: != ELF [ 359.170263][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.181300][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.202196][ T7463] loop6: detected capacity change from 0 to 1024 [ 359.281000][ T11] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.290485][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.298646][ T11] usb 3-1: SerialNumber: syz [ 359.412352][ T7463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.709586][ T11] usb 3-1: 0:2 : does not exist [ 359.872738][ T7472] loop1: detected capacity change from 0 to 256 [ 359.957318][ T7197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.990224][ T11] usb 3-1: USB disconnect, device number 8 [ 360.173571][ T6269] udevd[6269]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.381572][ T7472] FAT-fs (loop1): Directory bread(block 64) failed [ 360.393098][ T7472] FAT-fs (loop1): Directory bread(block 65) failed [ 360.404434][ T7472] FAT-fs (loop1): Directory bread(block 66) failed [ 360.412615][ T7472] FAT-fs (loop1): Directory bread(block 67) failed [ 360.419922][ T7472] FAT-fs (loop1): Directory bread(block 68) failed [ 360.426621][ T7472] FAT-fs (loop1): Directory bread(block 69) failed [ 360.433680][ T7472] FAT-fs (loop1): Directory bread(block 70) failed [ 360.441240][ T7472] FAT-fs (loop1): Directory bread(block 71) failed [ 360.448095][ T7472] FAT-fs (loop1): Directory bread(block 72) failed [ 360.454896][ T7472] FAT-fs (loop1): Directory bread(block 73) failed [ 360.860443][ T3477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.119913][ T3477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.428292][ T3477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.746178][ T3477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.156613][ T7488] loop2: detected capacity change from 0 to 4096 [ 362.213308][ T7488] ntfs3(loop2): ino=3, Correct links count -> 2. [ 362.270425][ T3477] bridge_slave_1: left allmulticast mode [ 362.276379][ T3477] bridge_slave_1: left promiscuous mode [ 362.283255][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.369101][ T3477] bridge_slave_0: left allmulticast mode [ 362.375108][ T3477] bridge_slave_0: left promiscuous mode [ 362.381784][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.768793][ T7500] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 363.032557][ T30] audit: type=1800 audit(1766634598.647:22): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.450" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 363.911176][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.947747][ T7506] Invalid ELF header magic: != ELF [ 363.990903][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.049808][ T3477] bond0 (unregistering): Released all slaves [ 364.148964][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 364.239191][ T7508] loop5: detected capacity change from 0 to 2048 [ 364.268087][ T7506] loop6: detected capacity change from 0 to 1024 [ 364.596300][ T7508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.609751][ T7508] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.647691][ T7506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.116496][ T7197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.147345][ T3477] hsr_slave_0: left promiscuous mode [ 365.166992][ T51] Bluetooth: hci4: hcon ffff8881180c0000 sent 1 < count 32765 [ 365.190015][ T3477] hsr_slave_1: left promiscuous mode [ 365.197747][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.206119][ T51] Bluetooth: hci4: hcon ffff8881180c0000 sent 0 < count 14 [ 365.218233][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.321998][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.452195][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.460363][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.615756][ T3477] veth1_macvtap: left promiscuous mode [ 365.621743][ T3477] veth0_macvtap: left promiscuous mode [ 365.627573][ T3477] veth1_vlan: left promiscuous mode [ 365.633247][ T3477] veth0_vlan: left promiscuous mode [ 365.768141][ T7524] loop2: detected capacity change from 0 to 16 [ 365.827645][ T7524] erofs (device loop2): mounted with root inode @ nid 36. [ 365.980179][ T30] audit: type=1800 audit(1766634601.607:23): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.465" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 367.446756][ T7548] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 367.481247][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 367.551800][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 368.528308][ T7559] loop1: detected capacity change from 0 to 128 [ 368.561666][ T3477] IPVS: stop unused estimator thread 0... [ 368.835585][ T7553] loop2: detected capacity change from 0 to 4096 [ 368.912259][ T7553] ntfs3(loop2): ino=3, Correct links count -> 2. [ 369.135004][ T7564] Invalid ELF header magic: != ELF [ 369.349083][ T7562] loop5: detected capacity change from 0 to 2048 [ 369.476145][ T30] audit: type=1800 audit(1766634605.107:24): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.470" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 369.631251][ T7562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.643948][ T7562] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.775158][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.018494][ T7582] loop2: detected capacity change from 0 to 1024 [ 371.261584][ T7582] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 371.268308][ T7582] hfsplus: xattr search failed [ 371.273994][ T7582] syz.2.478: attempt to access beyond end of device [ 371.273994][ T7582] loop2: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 371.288448][ T7582] Buffer I/O error on dev loop2, logical block 458752, async page read [ 371.297275][ T7582] syz.2.478: attempt to access beyond end of device [ 371.297275][ T7582] loop2: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 371.311503][ T7582] Buffer I/O error on dev loop2, logical block 458752, async page read [ 371.497832][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.480'. [ 371.581637][ T7582] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 371.588430][ T7582] hfsplus: cannot replace xattr [ 371.784344][ T7592] loop1: detected capacity change from 0 to 1024 [ 373.136373][ T7608] Invalid ELF header magic: != ELF [ 373.191787][ T7607] loop2: detected capacity change from 0 to 2048 [ 373.312466][ T7607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.328223][ T7607] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.383024][ T7612] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 373.585385][ T7610] loop5: detected capacity change from 0 to 4096 [ 373.726302][ T7610] ntfs3(loop5): ino=3, Correct links count -> 2. [ 373.773853][ T5854] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 373.791258][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.978046][ T5854] usb 7-1: device descriptor read/64, error -71 [ 374.240813][ T7623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.492'. [ 374.249820][ T5854] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 374.372117][ T30] audit: type=1800 audit(1766634610.017:25): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.488" name="file1" dev="loop5" ino=34 res=0 errno=0 [ 374.411041][ T5854] usb 7-1: device descriptor read/64, error -71 [ 374.425690][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 374.551008][ T5854] usb usb7-port1: attempt power cycle [ 374.934601][ T5854] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 375.005545][ T5854] usb 7-1: device descriptor read/8, error -71 [ 375.289910][ T5854] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 375.352713][ T5854] usb 7-1: device descriptor read/8, error -71 [ 375.405284][ T7635] loop2: detected capacity change from 0 to 1024 [ 375.460976][ T7638] syz_tun: entered allmulticast mode [ 375.468379][ T5854] usb usb7-port1: unable to enumerate USB device [ 375.558005][ T7636] syz_tun: left allmulticast mode [ 375.565446][ T7635] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 375.572441][ T7635] hfsplus: xattr search failed [ 375.656457][ T7639] loop5: detected capacity change from 0 to 1024 [ 375.708107][ T7642] loop4: detected capacity change from 0 to 1024 [ 375.875840][ T7639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 375.882708][ T7639] hfsplus: xattr search failed [ 375.888117][ T7639] syz.5.496: attempt to access beyond end of device [ 375.888117][ T7639] loop5: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 375.902586][ T7639] Buffer I/O error on dev loop5, logical block 458752, async page read [ 375.911223][ T7639] syz.5.496: attempt to access beyond end of device [ 375.911223][ T7639] loop5: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 375.925483][ T7639] Buffer I/O error on dev loop5, logical block 458752, async page read [ 375.975254][ T7644] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 375.982143][ T7644] hfsplus: cannot replace xattr [ 377.944614][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.507'. [ 378.218900][ T7668] loop2: detected capacity change from 0 to 4096 [ 378.282142][ T7668] ntfs3(loop2): ino=3, Correct links count -> 2. [ 378.331969][ T7678] syz_tun: entered allmulticast mode [ 378.491445][ T7677] syz_tun: left allmulticast mode [ 378.757720][ T30] audit: type=1800 audit(1766634614.397:26): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.506" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 379.172505][ T7686] loop5: detected capacity change from 0 to 1024 [ 379.244130][ T7687] loop1: detected capacity change from 0 to 1024 [ 379.400941][ T7686] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 379.407791][ T7686] hfsplus: xattr search failed [ 379.417989][ T7687] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 379.425014][ T7687] hfsplus: xattr search failed [ 379.430455][ T7687] syz.1.513: attempt to access beyond end of device [ 379.430455][ T7687] loop1: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 379.450820][ T7687] Buffer I/O error on dev loop1, logical block 458752, async page read [ 379.459280][ T7687] syz.1.513: attempt to access beyond end of device [ 379.459280][ T7687] loop1: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 379.473645][ T7687] Buffer I/O error on dev loop1, logical block 458752, async page read [ 379.560160][ T37] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 379.655615][ T7693] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 379.662734][ T7693] hfsplus: cannot replace xattr [ 379.713950][ T37] usb 5-1: device descriptor read/64, error -71 [ 380.039762][ T37] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 380.231704][ T37] usb 5-1: device descriptor read/64, error -71 [ 380.363596][ T37] usb usb5-port1: attempt power cycle [ 380.659926][ T5854] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 380.739861][ T37] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 380.812398][ T37] usb 5-1: device descriptor read/8, error -71 [ 380.859719][ T5854] usb 6-1: Using ep0 maxpacket: 32 [ 380.899776][ T5854] usb 6-1: config 0 has no interfaces? [ 380.901757][ T7704] loop1: detected capacity change from 0 to 4096 [ 380.947030][ T5854] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 380.956502][ T5849] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 380.964500][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.976394][ T5854] usb 6-1: Product: syz [ 380.982055][ T5854] usb 6-1: Manufacturer: syz [ 380.986777][ T5854] usb 6-1: SerialNumber: syz [ 381.059944][ T37] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 381.141056][ T37] usb 5-1: device descriptor read/8, error -71 [ 381.146191][ T5854] usb 6-1: config 0 descriptor?? [ 381.208420][ T5849] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 381.217974][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.226423][ T5849] usb 7-1: Product: syz [ 381.230858][ T5849] usb 7-1: Manufacturer: syz [ 381.235619][ T5849] usb 7-1: SerialNumber: syz [ 381.257617][ T37] usb usb5-port1: unable to enumerate USB device [ 381.570881][ T5849] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 381.589028][ T5849] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 381.601321][ T5849] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 381.635291][ T5849] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 382.769023][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 383.752518][ T7743] syz_tun: entered allmulticast mode [ 383.851118][ T5849] usb 6-1: USB disconnect, device number 7 [ 383.921536][ T7742] syz_tun: left allmulticast mode [ 384.032856][ T5495] usb 7-1: USB disconnect, device number 6 [ 384.060719][ T5854] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 384.269870][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 384.322656][ T5854] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 384.332154][ T5854] usb 5-1: config 179 has no interface number 0 [ 384.338634][ T5854] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 384.353122][ T5854] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 384.365980][ T5854] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.377471][ T5854] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 384.389197][ T5854] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 384.402958][ T5854] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 384.412332][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.641162][ T7745] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 384.950776][ T5854] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 384.988012][ T7753] loop1: detected capacity change from 0 to 1024 [ 385.016807][ T7749] loop5: detected capacity change from 0 to 4096 [ 385.145640][ T7749] ntfs3(loop5): ino=3, Correct links count -> 2. [ 385.279074][ T5849] usb 5-1: USB disconnect, device number 14 [ 385.279119][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 385.279341][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 385.366024][ T7753] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 385.377162][ T7753] hfsplus: xattr search failed [ 385.383777][ T7753] syz.1.528: attempt to access beyond end of device [ 385.383777][ T7753] loop1: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 385.398139][ T7753] Buffer I/O error on dev loop1, logical block 458752, async page read [ 385.406775][ T7753] syz.1.528: attempt to access beyond end of device [ 385.406775][ T7753] loop1: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 385.421102][ T7753] Buffer I/O error on dev loop1, logical block 458752, async page read [ 385.557714][ T7755] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 385.564627][ T7755] hfsplus: cannot replace xattr [ 385.977099][ T30] audit: type=1800 audit(1766634621.617:27): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.526" name="file1" dev="loop5" ino=34 res=0 errno=0 [ 386.881716][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.533'. [ 387.090919][ T5849] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 387.278815][ T5849] usb 2-1: device descriptor read/64, error -71 [ 387.530524][ T5849] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 387.536743][ T7780] loop5: detected capacity change from 0 to 512 [ 387.670022][ T7780] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.534: bg 0: block 248: padding at end of block bitmap is not set [ 387.710172][ T7780] Quota error (device loop5): write_blk: dquota write failed [ 387.718150][ T7780] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 387.718651][ T5849] usb 2-1: device descriptor read/64, error -71 [ 387.733686][ T7780] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.534: Failed to acquire dquot type 1 [ 387.760212][ T5854] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 387.841960][ T5849] usb usb2-port1: attempt power cycle [ 387.882851][ T7790] syz_tun: entered allmulticast mode [ 387.923191][ T7780] EXT4-fs (loop5): 1 truncate cleaned up [ 387.936956][ T7780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.951420][ T7780] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.967088][ T5854] usb 7-1: Using ep0 maxpacket: 32 [ 387.978125][ T7788] syz_tun: left allmulticast mode [ 388.003735][ T5854] usb 7-1: config 0 has no interfaces? [ 388.043144][ T5854] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 388.052637][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.061621][ T5854] usb 7-1: Product: syz [ 388.065942][ T5854] usb 7-1: Manufacturer: syz [ 388.070813][ T5854] usb 7-1: SerialNumber: syz [ 388.217927][ T5854] usb 7-1: config 0 descriptor?? [ 388.272680][ T5849] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 388.353403][ T5849] usb 2-1: device descriptor read/8, error -71 [ 388.428860][ T7780] syz.5.534 (7780) used greatest stack depth: 2984 bytes left [ 388.456381][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.629905][ T5849] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 388.693541][ T5849] usb 2-1: device descriptor read/8, error -71 [ 388.824418][ T5849] usb usb2-port1: unable to enumerate USB device [ 389.088151][ T7799] netlink: 'syz.4.539': attribute type 4 has an invalid length. [ 389.199782][ T5854] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 389.371395][ T5854] usb 6-1: device descriptor read/64, error -71 [ 389.630007][ T5854] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 389.801553][ T5854] usb 6-1: device descriptor read/64, error -71 [ 389.910627][ T5854] usb usb6-port1: attempt power cycle [ 390.349718][ T5854] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 390.396193][ T5854] usb 6-1: device descriptor read/8, error -71 [ 390.691478][ T5854] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 390.732193][ T7809] loop1: detected capacity change from 0 to 1024 [ 390.830619][ T796] usb 7-1: USB disconnect, device number 7 [ 390.837901][ T5854] usb 6-1: device descriptor read/8, error -71 [ 390.963233][ T5854] usb usb6-port1: unable to enumerate USB device [ 391.012298][ T7809] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 391.019179][ T7809] hfsplus: cannot replace xattr [ 391.789232][ T7815] loop6: detected capacity change from 0 to 1024 [ 392.891009][ T7820] loop1: detected capacity change from 0 to 4096 [ 393.010163][ T7820] ntfs3(loop1): ino=3, Correct links count -> 2. [ 393.118198][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.546'. [ 393.954351][ T30] audit: type=1800 audit(1766634629.567:28): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.544" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 395.694835][ T7853] loop2: detected capacity change from 0 to 512 [ 395.932959][ T51] Bluetooth: hci1: hcon ffff888146436000 sent 1 < count 32765 [ 395.957931][ T51] Bluetooth: hci1: hcon ffff888146436000 sent 0 < count 14 [ 396.088063][ T7853] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.550: bg 0: block 248: padding at end of block bitmap is not set [ 396.104908][ T7853] Quota error (device loop2): write_blk: dquota write failed [ 396.113428][ T7853] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 396.123727][ T7853] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.550: Failed to acquire dquot type 1 [ 396.150196][ T5854] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 396.292504][ T5854] usb 2-1: device descriptor read/64, error -71 [ 396.411858][ T7853] EXT4-fs (loop2): 1 truncate cleaned up [ 396.420250][ T7853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.437646][ T7853] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.549720][ T5854] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 396.729877][ T5854] usb 2-1: device descriptor read/64, error -71 [ 396.791001][ T7864] loop5: detected capacity change from 0 to 1024 [ 396.923451][ T5854] usb usb2-port1: attempt power cycle [ 397.022366][ T7864] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 397.029203][ T7864] hfsplus: cannot replace xattr [ 397.261887][ T796] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 397.326205][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.340876][ T5854] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 397.375252][ T5854] usb 2-1: device descriptor read/8, error -71 [ 397.432518][ T796] usb 7-1: device descriptor read/64, error -71 [ 397.644589][ T5854] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 397.684557][ T796] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 397.723066][ T5854] usb 2-1: device descriptor read/8, error -71 [ 397.841215][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.558'. [ 397.855275][ T5854] usb usb2-port1: unable to enumerate USB device [ 397.859063][ T7871] loop4: detected capacity change from 0 to 1024 [ 397.875099][ T796] usb 7-1: device descriptor read/64, error -71 [ 397.990688][ T796] usb usb7-port1: attempt power cycle [ 398.372376][ T796] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 398.462142][ T796] usb 7-1: device descriptor read/8, error -71 [ 398.701683][ T7882] syz_tun: entered allmulticast mode [ 398.711192][ T796] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 398.752129][ T7879] syz_tun: left allmulticast mode [ 398.784783][ T796] usb 7-1: device descriptor read/8, error -71 [ 398.903846][ T796] usb usb7-port1: unable to enumerate USB device [ 399.305078][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 399.314335][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 400.378679][ T7902] loop5: detected capacity change from 0 to 512 [ 400.576876][ T7902] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.567: bg 0: block 248: padding at end of block bitmap is not set [ 400.594425][ T7902] Quota error (device loop5): write_blk: dquota write failed [ 400.602549][ T7902] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 400.613140][ T7902] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.567: Failed to acquire dquot type 1 [ 400.687228][ T7902] EXT4-fs (loop5): 1 truncate cleaned up [ 400.707622][ T7902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.721262][ T7902] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.427587][ T7916] loop1: detected capacity change from 0 to 1024 [ 401.447106][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.828786][ T7921] loop2: detected capacity change from 0 to 512 [ 401.833955][ T5854] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 401.857866][ T7921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.021497][ T5854] usb 7-1: device descriptor read/64, error -71 [ 402.284535][ T5854] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 402.484880][ T5854] usb 7-1: device descriptor read/64, error -71 [ 402.611753][ T5854] usb usb7-port1: attempt power cycle [ 402.826396][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.891750][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 402.901321][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 403.043938][ T5854] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 403.181472][ T5854] usb 7-1: device descriptor read/8, error -71 [ 403.256854][ T7937] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 403.486192][ T5854] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 403.542316][ T5854] usb 7-1: device descriptor read/8, error -71 [ 403.558121][ T7940] loop5: detected capacity change from 0 to 1024 [ 403.656573][ T5854] usb usb7-port1: unable to enumerate USB device [ 404.701408][ T7952] loop5: detected capacity change from 0 to 512 [ 404.920748][ T5854] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 405.014354][ T7952] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.583: bg 0: block 248: padding at end of block bitmap is not set [ 405.096365][ T7952] Quota error (device loop5): write_blk: dquota write failed [ 405.104936][ T7952] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 405.117321][ T7952] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.583: Failed to acquire dquot type 1 [ 405.157016][ T7952] EXT4-fs (loop5): 1 truncate cleaned up [ 405.165129][ T7952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.169852][ T5854] usb 3-1: device descriptor read/64, error -71 [ 405.178599][ T7952] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.465828][ T5854] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 405.516062][ T7952] syz.5.583 (7952) used greatest stack depth: 2952 bytes left [ 405.595465][ T7963] loop1: detected capacity change from 0 to 1024 [ 405.720482][ T5854] usb 3-1: device descriptor read/64, error -71 [ 405.840190][ T5854] usb usb3-port1: attempt power cycle [ 406.094652][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.250101][ T5854] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 406.311020][ T5854] usb 3-1: device descriptor read/8, error -71 [ 406.560019][ T5854] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 406.592118][ T5854] usb 3-1: device descriptor read/8, error -71 [ 406.720813][ T5854] usb usb3-port1: unable to enumerate USB device [ 406.959063][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.590'. [ 406.969284][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.590'. [ 407.337650][ T7984] loop4: detected capacity change from 0 to 256 [ 407.412651][ T7984] exfat: Deprecated parameter 'utf8' [ 407.666166][ T7984] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 407.986001][ T7990] loop6: detected capacity change from 0 to 1024 [ 408.827489][ T7993] loop4: detected capacity change from 0 to 1024 [ 408.831262][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.840575][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.963883][ T7996] syz_tun: entered allmulticast mode [ 409.020991][ T7994] syz_tun: left allmulticast mode [ 409.236833][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.6.597'. [ 409.333017][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.597'. [ 410.103725][ T8005] loop4: detected capacity change from 0 to 512 [ 410.204405][ T8007] loop6: detected capacity change from 0 to 512 [ 410.311990][ T8005] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.598: bg 0: block 248: padding at end of block bitmap is not set [ 410.366195][ T8007] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent [ 410.367286][ T8005] Quota error (device loop4): write_blk: dquota write failed [ 410.389220][ T8005] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 410.400250][ T8005] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.598: Failed to acquire dquot type 1 [ 410.417274][ T8008] loop5: detected capacity change from 0 to 1024 [ 411.219168][ T8005] EXT4-fs (loop4): 1 truncate cleaned up [ 411.227295][ T8005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.240756][ T8005] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.081973][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.302022][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.603'. [ 413.311593][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.603'. [ 414.000163][ T11] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 414.027522][ T8035] loop6: detected capacity change from 0 to 512 [ 414.242624][ T8035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.260498][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.271391][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.398246][ T11] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 414.407873][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 414.416297][ T11] usb 2-1: SerialNumber: syz [ 414.657598][ T8042] loop5: detected capacity change from 0 to 1024 [ 414.743523][ T8046] syz_tun: entered allmulticast mode [ 414.796880][ T11] usb 2-1: cannot find UAC_HEADER [ 414.834340][ T8045] syz_tun: left allmulticast mode [ 414.923857][ T7197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.981663][ T11] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 415.086362][ T11] usb 2-1: USB disconnect, device number 18 [ 415.617191][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.324925][ T8060] loop1: detected capacity change from 0 to 512 [ 416.610058][ T8060] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.614: bg 0: block 248: padding at end of block bitmap is not set [ 416.633769][ T8060] Quota error (device loop1): write_blk: dquota write failed [ 416.641785][ T8060] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 416.652230][ T8060] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.614: Failed to acquire dquot type 1 [ 416.763016][ T8060] EXT4-fs (loop1): 1 truncate cleaned up [ 416.771611][ T8060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.784865][ T8060] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.830521][ T8054] loop6: detected capacity change from 0 to 4096 [ 417.370754][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.477922][ T8063] loop5: detected capacity change from 0 to 8192 [ 417.481015][ T8061] loop2: detected capacity change from 0 to 4096 [ 417.703761][ T8061] ntfs3(loop2): ino=3, Correct links count -> 2. [ 418.070698][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 418.079919][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 418.565430][ T8074] loop4: detected capacity change from 0 to 512 [ 418.741644][ T8074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.892097][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.071903][ T8061] ntfs3(loop2): Failed to read $UpCase (-4). [ 419.330484][ T8079] syz_tun: entered allmulticast mode [ 419.386334][ T8078] syz_tun: left allmulticast mode [ 419.761558][ T8084] loop4: detected capacity change from 0 to 1024 [ 419.906719][ T8085] loop6: detected capacity change from 0 to 2048 [ 421.091658][ T8099] loop4: detected capacity change from 0 to 1024 [ 421.228700][ T8101] loop6: detected capacity change from 0 to 1024 [ 421.284818][ T8104] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 421.292199][ T8104] hfsplus: xattr search failed [ 421.297572][ T8104] syz.4.628: attempt to access beyond end of device [ 421.297572][ T8104] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 421.312056][ T8104] Buffer I/O error on dev loop4, logical block 458752, async page read [ 421.325601][ T8104] syz.4.628: attempt to access beyond end of device [ 421.325601][ T8104] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 421.344841][ T8104] Buffer I/O error on dev loop4, logical block 458752, async page read [ 421.542474][ T8101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.097234][ T7197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.277685][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 422.356804][ T8106] loop5: detected capacity change from 0 to 8192 [ 422.541258][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 422.555060][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 422.590500][ T8117] netlink: 666 bytes leftover after parsing attributes in process `syz.6.635'. [ 423.100516][ T8119] syz_tun: entered allmulticast mode [ 423.187166][ T8118] syz_tun: left allmulticast mode [ 423.452529][ T8123] loop6: detected capacity change from 0 to 1024 [ 424.405675][ T30] audit: type=1326 audit(1766634660.047:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.1.641" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 425.366463][ T8141] loop5: detected capacity change from 0 to 1024 [ 425.657038][ T8146] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 425.664037][ T8146] hfsplus: xattr search failed [ 425.669390][ T8146] syz.5.644: attempt to access beyond end of device [ 425.669390][ T8146] loop5: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 425.684774][ T8146] Buffer I/O error on dev loop5, logical block 458752, async page read [ 425.694198][ T8146] syz.5.644: attempt to access beyond end of device [ 425.694198][ T8146] loop5: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 425.708539][ T8146] Buffer I/O error on dev loop5, logical block 458752, async page read [ 426.470872][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 426.883986][ T8156] syz_tun: entered allmulticast mode [ 426.980561][ T8155] syz_tun: left allmulticast mode [ 427.764959][ T8154] loop1: detected capacity change from 0 to 8192 [ 428.757598][ T8173] loop6: detected capacity change from 0 to 1024 [ 429.000323][ T8178] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 429.007111][ T8178] hfsplus: xattr search failed [ 429.012462][ T8178] syz.6.659: attempt to access beyond end of device [ 429.012462][ T8178] loop6: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 429.026685][ T8178] Buffer I/O error on dev loop6, logical block 458752, async page read [ 429.036621][ T8178] syz.6.659: attempt to access beyond end of device [ 429.036621][ T8178] loop6: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 429.051127][ T8178] Buffer I/O error on dev loop6, logical block 458752, async page read [ 429.429171][ T8180] loop1: detected capacity change from 0 to 1024 [ 429.541463][ T8180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.603139][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.662'. [ 430.056042][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.158654][ T8189] syz_tun: entered allmulticast mode [ 430.221439][ T8188] syz_tun: left allmulticast mode [ 430.399864][ T8193] loop5: detected capacity change from 0 to 512 [ 430.474565][ T8193] EXT4-fs (loop5): Test dummy encryption mode enabled [ 430.481899][ T8193] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 430.495363][ T8193] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 430.601591][ T8193] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.666: bad orphan inode 131083 [ 430.661662][ T8193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.468518][ T8193] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 432.313434][ T8206] loop1: detected capacity change from 0 to 8192 [ 432.722265][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.676'. [ 432.742954][ T8222] loop4: detected capacity change from 0 to 1024 [ 432.938749][ T8193] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 432.955337][ T8222] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 432.965857][ T8222] hfsplus: xattr search failed [ 432.971268][ T8222] syz.4.674: attempt to access beyond end of device [ 432.971268][ T8222] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 432.985597][ T8222] Buffer I/O error on dev loop4, logical block 458752, async page read [ 432.998973][ T8222] syz.4.674: attempt to access beyond end of device [ 432.998973][ T8222] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 433.014657][ T8222] Buffer I/O error on dev loop4, logical block 458752, async page read [ 433.416124][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.698752][ T8230] loop6: detected capacity change from 0 to 1024 [ 433.891745][ T8230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.033228][ T8237] syz_tun: entered allmulticast mode [ 434.135884][ T8232] syz_tun: left allmulticast mode [ 434.500400][ T7197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.558998][ T8252] loop1: detected capacity change from 0 to 16 [ 435.601910][ T8252] erofs (device loop1): mounted with root inode @ nid 36. [ 435.664671][ T30] audit: type=1800 audit(1766634671.317:30): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.686" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 436.500019][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 436.528879][ T8259] loop1: detected capacity change from 0 to 1024 [ 436.803855][ T8261] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 436.810893][ T8261] hfsplus: xattr search failed [ 436.816296][ T8261] syz.1.690: attempt to access beyond end of device [ 436.816296][ T8261] loop1: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 436.830825][ T8261] Buffer I/O error on dev loop1, logical block 458752, async page read [ 436.839634][ T8261] syz.1.690: attempt to access beyond end of device [ 436.839634][ T8261] loop1: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 436.853899][ T8261] Buffer I/O error on dev loop1, logical block 458752, async page read [ 437.160716][ T8256] loop4: detected capacity change from 0 to 8192 [ 438.258149][ T8271] syz_tun: entered allmulticast mode [ 438.341418][ T8270] syz_tun: left allmulticast mode [ 438.342000][ T8269] loop5: detected capacity change from 0 to 1024 [ 438.501981][ T8269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.088676][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.967834][ T8286] loop1: detected capacity change from 0 to 2048 [ 440.154071][ T8286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.170608][ T8286] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.332216][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.700'. [ 440.664637][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.697953][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 440.756158][ T8297] loop4: detected capacity change from 0 to 1024 [ 440.892081][ T8301] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 440.898966][ T8301] hfsplus: xattr search failed [ 440.904616][ T8301] syz.4.703: attempt to access beyond end of device [ 440.904616][ T8301] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 440.918959][ T8301] Buffer I/O error on dev loop4, logical block 458752, async page read [ 440.927683][ T8301] syz.4.703: attempt to access beyond end of device [ 440.927683][ T8301] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 440.942412][ T8301] Buffer I/O error on dev loop4, logical block 458752, async page read [ 441.469269][ T8303] sctp: [Deprecated]: syz.5.708 (pid 8303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.469269][ T8303] Use struct sctp_sack_info instead [ 441.959033][ T8309] loop4: detected capacity change from 0 to 1024 [ 442.065779][ T8309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.586591][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.426311][ T8324] loop4: detected capacity change from 0 to 2048 [ 443.520913][ T8324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.537227][ T8324] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.857889][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.716'. [ 443.958369][ T4779] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.043996][ T8337] loop6: detected capacity change from 0 to 1024 [ 444.285438][ T8340] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 444.292549][ T8340] hfsplus: xattr search failed [ 444.297834][ T8340] syz.6.719: attempt to access beyond end of device [ 444.297834][ T8340] loop6: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 444.314001][ T8340] Buffer I/O error on dev loop6, logical block 458752, async page read [ 444.323008][ T8340] syz.6.719: attempt to access beyond end of device [ 444.323008][ T8340] loop6: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 444.337875][ T8340] Buffer I/O error on dev loop6, logical block 458752, async page read [ 444.382349][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.852331][ T8339] loop5: detected capacity change from 0 to 4096 [ 445.033597][ T8344] loop1: detected capacity change from 0 to 512 [ 445.115887][ T8347] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.222688][ T8344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.034024][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.716752][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 446.831929][ T8362] loop1: detected capacity change from 0 to 1024 [ 447.000661][ T8362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.366604][ T11] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 447.557807][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.590451][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 447.658923][ T11] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 447.668604][ T11] usb 5-1: config 0 has no interface number 0 [ 447.675986][ T11] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.796803][ T11] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 447.806269][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.815283][ T11] usb 5-1: Product: syz [ 447.819759][ T11] usb 5-1: Manufacturer: syz [ 447.824513][ T11] usb 5-1: SerialNumber: syz [ 447.953886][ T11] usb 5-1: config 0 descriptor?? [ 448.728613][ T8383] loop5: detected capacity change from 0 to 1024 [ 448.989943][ T8383] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 448.996653][ T8383] hfsplus: xattr search failed [ 450.076855][ T5849] usb 5-1: USB disconnect, device number 15 [ 450.662045][ T8392] loop2: detected capacity change from 0 to 4096 [ 450.917363][ T8408] loop1: detected capacity change from 0 to 1024 [ 451.080537][ T8408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.617205][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.567116][ T8423] loop1: detected capacity change from 0 to 1024 [ 452.772342][ T8423] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 452.779235][ T8423] hfsplus: xattr search failed [ 454.533310][ T5849] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 454.729835][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 454.751144][ T5849] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 454.759713][ T5849] usb 3-1: config 0 has no interface number 0 [ 454.765979][ T5849] usb 3-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.899149][ T5849] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 454.912615][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.921769][ T5849] usb 3-1: Product: syz [ 454.926029][ T5849] usb 3-1: Manufacturer: syz [ 454.930851][ T5849] usb 3-1: SerialNumber: syz [ 454.975643][ T5849] usb 3-1: config 0 descriptor?? [ 455.290501][ T8442] loop5: detected capacity change from 0 to 1024 [ 455.452007][ T8442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.622984][ T8444] loop1: detected capacity change from 0 to 1024 [ 455.844360][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.150731][ T4779] hfsplus: b-tree write err: -5, ino 4 [ 456.815403][ T8455] loop5: detected capacity change from 0 to 4096 [ 457.024930][ T8453] loop4: detected capacity change from 0 to 8192 [ 457.767941][ T11] usb 3-1: USB disconnect, device number 13 [ 459.237734][ T8486] loop5: detected capacity change from 0 to 16 [ 459.272354][ T8486] erofs (device loop5): mounted with root inode @ nid 36. [ 459.311851][ T30] audit: type=1800 audit(1766634694.967:31): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.775" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 460.335307][ T8494] loop6: detected capacity change from 0 to 4096 [ 461.276134][ T5849] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 461.473781][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 461.506145][ T5849] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 461.516222][ T5849] usb 6-1: config 0 has no interface number 0 [ 461.523192][ T5849] usb 6-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.616027][ T5849] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 461.625938][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.634324][ T5849] usb 6-1: Product: syz [ 461.638710][ T5849] usb 6-1: Manufacturer: syz [ 461.643926][ T5849] usb 6-1: SerialNumber: syz [ 461.807164][ T5849] usb 6-1: config 0 descriptor?? [ 462.371839][ T8514] binder: 8513:8514 ioctl c0306201 0 returned -14 [ 462.605025][ T8518] binder: 8513:8518 ioctl 5000943a 0 returned -22 [ 462.797620][ T8524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.791'. [ 463.772027][ T8533] loop1: detected capacity change from 0 to 4096 [ 464.437217][ T11] usb 6-1: USB disconnect, device number 12 [ 466.532898][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.804'. [ 467.204552][ T8570] binder: 8569:8570 ioctl c0306201 0 returned -14 [ 467.414772][ T8573] binder: 8569:8573 ioctl 5000943a 0 returned -22 [ 467.524745][ T8574] syz_tun: entered allmulticast mode [ 467.573328][ T8572] syz_tun: left allmulticast mode [ 468.015452][ T5854] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 468.228469][ T5854] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.239707][ T5854] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.269267][ T5854] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.280560][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.288931][ T5854] usb 5-1: SerialNumber: syz [ 468.575194][ T5854] usb 5-1: 0:2 : does not exist [ 468.676774][ T5854] usb 5-1: USB disconnect, device number 16 [ 468.890730][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.977485][ T8582] loop5: detected capacity change from 0 to 512 [ 469.110776][ T8582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.286371][ T8580] loop1: detected capacity change from 0 to 4096 [ 469.669188][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.724642][ T8589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1841182687 (58917845984 ns) > initial count (45424741664 ns). Using initial count to start timer. [ 469.844343][ T8590] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1852575491 (118564831424 ns) > initial count (78018577472 ns). Using initial count to start timer. [ 470.248970][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.255893][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.485890][ T8594] Invalid ELF header magic: != ELF [ 470.806831][ T8596] loop5: detected capacity change from 0 to 512 [ 470.931067][ T8596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.944152][ T8596] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.171418][ T8596] loop5: detected capacity change from 512 to 64 [ 471.765338][ T4972] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.805759][ T8607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 471.838464][ T6289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.036852][ T4972] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.077436][ T8609] binder: 8608:8609 ioctl c0306201 0 returned -14 [ 472.352134][ T8611] binder: 8608:8611 ioctl 5000943a 0 returned -22 [ 472.442829][ T4972] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.491057][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 472.543389][ T4972] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.611289][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 473.087819][ T4972] bridge_slave_1: left allmulticast mode [ 473.093858][ T4972] bridge_slave_1: left promiscuous mode [ 473.100658][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.185871][ T4972] bridge_slave_0: left allmulticast mode [ 473.191914][ T4972] bridge_slave_0: left promiscuous mode [ 473.198431][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.775288][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.796149][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.821400][ T4972] bond0 (unregistering): Released all slaves [ 474.649720][ T4972] hsr_slave_0: left promiscuous mode [ 474.657317][ T4972] hsr_slave_1: left promiscuous mode [ 474.668873][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.676505][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.771811][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.779388][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.885160][ T4972] veth1_macvtap: left promiscuous mode [ 474.890910][ T4972] veth0_macvtap: left promiscuous mode [ 474.896589][ T4972] veth1_vlan: left promiscuous mode [ 474.902169][ T4972] veth0_vlan: left promiscuous mode [ 475.971665][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 476.103823][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 477.102390][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.111715][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.140356][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.151347][ T8635] Invalid ELF header magic: != ELF [ 477.160541][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.183350][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.378630][ T8637] netlink: 62967 bytes leftover after parsing attributes in process `syz.6.828'. [ 478.311045][ T8632] chnl_net:caif_netlink_parms(): no params data found [ 478.627353][ T8649] loop1: detected capacity change from 0 to 512 [ 478.933885][ T8649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.947075][ T8649] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.269692][ T5805] Bluetooth: hci1: command tx timeout [ 479.277609][ T8649] loop1: detected capacity change from 512 to 64 [ 479.354658][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.363454][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.371279][ T8632] bridge_slave_0: entered allmulticast mode [ 479.383330][ T8632] bridge_slave_0: entered promiscuous mode [ 479.522081][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.529969][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.537623][ T8632] bridge_slave_1: entered allmulticast mode [ 479.545984][ T8632] bridge_slave_1: entered promiscuous mode [ 479.945383][ T8632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.988025][ T8632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.087223][ T8132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.106827][ T8664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.833'. [ 480.192545][ T8665] binder: 8661:8665 ioctl 5000943a 0 returned -22 [ 480.393022][ T8632] team0: Port device team_slave_0 added [ 480.453486][ T8632] team0: Port device team_slave_1 added [ 480.628804][ T134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.352029][ T5805] Bluetooth: hci1: command tx timeout [ 481.379358][ T134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.747347][ T134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.804149][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 481.841257][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 481.854144][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 481.880764][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 481.894251][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.998228][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.005720][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.034098][ T8632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.085750][ T134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.584361][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.591633][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.617959][ T8632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.630178][ T134] bridge_slave_1: left allmulticast mode [ 482.635989][ T134] bridge_slave_1: left promiscuous mode [ 482.642645][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.765389][ T134] bridge_slave_0: left allmulticast mode [ 482.771738][ T134] bridge_slave_0: left promiscuous mode [ 482.777878][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.297859][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.341243][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.375800][ T134] bond0 (unregistering): Released all slaves [ 483.429990][ T5805] Bluetooth: hci1: command tx timeout [ 483.990315][ T5805] Bluetooth: hci0: command tx timeout [ 484.031810][ T8632] hsr_slave_0: entered promiscuous mode [ 484.044095][ T8632] hsr_slave_1: entered promiscuous mode [ 484.052061][ T8632] debugfs: 'hsr0' already exists in 'hsr' [ 484.057904][ T8632] Cannot create hsr debugfs directory [ 484.438579][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 484.467291][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 484.505487][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 484.522442][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 484.544081][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 484.577633][ T134] hsr_slave_0: left promiscuous mode [ 484.590415][ T134] hsr_slave_1: left promiscuous mode [ 484.597258][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.606152][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.696562][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.705494][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.779879][ T134] veth1_macvtap: left promiscuous mode [ 484.785499][ T134] veth0_macvtap: left promiscuous mode [ 484.791351][ T134] veth1_vlan: left promiscuous mode [ 484.796727][ T134] veth0_vlan: left promiscuous mode [ 485.304560][ T134] team0 (unregistering): Port device team_slave_1 removed [ 485.348147][ T134] team0 (unregistering): Port device team_slave_0 removed [ 485.509964][ T5805] Bluetooth: hci1: command tx timeout [ 485.987052][ T5854] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 486.083628][ T51] Bluetooth: hci0: command tx timeout [ 486.239798][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 486.255611][ T5854] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 486.264407][ T5854] usb 5-1: config 0 has no interface number 0 [ 486.270790][ T5854] usb 5-1: config 0 interface 125 has no altsetting 0 [ 486.346371][ T5854] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 486.357331][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.366010][ T5854] usb 5-1: Product: syz [ 486.370363][ T5854] usb 5-1: Manufacturer: syz [ 486.375056][ T5854] usb 5-1: SerialNumber: syz [ 486.432754][ T5854] usb 5-1: config 0 descriptor?? [ 486.630126][ T51] Bluetooth: hci3: command tx timeout [ 486.700748][ T5854] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 486.782006][ T8707] fuse: Bad value for 'fd' [ 487.225787][ T8709] netlink: 32 bytes leftover after parsing attributes in process `syz.6.845'. [ 487.239675][ T8687] chnl_net:caif_netlink_parms(): no params data found [ 487.355265][ T5854] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 487.397570][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 487.746892][ T8632] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 487.813499][ T8632] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 487.930927][ T8632] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 488.016070][ T8632] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 488.099095][ T5854] ueagle-atm 5-1:0.125: usbatm_usb_probe: bind failed: -19! [ 488.153096][ T51] Bluetooth: hci0: command tx timeout [ 488.171076][ T5854] usb 5-1: USB disconnect, device number 17 [ 488.722173][ T51] Bluetooth: hci3: command tx timeout [ 488.745363][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.752779][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.760477][ T8674] bridge_slave_0: entered allmulticast mode [ 488.768520][ T8674] bridge_slave_0: entered promiscuous mode [ 488.782863][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.790711][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.801059][ T8674] bridge_slave_1: entered allmulticast mode [ 488.826799][ T8674] bridge_slave_1: entered promiscuous mode [ 489.118845][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.201888][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.597626][ T8727] binder: 8722:8727 ioctl 5000943a 0 returned -22 [ 489.735900][ T8674] team0: Port device team_slave_0 added [ 489.833996][ T8674] team0: Port device team_slave_1 added [ 489.848194][ T8687] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.858122][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.865790][ T8687] bridge_slave_0: entered allmulticast mode [ 489.874025][ T8687] bridge_slave_0: entered promiscuous mode [ 490.011688][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.019078][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.030659][ T8687] bridge_slave_1: entered allmulticast mode [ 490.039215][ T8687] bridge_slave_1: entered promiscuous mode [ 490.131457][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.138608][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.165435][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.274565][ T51] Bluetooth: hci0: command tx timeout [ 490.347451][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.355426][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.382439][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.404835][ T8687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.467894][ T8687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.766634][ T8687] team0: Port device team_slave_0 added [ 490.798837][ T51] Bluetooth: hci3: command tx timeout [ 490.860147][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.880898][ T8687] team0: Port device team_slave_1 added [ 490.906176][ T8674] hsr_slave_0: entered promiscuous mode [ 490.916546][ T8674] hsr_slave_1: entered promiscuous mode [ 491.306001][ T8738] fuse: Bad value for 'fd' [ 491.659846][ T8687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.668081][ T8687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.694750][ T8687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.824883][ T8687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.832474][ T8687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.858713][ T8687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.889156][ T8632] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.912436][ T8741] netlink: 32 bytes leftover after parsing attributes in process `syz.6.853'. [ 492.192945][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.200326][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.581958][ T8687] hsr_slave_0: entered promiscuous mode [ 492.592629][ T8687] hsr_slave_1: entered promiscuous mode [ 492.600832][ T8687] debugfs: 'hsr0' already exists in 'hsr' [ 492.606639][ T8687] Cannot create hsr debugfs directory [ 492.816965][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.824508][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.865925][ T8674] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 492.871818][ T51] Bluetooth: hci3: command tx timeout [ 493.272866][ T8674] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 493.525675][ T8632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.695818][ T8674] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 494.190222][ T8674] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 494.219995][ T8687] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 494.313689][ T8687] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 494.424355][ T8687] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 494.577848][ T8687] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 495.157401][ T8758] binder: 8756:8758 ioctl 5000943a 0 returned -22 [ 495.460903][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.647997][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.782218][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.789843][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.948542][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.956086][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.277758][ T8674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.288391][ T8674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.497145][ T8687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.962214][ T8687] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.221496][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.228961][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.624296][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.631851][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.817017][ T8632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.251899][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.391565][ T8779] fuse: Bad value for 'fd' [ 498.670432][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.862'. [ 498.675125][ T8687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.454886][ T8801] binder: 8799:8801 ioctl 5000943a 0 returned -22 [ 500.761905][ T8687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.103335][ T8825] netlink: 32 bytes leftover after parsing attributes in process `syz.6.871'. [ 502.733266][ T8674] veth0_vlan: entered promiscuous mode [ 502.850281][ T8674] veth1_vlan: entered promiscuous mode [ 502.918031][ T8829] loop6: detected capacity change from 0 to 1024 [ 503.182463][ T8632] veth0_vlan: entered promiscuous mode [ 503.240270][ T8674] veth0_macvtap: entered promiscuous mode [ 503.270220][ T8829] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 503.277103][ T8829] hfsplus: cannot replace xattr [ 503.313935][ T8674] veth1_macvtap: entered promiscuous mode [ 503.343513][ T8833] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 503.351452][ T8833] hfsplus: xattr search failed [ 503.357890][ T8833] syz.6.872: attempt to access beyond end of device [ 503.357890][ T8833] loop6: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 503.372171][ T8833] Buffer I/O error on dev loop6, logical block 458752, async page read [ 503.380629][ T8833] syz.6.872: attempt to access beyond end of device [ 503.380629][ T8833] loop6: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 503.394745][ T8833] Buffer I/O error on dev loop6, logical block 458752, async page read [ 503.475115][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.561284][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.638878][ T4212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.714317][ T4212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.781747][ T151] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.945304][ T151] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.979320][ T8632] veth1_vlan: entered promiscuous mode [ 505.043166][ T8632] veth0_macvtap: entered promiscuous mode [ 505.600296][ T8632] veth1_macvtap: entered promiscuous mode [ 506.191141][ T8687] veth0_vlan: entered promiscuous mode [ 506.303855][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.879'. [ 506.317567][ T8687] veth1_vlan: entered promiscuous mode [ 506.455274][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.674628][ T8687] veth0_macvtap: entered promiscuous mode [ 506.729932][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.783198][ T8687] veth1_macvtap: entered promiscuous mode [ 506.996138][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.086642][ T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.171008][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.341625][ T4212] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.448426][ T35] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.560223][ T35] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.615806][ T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.717590][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.785699][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.855429][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.855298][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.6.885'. [ 509.958677][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.885'. [ 511.775499][ T8920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.888'. [ 512.815643][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.890'. [ 513.994370][ T8949] sctp: [Deprecated]: syz.4.891 (pid 8949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.994370][ T8949] Use struct sctp_sack_info instead [ 514.373112][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.381236][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.523966][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.532246][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.716339][ T4192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.724819][ T4192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.814428][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.894'. [ 515.874871][ T8961] loop6: detected capacity change from 0 to 2048 [ 515.892221][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.900606][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.917600][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 516.052604][ T8964] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.141518][ T8973] Invalid ELF header magic: != ELF [ 517.603083][ T8976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.896'. [ 518.080371][ T8984] sctp: [Deprecated]: syz.9.899 (pid 8984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.080371][ T8984] Use struct sctp_sack_info instead [ 518.444921][ T8985] loop8: detected capacity change from 0 to 1024 [ 518.736896][ T8985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.774387][ T8985] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 518.785666][ T8985] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 518.795821][ T8985] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 518.810834][ T8985] EXT4-fs error (device loop8): ext4_get_journal_inode:5849: comm syz.8.898: inode #1: comm syz.8.898: iget: illegal inode # [ 518.835757][ T8990] loop4: detected capacity change from 0 to 256 [ 519.034319][ T8985] EXT4-fs (loop8): Remounting filesystem read-only [ 519.041260][ T8985] EXT4-fs (loop8): no journal found [ 520.226814][ T9006] loop6: detected capacity change from 0 to 256 [ 521.211353][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.8.905'. [ 521.222635][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.230901][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.278822][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.905'. [ 521.313770][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.322102][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.423535][ T9022] loop7: detected capacity change from 0 to 512 [ 522.442112][ T9024] netlink: 32 bytes leftover after parsing attributes in process `syz.6.909'. [ 522.735023][ T9022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.590397][ T8632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.910491][ T5854] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 525.003261][ T9046] loop7: detected capacity change from 0 to 64 [ 525.099947][ T5854] usb 7-1: Using ep0 maxpacket: 32 [ 525.126671][ T5854] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 525.135472][ T5854] usb 7-1: config 0 has no interface number 0 [ 525.141917][ T5854] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.289905][ T5854] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 525.299163][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.308043][ T5854] usb 7-1: Product: syz [ 525.312680][ T5854] usb 7-1: Manufacturer: syz [ 525.317356][ T5854] usb 7-1: SerialNumber: syz [ 525.348547][ T9046] syz.7.914: attempt to access beyond end of device [ 525.348547][ T9046] loop7: rw=8388608, sector=8192, nr_sectors = 2 limit=64 [ 525.367280][ T9046] Buffer I/O error on dev loop7, logical block 4096, async page read [ 525.376823][ T9046] syz.7.914: attempt to access beyond end of device [ 525.376823][ T9046] loop7: rw=8388608, sector=8192, nr_sectors = 2 limit=64 [ 525.390794][ T9046] Buffer I/O error on dev loop7, logical block 4096, async page read [ 525.436580][ T30] audit: type=1800 audit(1766634761.047:32): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.914" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 525.531678][ T5854] usb 7-1: config 0 descriptor?? [ 525.576088][ T5854] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 525.586309][ T5854] em28xx 7-1:0.132: Video interface 132 found: [ 525.997095][ T5854] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 526.360379][ T796] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 526.451640][ T5854] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 526.464682][ T5854] em28xx 7-1:0.132: board has no eeprom [ 526.722470][ T5854] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 526.730711][ T5854] em28xx 7-1:0.132: analog set to bulk mode. [ 526.738573][ T9] em28xx 7-1:0.132: Registering V4L2 extension [ 526.793545][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.7.921'. [ 526.851821][ T5854] usb 7-1: USB disconnect, device number 16 [ 526.864073][ T5854] em28xx 7-1:0.132: Disconnecting em28xx [ 526.896547][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.921'. [ 527.020652][ T796] usb 10-1: Using ep0 maxpacket: 32 [ 527.115013][ T9062] loop4: detected capacity change from 0 to 2048 [ 527.152483][ T796] usb 10-1: config 0 has an invalid interface number: 125 but max is 0 [ 527.161076][ T796] usb 10-1: config 0 has no interface number 0 [ 527.167431][ T796] usb 10-1: config 0 interface 125 has no altsetting 0 [ 527.257780][ T9062] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 527.264707][ T9062] loop4: partition table partially beyond EOD, truncated [ 527.272956][ T9062] loop4: p1 start 4278190080 is beyond EOD, truncated [ 527.280018][ T9062] loop4: p2 start 16908800 is beyond EOD, truncated [ 527.408768][ T9062] loop4: p5 start 16908800 is beyond EOD, truncated [ 527.632959][ T5148] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 527.638376][ T5148] loop4: partition table partially beyond EOD, truncated [ 527.646465][ T5148] loop4: p1 start 4278190080 is beyond EOD, truncated [ 527.653449][ T5148] loop4: p2 start 16908800 is beyond EOD, truncated [ 527.726856][ T9070] loop7: detected capacity change from 0 to 512 [ 527.776458][ T796] usb 10-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 527.785929][ T796] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.794463][ T796] usb 10-1: Product: syz [ 527.798874][ T796] usb 10-1: Manufacturer: syz [ 527.803938][ T796] usb 10-1: SerialNumber: syz [ 527.872911][ T796] usb 10-1: config 0 descriptor?? [ 527.942156][ T5148] loop4: p5 start 16908800 is beyond EOD, truncated [ 528.060794][ T9070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.153843][ T796] usb 10-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 528.796279][ T9] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 528.803899][ T9] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 528.811498][ T9] em28xx 7-1:0.132: No AC97 audio processor [ 528.954013][ T9] usb 7-1: Decoder not found [ 528.958815][ T9] em28xx 7-1:0.132: failed to create media graph [ 528.965576][ T9] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 529.085214][ T8632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.107973][ T9] em28xx 7-1:0.132: Remote control support is not available for this card. [ 529.156031][ T5854] em28xx 7-1:0.132: Closing input extension [ 529.207546][ T5854] em28xx 7-1:0.132: Freeing device [ 529.276586][ T796] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 529.684892][ T9095] loop4: detected capacity change from 0 to 512 [ 529.744211][ T796] usb 10-1: device descriptor read/all, error -71 [ 529.805674][ T9095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.929: bg 0: block 248: padding at end of block bitmap is not set [ 529.930641][ T9095] Quota error (device loop4): write_blk: dquota write failed [ 529.938933][ T9095] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 529.951186][ T9095] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.929: Failed to acquire dquot type 1 [ 530.061191][ T9095] EXT4-fs (loop4): 1 truncate cleaned up [ 530.079077][ T9095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.092272][ T9095] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.567993][ T142] bond0: (slave bond_slave_0): interface is now down [ 530.579622][ T142] bond0: (slave bond_slave_1): interface is now down [ 530.588553][ T142] bond0: now running without any active interface! [ 530.711056][ T796] ueagle-atm 10-1:0.125: usbatm_usb_probe: bind failed: -19! [ 530.903005][ T9109] loop8: detected capacity change from 0 to 256 [ 531.042190][ T796] usb 10-1: USB disconnect, device number 2 [ 531.237304][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.291486][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.6.934'. [ 531.316886][ T9109] exFAT-fs (loop8): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 531.353979][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.934'. [ 531.540452][ T5854] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 531.689241][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.696531][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.769719][ T5854] usb 8-1: Using ep0 maxpacket: 32 [ 531.835438][ T5854] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 531.844267][ T5854] usb 8-1: config 0 has no interface number 0 [ 531.850618][ T5854] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.990462][ T5854] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 532.001091][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.014308][ T5854] usb 8-1: Product: syz [ 532.018635][ T5854] usb 8-1: Manufacturer: syz [ 532.025275][ T5854] usb 8-1: SerialNumber: syz [ 532.189828][ T5854] usb 8-1: config 0 descriptor?? [ 532.228395][ T5854] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 532.240921][ T5854] em28xx 8-1:0.132: Video interface 132 found: [ 532.657905][ T5854] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 533.051081][ T9126] netlink: 36 bytes leftover after parsing attributes in process `syz.8.938'. [ 533.104556][ T5854] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 533.117656][ T5854] em28xx 8-1:0.132: board has no eeprom [ 533.328477][ T9126] netlink: 'syz.8.938': attribute type 10 has an invalid length. [ 533.396034][ T5854] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 533.404337][ T5854] em28xx 8-1:0.132: analog set to bulk mode. [ 533.413982][ T9] em28xx 8-1:0.132: Registering V4L2 extension [ 533.506001][ T9126] syz_tun: entered promiscuous mode [ 533.533793][ T9126] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 533.618286][ T5854] usb 8-1: USB disconnect, device number 2 [ 533.626008][ T5854] em28xx 8-1:0.132: Disconnecting em28xx [ 534.115996][ T5957] udevd[5957]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 534.121595][ T6267] udevd[6267]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 534.138307][ T5989] udevd[5989]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 534.923304][ T6267] udevd[6267]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 534.935985][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 535.020743][ T5989] udevd[5989]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 535.279820][ T8699] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 535.459932][ T8699] usb 9-1: Using ep0 maxpacket: 32 [ 535.501157][ T8699] usb 9-1: config 0 has an invalid interface number: 125 but max is 0 [ 535.501286][ T8699] usb 9-1: config 0 has no interface number 0 [ 535.501387][ T8699] usb 9-1: config 0 interface 125 has no altsetting 0 [ 535.620385][ T8699] usb 9-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 535.620533][ T8699] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.620648][ T8699] usb 9-1: Product: syz [ 535.620737][ T8699] usb 9-1: Manufacturer: syz [ 535.620828][ T8699] usb 9-1: SerialNumber: syz [ 535.627153][ T8699] usb 9-1: config 0 descriptor?? [ 535.830475][ T9] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 535.830586][ T9] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 535.830668][ T9] em28xx 8-1:0.132: No AC97 audio processor [ 535.870524][ T9] usb 8-1: Decoder not found [ 535.870665][ T9] em28xx 8-1:0.132: failed to create media graph [ 535.870831][ T9] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 535.906748][ T9] em28xx 8-1:0.132: Remote control support is not available for this card. [ 535.946174][ T5854] em28xx 8-1:0.132: Closing input extension [ 535.958796][ T9146] loop9: detected capacity change from 0 to 128 [ 536.039621][ T9146] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 536.039851][ T9146] hpfs: filesystem error: improperly stopped [ 536.039941][ T9146] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 536.040025][ T9146] hpfs: You really don't want any checks? You are crazy... [ 536.040439][ T9146] hpfs: hpfs_map_sector(): read error [ 536.040495][ T9146] hpfs: code page support is disabled [ 536.049147][ T9146] hpfs: hpfs_map_4sectors(): unaligned read [ 536.071153][ T5854] em28xx 8-1:0.132: Freeing device [ 536.095287][ T9146] hpfs: hpfs_map_4sectors(): unaligned read [ 536.095412][ T9146] hpfs: filesystem error: unable to find root dir [ 536.157230][ T8699] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 536.232015][ T9146] hpfs: hpfs_map_4sectors(): unaligned read [ 536.232359][ T9146] hpfs: hpfs_map_sector(): read error [ 536.233587][ T9146] hpfs: hpfs_map_4sectors(): unaligned read [ 536.233677][ T9146] hpfs: hpfs_map_sector(): read error [ 536.234981][ T9146] hpfs: hpfs_map_4sectors(): unaligned read [ 536.239757][ T9146] hpfs: hpfs_map_sector(): read error [ 536.664344][ T8699] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 537.367653][ T8699] ueagle-atm 9-1:0.125: usbatm_usb_probe: bind failed: -19! [ 537.665473][ T8699] usb 9-1: USB disconnect, device number 2 [ 538.391224][ T4212] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.513711][ T4212] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.623195][ T4212] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.814561][ T4212] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.406712][ T4212] bridge_slave_1: left allmulticast mode [ 539.412803][ T4212] bridge_slave_1: left promiscuous mode [ 539.419555][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.495594][ T4212] bridge_slave_0: left allmulticast mode [ 539.501655][ T4212] bridge_slave_0: left promiscuous mode [ 539.508224][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.872010][ T9169] loop6: detected capacity change from 0 to 1024 [ 539.904356][ T9169] EXT4-fs: Ignoring removed mblk_io_submit option [ 539.950257][ T9169] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 540.047967][ T9169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.769015][ T7197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.882628][ T4212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.960946][ T4212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.064707][ T4212] bond0 (unregistering): Released all slaves [ 541.984472][ T4212] hsr_slave_0: left promiscuous mode [ 541.996239][ T4212] hsr_slave_1: left promiscuous mode [ 542.003968][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.011783][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.034957][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.042801][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.060129][ T8699] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 542.136081][ T4212] veth1_macvtap: left promiscuous mode [ 542.142327][ T4212] veth0_macvtap: left promiscuous mode [ 542.153959][ T4212] veth1_vlan: left promiscuous mode [ 542.159583][ T4212] veth0_vlan: left promiscuous mode [ 542.273633][ T8699] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.284179][ T8699] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.599002][ T8699] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 542.608886][ T8699] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.617370][ T8699] usb 9-1: SerialNumber: syz [ 542.977066][ T8699] usb 9-1: 0:2 : does not exist [ 543.230671][ T8699] usb 9-1: USB disconnect, device number 3 [ 543.599733][ T4212] team0 (unregistering): Port device team_slave_1 removed [ 543.707255][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.746062][ T4212] team0 (unregistering): Port device team_slave_0 removed [ 544.182975][ T9195] loop4: detected capacity change from 0 to 4096 [ 544.525536][ T9195] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 544.526774][ T9195] ntfs3(loop4): ino=1a, mi_enum_attr [ 544.527232][ T9195] ntfs3(loop4): ino=1a, mi_enum_attr [ 544.527333][ T9195] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 544.597170][ T9195] ntfs3(loop4): ino=1a, mi_enum_attr [ 545.156617][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.165925][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.492739][ T9201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.520642][ T9201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.776413][ T9206] loop4: detected capacity change from 0 to 512 [ 545.959817][ T9206] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 546.643811][ T140] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.708519][ T140] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.791644][ T140] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.811101][ T9206] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 546.844643][ T140] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.620459][ T5849] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 549.844603][ T5849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.855565][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.867303][ T9244] loop8: detected capacity change from 0 to 64 [ 549.945428][ T9244] BFS-fs: bfs_iget(): Unknown vtype=2562 loop8:00000002 [ 549.971604][ T5849] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 549.981177][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.990045][ T5849] usb 5-1: SerialNumber: syz [ 550.046636][ T9244] overlayfs: failed to resolve './bus': -2 [ 550.359681][ T5849] usb 5-1: 0:2 : does not exist [ 550.528831][ T5849] usb 5-1: USB disconnect, device number 18 [ 550.822508][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.618071][ T9268] loop8: detected capacity change from 0 to 1024 [ 552.895378][ T9268] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 552.910225][ T9268] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 552.921521][ T9268] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 553.124503][ T9268] EXT4-fs error (device loop8): ext4_get_journal_inode:5849: inode #5: comm syz.8.975: unexpected bad inode w/o EXT4_IGET_BAD [ 553.257450][ T9268] EXT4-fs (loop8): no journal found [ 553.263098][ T9268] EXT4-fs (loop8): can't get journal size [ 553.383390][ T9268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 553.576179][ T5849] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 553.799187][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 553.839270][ T5849] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 553.847740][ T5849] usb 5-1: config 0 has no interface number 0 [ 553.854238][ T5849] usb 5-1: config 0 interface 125 has no altsetting 0 [ 553.870725][ T5849] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 553.880204][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.888393][ T5849] usb 5-1: Product: syz [ 553.892965][ T5849] usb 5-1: Manufacturer: syz [ 553.897736][ T5849] usb 5-1: SerialNumber: syz [ 553.948715][ T5849] usb 5-1: config 0 descriptor?? [ 554.224697][ T5849] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 554.491973][ T9288] loop6: detected capacity change from 0 to 4096 [ 554.541619][ T9288] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 554.880092][ T5849] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 554.920741][ T9288] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 554.927597][ T9288] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 555.023408][ T9288] ntfs3(loop6): ino=1e, mi_enum_attr [ 555.029076][ T9288] ntfs3(loop6): ino=1e, mi_enum_attr [ 555.294450][ T140] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 555.330727][ T7197] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 555.337678][ T7197] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 555.345608][ T7197] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 555.362020][ T3477] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 555.575889][ T5849] ueagle-atm 5-1:0.125: usbatm_usb_probe: bind failed: -19! [ 555.787942][ T5849] usb 5-1: USB disconnect, device number 19 [ 556.147204][ T9296] loop6: detected capacity change from 0 to 764 [ 556.921559][ T9302] sctp: [Deprecated]: syz.7.985 (pid 9302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.921559][ T9302] Use struct sctp_sack_info instead [ 560.348387][ T9327] binder: 9325:9327 ioctl c0306201 0 returned -14 [ 562.625545][ T9349] sctp: [Deprecated]: syz.7.997 (pid 9349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.625545][ T9349] Use struct sctp_sack_info instead [ 564.606882][ T9368] loop7: detected capacity change from 0 to 2048 [ 564.735410][ T9372] binder: 9371:9372 ioctl c0306201 0 returned -14 [ 564.801904][ T9368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.817363][ T9368] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.070593][ T9368] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1002'. [ 565.407296][ T8632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.894285][ T9379] loop6: detected capacity change from 0 to 4096 [ 565.954551][ T9379] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 566.147391][ T9379] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 567.650780][ T9402] loop6: detected capacity change from 0 to 2048 [ 567.712448][ T9402] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 567.720564][ T9402] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 568.445286][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 568.457604][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 568.473069][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 568.550930][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 568.584833][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 568.762832][ T9421] binder: 9420:9421 ioctl 5000943a 0 returned -22 [ 569.300073][ T9424] binder: 9422:9424 ioctl c0306201 0 returned -14 [ 570.397218][ T9445] loop6: detected capacity change from 0 to 256 [ 570.500825][ T9418] chnl_net:caif_netlink_parms(): no params data found [ 570.647019][ T5805] Bluetooth: hci4: command tx timeout [ 572.371644][ T9471] binder: 9468:9471 ioctl 5000943a 0 returned -22 [ 572.636809][ T9476] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1030'. [ 572.710334][ T5805] Bluetooth: hci4: command tx timeout [ 572.779176][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.787117][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.794995][ T9418] bridge_slave_0: entered allmulticast mode [ 572.805093][ T9418] bridge_slave_0: entered promiscuous mode [ 572.989613][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.997250][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.005150][ T9418] bridge_slave_1: entered allmulticast mode [ 573.014599][ T9418] bridge_slave_1: entered promiscuous mode [ 573.608877][ T9418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.750906][ T9418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.120286][ T9493] loop4: detected capacity change from 0 to 1024 [ 574.191834][ T9418] team0: Port device team_slave_0 added [ 574.250778][ T9493] hfsplus: failed to load catalog file [ 574.286266][ T9418] team0: Port device team_slave_1 added [ 574.403224][ T9497] ===================================================== [ 574.410634][ T9497] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a2d/0x1fc0 [ 574.418910][ T9497] bpf_prog_run_generic_xdp+0x1a2d/0x1fc0 [ 574.425136][ T9497] do_xdp_generic+0xd52/0x1690 [ 574.430190][ T9497] tun_get_user+0x506b/0x6c60 [ 574.435041][ T9497] tun_chr_write_iter+0x3e9/0x5c0 [ 574.440349][ T9497] vfs_write+0xbe2/0x15d0 [ 574.444867][ T9497] __ia32_sys_write+0x1f9/0x4d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 574.450156][ T9497] ia32_sys_call+0x3d5e/0x4340 [ 574.455120][ T9497] __do_fast_syscall_32+0x154/0x330 [ 574.460745][ T9497] do_fast_syscall_32+0x38/0x80 [ 574.465781][ T9497] do_SYSENTER_32+0x1f/0x30 [ 574.470656][ T9497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.477159][ T9497] [ 574.479652][ T9497] Uninit was stored to memory at: [ 574.485047][ T9497] pskb_expand_head+0x310/0x15d0 [ 574.490401][ T9497] do_xdp_generic+0xa79/0x1690 [ 574.495339][ T9497] tun_get_user+0x506b/0x6c60 [ 574.500339][ T9497] tun_chr_write_iter+0x3e9/0x5c0 [ 574.505528][ T9497] vfs_write+0xbe2/0x15d0 [ 574.510184][ T9497] __ia32_sys_write+0x1f9/0x4d0 [ 574.515221][ T9497] ia32_sys_call+0x3d5e/0x4340 [ 574.520334][ T9497] __do_fast_syscall_32+0x154/0x330 [ 574.525740][ T9497] do_fast_syscall_32+0x38/0x80 [ 574.530944][ T9497] do_SYSENTER_32+0x1f/0x30 [ 574.535644][ T9497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.542324][ T9497] [ 574.544742][ T9497] Uninit was created at: [ 574.549314][ T9497] __kmalloc_node_track_caller_noprof+0xb77/0x1c90 [ 574.556100][ T9497] kmalloc_reserve+0x22f/0x4b0 [ 574.561133][ T9497] __alloc_skb+0x805/0x1040 [ 574.565802][ T9497] alloc_skb_with_frags+0xc5/0xa60 [ 574.571178][ T9497] sock_alloc_send_pskb+0xacc/0xc60 [ 574.576567][ T9497] tun_get_user+0x1142/0x6c60 [ 574.581519][ T9497] tun_chr_write_iter+0x3e9/0x5c0 [ 574.586714][ T9497] vfs_write+0xbe2/0x15d0 [ 574.591330][ T9497] __ia32_sys_write+0x1f9/0x4d0 [ 574.596351][ T9497] ia32_sys_call+0x3d5e/0x4340 [ 574.601414][ T9497] __do_fast_syscall_32+0x154/0x330 [ 574.606833][ T9497] do_fast_syscall_32+0x38/0x80 [ 574.611979][ T9497] do_SYSENTER_32+0x1f/0x30 [ 574.616661][ T9497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.623283][ T9497] [ 574.625724][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.4.1035 Tainted: G L syzkaller #0 PREEMPT(none) [ 574.636866][ T9497] Tainted: [L]=SOFTLOCKUP [ 574.641369][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.651650][ T9497] ===================================================== [ 574.658671][ T9497] Disabling lock debugging due to kernel taint [ 574.665033][ T9497] Kernel panic - not syncing: kmsan.panic set ... [ 574.671580][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.4.1035 Tainted: G B L syzkaller #0 PREEMPT(none) [ 574.682632][ T9497] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 574.688269][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.698460][ T9497] Call Trace: [ 574.701832][ T9497] [ 574.704844][ T9497] __dump_stack+0x26/0x30 [ 574.709349][ T9497] dump_stack_lvl+0x50/0x1c0 [ 574.714187][ T9497] ? dump_stack+0x12/0x25 [ 574.718693][ T9497] dump_stack+0x1e/0x25 [ 574.723095][ T9497] vpanic+0x435/0xd30 [ 574.727269][ T9497] panic+0x15d/0x160 [ 574.731378][ T9497] kmsan_report+0x31c/0x320 [ 574.736074][ T9497] ? __msan_warning+0x1b/0x30 [ 574.740934][ T9497] ? bpf_prog_run_generic_xdp+0x1a2d/0x1fc0 [ 574.747078][ T9497] ? do_xdp_generic+0xd52/0x1690 [ 574.752202][ T9497] ? tun_get_user+0x506b/0x6c60 [ 574.757224][ T9497] ? tun_chr_write_iter+0x3e9/0x5c0 [ 574.762607][ T9497] ? vfs_write+0xbe2/0x15d0 [ 574.767277][ T9497] ? __ia32_sys_write+0x1f9/0x4d0 [ 574.772562][ T9497] ? ia32_sys_call+0x3d5e/0x4340 [ 574.777706][ T9497] ? __do_fast_syscall_32+0x154/0x330 [ 574.783272][ T9497] ? do_fast_syscall_32+0x38/0x80 [ 574.788498][ T9497] ? do_SYSENTER_32+0x1f/0x30 [ 574.793363][ T9497] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.800054][ T9497] ? ___bpf_prog_run+0xea65/0xeba0 [ 574.805360][ T9497] ? __bpf_prog_run32+0xc2/0xf0 [ 574.810388][ T9497] ? kmsan_get_metadata+0xfb/0x160 [ 574.815794][ T9497] __msan_warning+0x1b/0x30 [ 574.820478][ T9497] bpf_prog_run_generic_xdp+0x1a2d/0x1fc0 [ 574.826394][ T9497] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 574.832472][ T9497] do_xdp_generic+0xd52/0x1690 [ 574.837512][ T9497] ? tun_get_user+0x4bf1/0x6c60 [ 574.842538][ T9497] ? filter_irq_stacks+0x49/0x190 [ 574.847753][ T9497] ? kmsan_get_metadata+0xfb/0x160 [ 574.853087][ T9497] ? tun_get_user+0x4fea/0x6c60 [ 574.858118][ T9497] tun_get_user+0x506b/0x6c60 [ 574.862987][ T9497] ? stack_depot_save_flags+0x35/0x790 [ 574.868656][ T9497] ? kmsan_get_metadata+0xfb/0x160 [ 574.874045][ T9497] ? kmsan_get_metadata+0xfb/0x160 [ 574.879377][ T9497] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 574.886022][ T9497] tun_chr_write_iter+0x3e9/0x5c0 [ 574.891349][ T9497] vfs_write+0xbe2/0x15d0 [ 574.895962][ T9497] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 574.901688][ T9497] __ia32_sys_write+0x1f9/0x4d0 [ 574.906716][ T9497] ia32_sys_call+0x3d5e/0x4340 [ 574.911655][ T9497] __do_fast_syscall_32+0x154/0x330 [ 574.917044][ T9497] do_fast_syscall_32+0x38/0x80 [ 574.922073][ T9497] do_SYSENTER_32+0x1f/0x30 [ 574.926758][ T9497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.933261][ T9497] RIP: 0023:0xf703d539 [ 574.937429][ T9497] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 574.957182][ T9497] RSP: 002b:00000000f540c520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 574.965749][ T9497] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000300 [ 574.973842][ T9497] RDX: 000000000000fdef RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 574.981914][ T9497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.989981][ T9497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 574.998043][ T9497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.006144][ T9497] [ 575.009651][ T9497] Kernel Offset: disabled [ 575.014018][ T9497] Rebooting in 86400 seconds..